Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3WNp5kQA_K3cqP7R51JV-3nNr2Y.roa
File: 3WNp5kQA_K3cqP7R51JV-3nNr2Y.roa (raw, json)
Hash identifier: 8ns7S0b8wKtGcEH0GGohbltp9jRg+ODHbSU/Rms6AX0=
Subject key identifier: DD:63:69:E6:44:00:FC:AD:DC:A8:FE:D1:E7:52:55:FB:79:CD:AF:66
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A19
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3WNp5kQA_K3cqP7R51JV-3nNr2Y.roa
Signing time: Fri 01 Sep 2023 10:07:30 +0000
ROA not before: Fri 01 Sep 2023 10:07:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10777 (0x2a19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DD6369E64400FCADDCA8FED1E75255FB79CDAF66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:37:04:9c:2b:9b:f5:10:7b:14:81:3f:05:88:
14:67:51:df:b1:99:e9:a2:01:a5:d9:7b:0a:bf:0e:
6d:13:76:43:3b:b8:50:3e:8c:2f:1e:06:34:cd:24:
db:4d:b3:2c:83:d4:13:90:ee:fc:b4:16:d9:d9:a0:
d8:8d:85:b3:b6:86:31:f5:cb:8a:a4:49:f8:3e:b7:
eb:00:ee:9a:66:e5:6d:63:1d:55:87:d3:7e:48:0b:
0a:ac:cb:ec:4c:9d:3f:a0:f4:0f:9f:93:0e:75:e3:
99:98:3f:0c:c4:b4:49:23:b1:88:2c:f6:93:e6:0c:
95:21:c5:71:ec:7f:73:0a:e9:bf:b9:13:5b:ca:4f:
66:95:b7:24:04:2c:1c:70:b5:39:37:6d:9a:c9:2d:
b7:54:07:ee:ff:89:1f:75:6b:94:99:c5:39:61:e4:
40:89:cb:23:5a:39:84:1c:a4:7c:ea:a1:74:ad:07:
48:04:13:de:01:e1:d4:93:76:84:6d:65:2e:7e:6f:
a0:ac:6a:36:3c:00:8d:a2:af:17:15:28:86:fb:fb:
f6:b8:8e:aa:83:c3:e5:78:0f:87:c7:41:4f:c6:af:
fe:5f:e3:ec:85:ff:7e:bd:13:3a:8c:cb:ca:21:7e:
41:a6:72:28:49:82:f1:2d:13:58:f0:b1:c3:19:f8:
46:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:63:69:E6:44:00:FC:AD:DC:A8:FE:D1:E7:52:55:FB:79:CD:AF:66
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3WNp5kQA_K3cqP7R51JV-3nNr2Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.88.0/22
Signature Algorithm: sha256WithRSAEncryption
96:6e:51:f2:a0:07:b9:0d:34:82:3c:1f:7c:b2:fa:fa:db:45:
8f:8b:29:ac:09:60:3e:9f:ef:8b:8d:fe:6e:32:b6:ad:30:9f:
51:6d:89:6b:61:58:2d:d8:6e:c4:10:27:00:ef:81:fc:0d:eb:
a2:cd:8b:a0:fe:fe:27:3c:bf:2f:85:96:9f:aa:31:c3:b4:b6:
1f:25:d6:bb:40:85:28:c6:39:bd:3d:b3:3e:4b:e9:db:6b:5c:
f6:f0:f6:17:ca:3b:f1:27:a6:7d:86:23:c5:b9:ee:5c:ef:7e:
a7:4c:82:1a:5d:4a:b6:bc:16:5a:a1:a7:03:5c:d5:7f:2c:db:
31:68:d1:42:5b:3f:86:c8:12:0b:20:68:e5:90:82:09:9b:69:
93:31:3a:60:c7:4c:cb:99:0a:00:33:fd:57:4f:50:95:d6:00:
0e:b7:0e:49:58:ac:00:4e:81:7a:86:e2:d9:86:00:45:d6:c1:
60:98:2b:06:22:0b:b6:68:a0:5c:97:9f:15:3e:fd:a4:c1:46:
c0:41:2e:57:4f:bc:e0:e3:ba:a3:aa:fc:53:94:4c:e8:21:04:
df:bf:b0:d2:7e:cb:20:25:76:b2:e9:79:4f:4d:e6:51:e6:79:
c3:fd:6a:f7:f5:56:51:a2:77:69:6b:4e:83:8d:ad:e0:93:ef:
a3:d6:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org