Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-vU7jEsnVwnTgozz2LR1JAexRw.roa
File: 5-vU7jEsnVwnTgozz2LR1JAexRw.roa (raw, json)
Hash identifier: 7VLL8pZTV87gZ9XwxbIRvb7LcGQPb52wSSsjx5ZRhlk=
Subject key identifier: E7:EB:D4:EE:31:2C:9D:5C:27:4E:0A:33:CF:62:D1:D4:90:1E:C5:1C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2890
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-vU7jEsnVwnTgozz2LR1JAexRw.roa
Signing time: Fri 01 Sep 2023 10:05:30 +0000
ROA not before: Fri 01 Sep 2023 10:05:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10384 (0x2890)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E7EBD4EE312C9D5C274E0A33CF62D1D4901EC51C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:e3:b0:45:96:ac:6a:a7:b8:2c:2e:c5:c9:
26:ca:08:a6:ae:7e:fc:c8:83:c0:b2:26:f5:89:7a:
f6:a0:99:20:d9:09:a2:60:db:dc:a5:84:4b:2a:84:
93:ab:7d:26:26:6f:bd:68:8c:9b:61:57:68:e6:e4:
cb:98:ed:d2:b4:31:7b:9a:75:ab:b3:59:ff:48:bd:
6d:20:7e:b5:61:64:35:3a:7f:86:80:4d:c9:49:ad:
d6:34:35:93:87:b2:a2:63:57:4e:52:1d:d4:49:f2:
24:99:03:31:93:a9:28:a6:39:b3:55:cf:ed:cb:89:
7a:e9:ac:2d:20:58:de:ff:39:2c:91:08:78:ea:f3:
36:b7:b5:d1:67:a2:f4:38:04:19:56:1b:b5:ea:4e:
5d:b5:3b:98:cb:76:11:db:b3:4c:74:64:db:c5:dc:
8a:28:bd:ee:0e:ba:33:42:89:5a:70:a6:e5:e8:e7:
26:f2:86:bc:ad:2f:a4:ff:c2:2a:d7:4a:dd:b0:46:
1c:b5:e5:e2:c3:19:05:0d:45:41:0d:cf:16:a6:92:
64:c8:33:89:8f:f2:75:f7:90:41:e0:e3:5d:cc:26:
13:8f:80:6d:27:ec:41:1b:f0:c9:02:4b:3c:2f:aa:
3a:8d:0a:85:96:db:a6:c1:a4:44:26:ba:a2:f8:08:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EB:D4:EE:31:2C:9D:5C:27:4E:0A:33:CF:62:D1:D4:90:1E:C5:1C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5-vU7jEsnVwnTgozz2LR1JAexRw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3f:fb:01:a8:15:22:90:85:9b:e8:75:42:48:c7:5b:dc:ab:ef:
da:81:20:18:a2:3d:6e:26:46:dd:9d:48:54:7c:29:77:67:08:
6e:ef:33:39:ae:92:d6:f9:88:4a:c4:23:83:aa:38:ed:88:a5:
9a:db:59:77:6d:17:f3:9e:06:c0:bb:93:e7:cb:8b:5e:91:06:
a7:c8:f7:eb:33:fd:22:4b:da:0a:19:b7:25:97:92:7e:a2:66:
e5:24:86:22:37:a9:da:0e:06:a0:29:31:72:27:68:54:cb:25:
b5:e8:f4:4c:e1:8f:17:bf:d1:64:d8:fe:16:e0:ea:70:84:b3:
fb:16:33:fb:a5:8e:29:93:56:8f:76:0d:c5:23:df:5f:02:bb:
0b:36:e6:4d:59:e2:e8:cf:7f:e2:35:a0:d8:2a:35:e3:da:a2:
77:db:da:0a:39:66:33:82:bf:63:54:de:1e:f7:64:f5:d7:9e:
9c:94:43:b3:63:51:62:bc:f4:b2:12:b4:54:62:ee:2c:a6:de:
0c:e0:72:69:2c:5d:09:c9:7b:3d:8e:b3:74:29:84:c3:f4:56:
19:4a:b7:07:2f:ed:33:31:0d:98:20:6f:61:9a:4a:c3:3f:e1:
80:17:ff:91:ba:44:a7:f2:c9:40:af:0a:d6:27:37:09:da:f0:
a4:2a:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org