Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2PX-7odJkejQw-8OKUB01AqhnGo.roa
File: 2PX-7odJkejQw-8OKUB01AqhnGo.roa (raw, json)
Hash identifier: zy7JigvGzFajqveYbZrnPffRjsuK2xBrhKURws/0wrU=
Subject key identifier: D8:F5:FE:EE:87:49:91:E8:D0:C3:EF:0E:29:40:74:D4:0A:A1:9C:6A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B00
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2PX-7odJkejQw-8OKUB01AqhnGo.roa
Signing time: Fri 01 Sep 2023 10:08:33 +0000
ROA not before: Fri 01 Sep 2023 10:08:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11008 (0x2b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D8F5FEEE874991E8D0C3EF0E294074D40AA19C6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c7:91:be:d1:b6:c1:e5:ac:ec:d3:5e:c9:68:
df:d7:db:a9:b1:e7:08:3d:b4:33:04:5f:22:f2:aa:
38:29:43:3d:ab:2d:eb:cb:db:86:ca:49:a1:84:69:
3d:e5:ed:6d:fc:0d:9e:51:2b:57:51:34:5c:df:b3:
37:e9:91:e0:e9:ba:45:2e:0f:ff:37:f9:b5:cf:98:
0b:54:bb:9a:be:f2:c2:45:ec:9f:83:21:cd:d5:78:
a5:9b:48:c3:0c:0e:ae:66:f7:b7:a8:b4:56:3b:06:
63:29:61:28:99:54:00:96:36:2e:eb:18:e0:97:7b:
90:42:1b:4a:31:e8:99:6c:7a:f6:14:f0:91:ba:61:
a1:35:cc:9f:84:dd:33:b0:a2:0a:1f:a2:79:4d:c5:
eb:3e:d8:81:5e:1b:1e:a0:ce:db:5a:79:37:ad:16:
73:16:49:8a:58:3d:ca:34:12:09:bf:04:dd:d4:8b:
95:31:45:1e:0b:2a:56:6d:42:17:f1:d0:ba:e1:58:
04:84:6d:65:e2:ff:f2:84:58:4c:e0:93:95:f5:0d:
25:20:d8:5f:2b:ea:db:d1:22:93:bb:32:1f:85:d2:
ee:1f:db:6d:dc:36:b9:19:0b:2e:94:49:a9:ce:07:
90:00:e4:e8:8f:91:5d:16:ea:66:c4:b1:b9:ea:09:
5f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F5:FE:EE:87:49:91:E8:D0:C3:EF:0E:29:40:74:D4:0A:A1:9C:6A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2PX-7odJkejQw-8OKUB01AqhnGo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.45.0/24
Signature Algorithm: sha256WithRSAEncryption
88:35:b8:55:02:62:6a:e7:ac:af:ba:d3:f7:d5:ad:ad:3c:1c:
2a:3f:df:49:59:e0:37:1b:c9:57:f1:1a:36:c6:48:3d:ff:75:
d0:98:4a:89:ac:a0:56:bb:3a:e3:b3:01:fe:44:68:6c:b8:cc:
42:b4:3a:5f:87:31:4f:c7:c1:f4:40:25:cb:de:e5:65:fc:cc:
72:13:08:74:9b:e6:33:6f:2f:27:75:00:08:54:a7:6f:a3:e0:
b0:fd:70:58:aa:95:94:bd:04:1a:76:b0:d8:57:fd:39:5f:2c:
fb:b1:5e:08:f9:8c:52:b2:f5:e2:ff:a5:0a:f8:bd:60:0a:34:
46:dd:72:ce:8f:69:72:d4:a4:f1:30:f9:9f:13:9a:d4:d3:c1:
86:01:21:c2:7b:d2:b1:77:1f:d1:fd:ff:d6:b2:c1:9e:5f:66:
7e:60:8c:24:8e:33:57:36:a0:c4:77:8a:53:a2:72:bd:ed:39:
2e:b5:07:32:e3:47:81:51:29:e0:f1:3a:cc:cc:fc:04:a6:36:
86:ca:90:4f:a0:13:18:58:a2:e5:67:06:10:09:bb:65:4e:50:
59:21:bb:fd:7c:42:5b:fc:b2:f3:9e:a0:45:2a:98:5b:cf:5d:
dc:52:b2:26:36:67:09:49:94:71:0b:f6:a7:bf:c4:a1:84:46:
6e:6c:08:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org