Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/18D2YKyhYkQyCi72muzMO-XrFl0.roa
File: 18D2YKyhYkQyCi72muzMO-XrFl0.roa (raw, json)
Hash identifier: vZPoRHaBY+NxwdnNF/sxryZMczHTYxlTZrKAFAsIqUg=
Subject key identifier: D7:C0:F6:60:AC:A1:62:44:32:0A:2E:F6:9A:EC:CC:3B:E5:EB:16:5D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27FB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/18D2YKyhYkQyCi72muzMO-XrFl0.roa
Signing time: Fri 01 Sep 2023 10:04:48 +0000
ROA not before: Fri 01 Sep 2023 10:04:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10235 (0x27fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D7C0F660ACA16244320A2EF69AECCC3BE5EB165D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:44:ee:d2:8a:44:b7:7e:6c:0d:8f:5c:ab:
14:83:ee:34:dc:9d:82:36:f6:8a:19:42:d8:d5:7c:
40:89:b0:3b:70:d7:f9:c0:d1:3a:dd:dc:8c:03:67:
4d:42:45:3d:bf:bc:ac:63:8f:05:bd:56:15:af:82:
fc:7e:e9:d6:de:9e:99:d5:a8:28:69:4b:fa:07:a6:
79:e6:58:e2:a7:1d:9b:50:01:e3:fb:3f:bf:c7:6a:
0b:da:dd:c5:33:e1:35:0f:4f:04:ca:7e:a3:13:1e:
3b:87:da:c9:55:ff:a7:21:43:3d:4e:ca:24:18:27:
cf:87:03:20:30:f6:5b:ff:e0:c4:b2:73:0b:11:02:
dc:0f:88:75:34:2c:48:f9:6e:ff:7f:5d:ca:b9:2d:
59:b8:4e:2c:75:8e:27:b4:9c:8c:c1:7c:55:9a:35:
b9:9b:12:ee:7f:03:04:df:72:89:18:4e:fb:c2:a7:
80:47:8e:4a:81:28:d3:69:4c:48:7c:28:23:1e:5c:
0f:4d:84:6b:e6:db:b3:de:c8:c1:dd:22:0b:92:8a:
38:1e:f0:c4:5f:d2:e5:41:bf:99:ad:80:3a:a4:16:
71:ae:58:cb:e9:a9:24:b0:ff:ad:77:3b:da:4c:5f:
0d:c6:7b:c8:b6:36:fa:16:a8:28:d4:19:e1:6d:d1:
f7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C0:F6:60:AC:A1:62:44:32:0A:2E:F6:9A:EC:CC:3B:E5:EB:16:5D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/18D2YKyhYkQyCi72muzMO-XrFl0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.236.0/23
Signature Algorithm: sha256WithRSAEncryption
30:9b:0d:37:db:57:e0:f8:d5:38:ff:b4:dd:a3:4c:04:ed:fe:
8a:9c:1c:8a:a2:32:ab:5b:89:f0:13:a3:8a:f0:5b:06:55:e7:
da:17:05:04:cd:b8:98:00:c9:22:a9:0e:7a:2c:eb:30:ed:19:
ee:22:5d:76:75:84:a8:c2:27:c2:58:bd:af:87:6f:58:c3:e5:
ee:d1:7e:01:0e:60:9f:da:f7:0f:e4:f8:de:56:02:37:44:09:
0d:6e:96:54:32:fa:cf:17:98:f9:a8:f5:5d:ac:96:7b:e6:73:
40:5e:b8:13:06:77:ad:b4:68:3e:aa:13:fa:99:ad:bc:f2:5a:
df:32:f7:a1:5c:7d:76:2d:63:95:af:8e:01:4e:db:d3:a8:53:
05:a1:2e:9e:62:f4:67:2c:22:6d:25:a0:1a:d6:d4:87:19:f4:
c3:c1:69:77:37:8c:ee:b5:d9:dc:a9:91:d6:2a:b7:56:e6:a0:
11:9f:0b:13:f3:bc:51:4a:8b:48:34:61:69:6d:df:b9:de:21:
f7:7a:b5:21:48:5c:79:b6:5a:c6:3f:1b:94:2a:19:49:62:df:
ce:67:05:5a:0b:a0:b4:2b:35:08:7b:a0:c2:75:06:34:3f:e7:
27:55:50:ea:65:d5:83:b1:f8:8c:e0:6e:a1:96:71:cd:e4:d9:
d0:d3:bf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org