Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0w3gY8vFREPdMizIe2RK_cASTwQ.roa
File: 0w3gY8vFREPdMizIe2RK_cASTwQ.roa (raw, json)
Hash identifier: 2Q6cVwnAuZvwMzfy7qFMEvq87FwClXD6xmimXNcIBmc=
Subject key identifier: D3:0D:E0:63:CB:C5:44:43:DD:32:2C:C8:7B:64:4A:FD:C0:12:4F:04
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0w3gY8vFREPdMizIe2RK_cASTwQ.roa
Signing time: Fri 01 Sep 2023 10:04:31 +0000
ROA not before: Fri 01 Sep 2023 10:04:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10181 (0x27c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D30DE063CBC54443DD322CC87B644AFDC0124F04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:36:59:76:f2:bf:25:95:fa:ce:eb:81:13:
05:86:3c:56:8f:96:7c:cd:64:ee:be:32:68:c7:47:
05:a8:cf:ae:b6:90:b7:95:d4:22:e6:c7:89:24:72:
cf:ea:52:36:53:b2:cd:40:ef:aa:b4:46:f7:58:27:
70:27:d1:2f:4f:18:e0:c0:6b:03:76:01:fc:fc:4d:
dc:4e:b5:93:20:30:f8:0e:3e:ac:b4:b8:35:50:b5:
de:24:ed:ba:98:d1:38:11:0c:f8:9a:d8:76:e5:2d:
96:0e:e9:a3:8f:cf:d6:48:db:35:4b:14:63:0b:2c:
0c:9b:b0:b4:f3:99:70:05:2a:00:0c:20:29:1c:ca:
b6:c1:e2:3c:99:a0:7b:ba:06:ac:1a:55:b6:25:af:
1c:76:eb:36:0b:63:0d:05:a3:ab:8d:3e:04:7a:c2:
7d:a2:cf:ef:3e:3e:67:75:21:d7:26:7f:d3:ef:de:
f8:f7:d7:9e:ab:14:80:77:29:62:22:98:05:a4:73:
e1:58:d9:2f:f6:66:b4:86:b3:aa:32:67:c6:8f:7b:
c2:ea:e9:df:cf:6b:dc:9c:0d:f4:dc:84:02:a4:7f:
73:98:b7:8c:83:fa:cb:60:98:80:60:85:99:f4:71:
05:c3:d1:b9:25:53:93:68:c8:25:49:6e:d1:cd:be:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:E0:63:CB:C5:44:43:DD:32:2C:C8:7B:64:4A:FD:C0:12:4F:04
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0w3gY8vFREPdMizIe2RK_cASTwQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:dc:7a:74:5c:6a:9d:4d:3d:c0:4d:ad:c3:f8:b1:59:d7:3b:
b5:59:c1:7d:a1:2f:23:9c:3a:6a:23:6c:0c:a9:be:ad:a1:03:
31:c1:f8:e9:6b:07:71:2e:fe:9f:12:6d:98:f8:8b:0b:7d:bf:
4b:10:02:ba:bb:39:3b:91:7b:35:f3:75:b2:82:21:8e:31:0d:
eb:d4:52:80:2f:17:1f:bf:01:f3:f9:4d:ee:ca:22:0a:52:c0:
98:0f:66:b9:0b:72:96:92:e5:0f:05:cd:68:ef:00:6e:8d:da:
4d:df:60:30:42:87:e7:3c:33:08:65:c9:ac:49:95:d0:ab:cf:
8c:b5:ad:0c:8c:60:f5:ba:ac:73:97:34:f7:cc:f2:4d:64:ac:
7a:12:94:4c:ff:b2:b0:b2:12:3c:fe:c1:23:57:58:53:b9:26:
7c:4f:74:90:c6:dc:e3:83:0d:9a:c3:08:f9:59:40:de:a1:c4:
b8:16:76:bd:fd:e4:7c:83:7f:4e:33:2e:28:ac:5c:2b:66:2a:
5e:97:0f:a4:10:8d:c3:47:f3:41:03:15:86:bc:64:12:0f:5b:
f5:79:a0:a6:83:61:b3:f1:87:c4:37:33:56:d8:c5:81:12:69:
c2:74:80:51:a1:fc:0b:e9:e4:78:be:ae:bc:eb:04:db:e6:eb:
3a:92:b5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org