Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3CK4fnNwTYpGAFWq3eo10Fk4ago.roa
File: 3CK4fnNwTYpGAFWq3eo10Fk4ago.roa (raw, json)
Hash identifier: ZulirJNW3MXkV7+Aii9qr9PfloIWmvrBt4DvM/vLmlo=
Subject key identifier: DC:22:B8:7E:73:70:4D:8A:46:00:55:AA:DD:EA:35:D0:59:38:6A:0A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29DA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3CK4fnNwTYpGAFWq3eo10Fk4ago.roa
Signing time: Fri 01 Sep 2023 10:07:10 +0000
ROA not before: Fri 01 Sep 2023 10:07:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10714 (0x29da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DC22B87E73704D8A460055AADDEA35D059386A0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:dc:f4:37:ea:24:9a:66:81:53:07:89:98:
0d:5b:ff:2d:dd:fb:70:18:ed:d6:68:56:8f:68:5a:
38:56:82:32:b4:b4:95:7c:4c:a4:80:64:5c:f7:d9:
5a:04:d4:2d:37:57:37:60:9c:11:16:8b:66:39:ed:
e9:45:2c:80:53:6b:18:ba:32:58:e0:37:bb:5a:33:
18:a5:55:1b:02:70:67:8d:c7:35:39:77:ba:d7:9a:
35:d1:5e:7c:d4:98:aa:f2:79:f4:d3:37:d9:01:6f:
5f:c9:35:54:c2:5c:6b:b8:7c:38:b0:a0:d6:b0:5d:
a0:3e:e3:7a:2d:32:40:e5:1f:3b:b6:13:03:9c:fd:
c1:fc:1d:47:b5:5b:93:f8:b2:33:05:b5:9d:f5:25:
85:c3:d8:17:dc:66:f7:9b:e5:c8:c5:5d:7b:4d:a0:
da:31:e1:2d:ce:52:11:3a:21:17:ae:10:92:75:9c:
9a:38:c3:5d:73:6e:2a:7a:82:f9:80:22:2b:01:b9:
28:23:bd:2a:8a:b7:6c:49:a5:6d:4d:c8:8b:81:4c:
fa:aa:90:30:65:21:05:26:93:1c:ee:00:5a:76:b6:
ac:49:18:66:19:a6:bc:55:c5:1b:eb:b0:6a:44:28:
53:76:10:74:1e:4a:83:31:7b:19:72:ad:84:ec:d6:
46:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:22:B8:7E:73:70:4D:8A:46:00:55:AA:DD:EA:35:D0:59:38:6A:0A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3CK4fnNwTYpGAFWq3eo10Fk4ago.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.100.0/22
Signature Algorithm: sha256WithRSAEncryption
03:f7:0e:b6:11:5b:9d:33:a5:08:f6:31:ac:4d:b1:fa:1e:71:
52:d4:bc:43:d1:f9:66:f3:1c:cf:7f:e8:5d:5d:e7:62:e2:26:
11:20:85:78:16:b6:2c:02:2b:55:18:7e:36:5b:b2:80:4d:03:
bb:a1:74:30:01:36:ea:e7:ae:c4:03:30:ad:f1:a3:40:e7:f4:
c3:e0:55:b0:f8:02:f0:fe:cf:ca:4a:10:f5:78:1b:c8:03:2c:
c5:22:65:90:8b:a4:c2:54:69:11:91:8b:de:cb:1c:1a:2e:1e:
79:b3:48:ac:59:50:2f:e7:0a:3f:25:39:a9:50:1d:83:d6:19:
0a:6f:bd:d7:9b:10:16:fa:27:78:24:a4:9e:c9:b8:30:fe:c4:
fc:07:2a:4b:a6:47:f7:04:26:07:c9:c4:11:cc:fd:4e:37:a5:
95:16:a5:32:7a:42:39:68:1b:f3:06:e9:34:00:17:e4:4d:32:
8b:96:0f:33:87:63:55:32:8b:76:42:1c:49:d7:dc:43:5c:09:
12:5d:36:03:58:77:73:b7:17:38:3a:be:37:39:a0:05:b3:4c:
32:df:4a:a3:f3:23:b0:fb:ea:54:43:e0:8d:6d:b7:9d:91:ec:
61:13:c6:4b:e7:c5:be:8f:3c:21:a1:ed:97:ce:56:35:2d:fa:
e2:97:5f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org