Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6AmLxQOmp0WiKzQazUS2NWlnO4Q.roa
File: 6AmLxQOmp0WiKzQazUS2NWlnO4Q.roa (raw, json)
Hash identifier: tzPuW3vJpRkPzxS/gLbTHGZSL4xg3lOMBInHbYQofWE=
Subject key identifier: E8:09:8B:C5:03:A6:A7:45:A2:2B:34:1A:CD:44:B6:35:69:67:3B:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 295F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6AmLxQOmp0WiKzQazUS2NWlnO4Q.roa
Signing time: Fri 01 Sep 2023 10:06:26 +0000
ROA not before: Fri 01 Sep 2023 10:06:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10591 (0x295f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E8098BC503A6A745A22B341ACD44B63569673B84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7c:4d:e1:24:07:32:1a:60:3d:fc:93:93:c9:
68:4c:a3:31:e5:ab:ea:b5:67:a0:84:67:05:7e:61:
92:02:bb:3b:06:7b:31:b7:90:bf:d5:61:9c:b8:b3:
18:a7:bb:2c:b7:92:07:92:df:70:a0:89:63:93:b8:
e4:51:5f:87:c3:5e:8c:de:00:92:b2:e3:07:a2:9c:
67:ba:ed:96:c4:3e:41:55:48:51:6d:c3:eb:ac:4d:
1b:3f:48:d3:10:d0:8c:f5:4e:1d:a2:76:45:d2:40:
68:28:39:6d:7a:be:58:f3:92:c6:67:52:f4:20:45:
c9:22:30:07:fd:98:23:3c:ee:c2:89:d0:34:e2:f9:
0d:0e:c2:96:a9:1e:49:fd:bd:d5:2a:84:31:83:63:
9f:ef:38:be:a6:3c:c1:eb:df:16:e5:86:d2:64:1f:
3e:f6:74:c7:60:5f:70:56:d9:b2:28:9b:a0:47:b4:
98:17:3d:68:59:c3:a0:a7:36:ca:b4:01:13:c9:67:
23:7e:be:31:e6:a9:d6:96:86:86:02:d3:91:ad:f6:
ba:e4:ab:0b:b5:2c:11:cc:0f:0b:7b:84:41:85:46:
7f:cf:ea:df:5f:5e:d3:fd:b8:fe:0c:67:d7:9d:01:
7d:6c:5e:4f:0f:88:0a:3b:be:f7:80:f4:21:c4:6d:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:09:8B:C5:03:A6:A7:45:A2:2B:34:1A:CD:44:B6:35:69:67:3B:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6AmLxQOmp0WiKzQazUS2NWlnO4Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.188.0/22
Signature Algorithm: sha256WithRSAEncryption
35:00:3b:35:10:a9:2e:5c:4d:1a:42:c2:e5:4a:a2:6c:a4:41:
a4:5d:ff:3b:ae:d6:67:bc:5e:36:06:cc:4c:31:b6:40:9b:d9:
40:db:27:12:44:b9:d3:a7:83:ba:47:2b:5c:88:88:cc:ea:58:
df:fc:db:ba:c0:2d:42:e0:42:9a:48:5b:d4:5a:d0:bd:52:1d:
b0:f1:00:69:43:cd:32:8f:28:45:f3:63:a3:e9:af:48:19:5f:
1f:93:b5:8b:ca:e7:3d:45:94:23:61:18:8d:a0:b5:e6:7b:6c:
91:10:94:1c:d0:10:3e:b7:39:27:6f:0b:08:3c:4e:6d:34:47:
94:d0:91:49:f9:11:0a:94:26:07:31:06:0b:1a:34:c0:46:e0:
79:ca:99:c6:62:e6:84:f9:dd:f9:2c:c1:ce:0d:09:23:68:07:
5f:26:a6:7e:ce:d4:95:fc:cd:95:df:12:2b:69:cf:d3:2b:65:
52:3f:e2:45:60:50:4d:e4:e0:0f:ce:27:82:28:85:c6:50:02:
3a:42:ac:54:3c:31:36:43:66:dd:d3:77:fe:1d:67:c0:8c:73:
e6:69:46:57:4b:88:29:a5:b7:c5:b3:b5:22:00:4d:c1:d3:79:
48:51:02:92:25:b8:b0:6b:da:0b:77:dd:75:dc:21:21:33:08:
cf:47:93:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org