Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qjz-0MlIKs2lPyOs70WoG4oXj8.roa
File: 2qjz-0MlIKs2lPyOs70WoG4oXj8.roa (raw, json)
Hash identifier: 5mWEQYA6Fb6E6uzlAtRNidyK5t0j1vLaulK9jMJQ1ZQ=
Subject key identifier: DA:A8:F3:FB:43:25:20:AB:36:94:FC:8E:B3:BD:16:A0:6E:28:5E:3F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29F2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qjz-0MlIKs2lPyOs70WoG4oXj8.roa
Signing time: Fri 01 Sep 2023 10:07:17 +0000
ROA not before: Fri 01 Sep 2023 10:07:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10738 (0x29f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DAA8F3FB432520AB3694FC8EB3BD16A06E285E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:86:b9:a6:9f:fc:ac:82:8d:5b:4d:05:2a:ce:
29:87:8a:87:e0:18:14:5a:6f:50:ef:6a:a4:4a:be:
29:2e:87:9f:f4:18:38:db:01:ae:e4:fb:06:c2:bd:
c7:96:94:e6:42:2a:83:f4:87:8b:2b:3b:cd:46:b8:
11:5b:f3:55:3c:be:e1:bb:57:4a:f1:39:00:11:b9:
6e:6d:d8:de:c2:a4:8b:fa:93:10:a9:bd:0c:99:0e:
6c:49:9c:57:bd:b7:d3:f9:0e:e3:82:eb:95:80:ee:
71:e9:04:fa:fd:ce:4a:3c:59:bc:13:d4:50:42:39:
c6:d4:8a:e8:45:83:1e:b4:44:88:d8:a9:8c:98:4a:
24:c6:75:34:3f:3b:09:c3:5f:2e:b0:80:57:12:09:
bf:5b:2d:b6:8e:e1:7d:78:a8:c1:a2:82:8e:41:9d:
9f:67:44:c9:f4:e9:38:d4:ba:27:7e:6a:76:74:31:
10:7f:c2:aa:d7:57:e2:98:33:87:9e:d5:a2:01:44:
01:16:c5:cf:c2:67:6f:3d:bd:f0:a9:46:69:71:56:
04:ad:5a:1e:db:6c:f5:d4:79:2c:e7:31:fe:ce:12:
62:2f:1c:0f:93:40:c5:d1:b8:02:be:18:22:48:69:
e2:98:85:d6:9d:dd:7f:da:c5:4a:f0:61:f8:5e:ed:
62:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A8:F3:FB:43:25:20:AB:36:94:FC:8E:B3:BD:16:A0:6E:28:5E:3F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2qjz-0MlIKs2lPyOs70WoG4oXj8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.150.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:ef:e4:e5:c3:41:19:40:50:f0:18:5b:17:ad:7c:d9:cc:6a:
8a:11:86:b2:36:d5:01:50:70:b7:f0:bc:fa:7d:cf:6a:b1:18:
4d:7f:26:9c:d3:15:44:74:da:3b:bf:75:64:10:a1:b2:82:4f:
6d:4b:25:e4:c5:5b:a3:bc:53:56:24:ce:36:50:8f:01:a6:9c:
e0:15:8c:0e:5c:ef:7d:f2:80:d5:16:cc:56:67:6c:39:a6:8f:
8b:af:9c:93:57:40:c7:e9:5d:6b:aa:b0:8c:f5:66:ec:ed:be:
ee:8a:7a:ce:a5:0c:59:3b:f5:8d:a3:6f:3a:91:f2:4d:ec:91:
82:8a:f4:3d:77:d4:c1:12:6c:e5:1c:a5:39:75:bb:91:f3:5a:
02:37:a2:08:26:5d:68:76:82:9c:8b:d7:1f:7d:c8:0a:60:ea:
21:b8:95:a8:c9:72:ac:bf:c2:2f:55:65:c4:ca:3a:57:02:57:
54:08:99:5a:93:78:c7:d5:08:db:de:83:9c:0d:36:d8:23:9f:
53:31:22:10:71:f0:f9:2d:23:d6:46:c8:a4:bc:6f:b9:a4:50:
a4:6b:c4:17:c3:b7:ec:5a:1f:28:6d:4c:57:c1:04:87:cd:8b:
bf:b1:83:59:1c:90:ad:e7:a3:8f:1c:91:a6:09:88:fa:81:2e:
65:2f:6a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org