Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oy-IX5peW8-XPbI9hduumkvitis.roa
File: oy-IX5peW8-XPbI9hduumkvitis.roa (raw, json)
Hash identifier: RfSZKpFwhixbvWlQADvG4BsGzVZgj08edwXYWJCPr1A=
Subject key identifier: A3:2F:88:5F:9A:5E:5B:CF:97:3D:B2:3D:85:DB:AE:9A:4B:E2:B6:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3429
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oy-IX5peW8-XPbI9hduumkvitis.roa
Signing time: Mon 10 Feb 2025 13:52:08 +0000
ROA not before: Mon 10 Feb 2025 13:52:08 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13353 (0x3429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:08 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A32F885F9A5E5BCF973DB23D85DBAE9A4BE2B62B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:51:ea:72:33:71:22:af:a2:ae:5b:7e:e7:
3b:99:41:1c:47:8d:f2:2c:f3:6d:68:ef:3f:28:3c:
a1:a9:8f:45:89:b7:2e:f2:13:96:9e:8f:1c:af:88:
57:94:52:0c:e8:aa:9c:97:bc:6d:02:e2:a7:b3:bc:
68:6e:e9:92:6f:56:6c:10:2b:fc:dc:65:2f:c3:fc:
79:aa:17:c8:f2:b7:4a:13:1c:e3:22:b1:21:d0:9d:
04:e3:9d:f3:61:5f:3f:ac:d9:93:c4:de:76:58:90:
32:11:05:62:5b:b0:36:77:b0:5e:61:8f:71:02:32:
dd:bc:bd:3f:59:df:ee:e0:64:e9:2c:9c:f6:cc:5a:
36:53:f4:de:3a:c7:72:1b:62:ec:a7:59:a4:93:12:
cd:7c:12:cc:94:10:39:fc:9e:65:48:a7:59:ef:0d:
8e:a4:c9:e1:2f:c2:fb:9a:f0:36:98:4c:97:76:7b:
cb:a8:77:77:fe:43:65:17:67:7c:a9:ff:2b:41:44:
6d:ed:4d:a7:51:b8:64:82:41:40:9a:13:0f:a9:0f:
b8:72:3b:72:6c:2d:07:0d:5d:7c:18:5d:c7:87:d1:
a9:ba:e2:d2:6c:28:07:c5:15:0a:20:c0:06:2b:4e:
f8:ea:a0:12:4a:bd:2b:17:ce:9d:d5:de:a0:17:27:
37:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2F:88:5F:9A:5E:5B:CF:97:3D:B2:3D:85:DB:AE:9A:4B:E2:B6:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oy-IX5peW8-XPbI9hduumkvitis.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.108.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:42:c9:a1:96:7c:cb:e8:da:9e:0e:8c:21:39:a3:29:77:3e:
99:f9:23:54:9f:29:5c:31:5a:8e:26:3b:e5:6b:4f:3b:a8:0d:
6b:e8:62:b4:38:41:5a:ff:80:a9:2c:45:1a:20:fe:32:45:cb:
91:55:7a:65:6a:6e:ff:fd:af:9f:3e:aa:c9:ea:6a:0c:09:0a:
47:b4:62:19:cd:c4:46:f6:f5:e5:1c:c3:20:64:64:27:eb:75:
50:9e:97:09:d4:3b:e6:77:54:e3:26:ff:c9:55:79:4d:e9:cd:
a8:54:6e:22:75:d9:5e:58:40:b4:0d:88:0d:00:97:1b:08:d1:
63:cc:a8:a9:50:b9:19:48:b3:ca:a2:60:16:68:2a:90:9d:2b:
d1:3d:ee:00:99:7b:57:c5:2b:b7:ac:0b:48:be:29:1e:ef:db:
bf:66:4c:a0:93:58:3e:80:da:70:cd:89:c3:68:71:12:0a:e1:
18:ec:62:9c:a7:5d:9c:c4:9f:f9:3e:61:26:ac:aa:db:d4:cc:
68:96:30:5c:7f:40:bc:91:80:ec:a7:d3:fc:17:a4:8d:e7:cf:
1e:89:6e:46:03:17:c1:e6:80:81:c7:fc:e0:3b:7d:71:1d:08:
c5:fc:2f:f5:e4:0f:57:c4:c5:9e:85:62:1e:df:59:b3:0e:d7:
a6:fc:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:26:59 2025 by rpki-client