Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6U5xzGw3z_1whqAh8vlmBQ0STZ8.roa
File: 6U5xzGw3z_1whqAh8vlmBQ0STZ8.roa (raw, json)
Hash identifier: gjwJTY9EQOCALXj07Es32zF1+sq1e8yauROf7rnRy6U=
Subject key identifier: E9:4E:71:CC:6C:37:CF:FD:70:86:A0:21:F2:F9:66:05:0D:12:4D:9F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2916
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6U5xzGw3z_1whqAh8vlmBQ0STZ8.roa
Signing time: Fri 01 Sep 2023 10:06:08 +0000
ROA not before: Fri 01 Sep 2023 10:06:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10518 (0x2916)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E94E71CC6C37CFFD7086A021F2F966050D124D9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:c9:d7:d8:73:66:fc:32:57:30:7c:f1:4c:
eb:29:70:1e:95:e9:d1:49:bb:bc:00:fc:27:22:18:
f0:c1:a0:bc:13:66:b0:e6:ac:cc:fc:c4:6d:05:b4:
dc:79:92:fe:94:b9:c4:36:3b:b4:98:68:1a:a4:85:
2e:3b:ed:57:83:36:cb:20:71:10:a1:a5:45:40:bd:
cd:73:03:9d:6e:b8:0a:5f:bf:5c:ba:d2:c0:f9:0b:
42:05:8d:73:d8:f4:7b:a4:c4:7f:cf:29:d0:f2:c4:
62:11:a7:15:cc:44:73:2a:60:be:b7:cf:56:37:71:
7f:f5:eb:7c:53:6d:81:aa:d5:09:d5:65:83:1a:de:
5e:f4:dc:db:46:ad:a1:0a:47:74:0b:9e:34:7b:f2:
72:b7:34:ae:78:1e:88:ad:c6:f0:51:80:e0:e9:fa:
b9:4d:88:fc:18:d5:67:54:96:09:dc:95:15:d7:e9:
9a:d9:43:50:a8:08:f7:5b:4d:33:44:eb:9b:92:93:
bf:fd:a3:4b:a5:ac:f2:76:07:b8:24:30:6d:cf:0b:
44:0d:0b:37:51:d8:87:13:e8:96:f7:06:52:d4:f5:
44:0e:1d:2c:e0:5e:37:9d:4c:77:88:2a:c3:ea:15:
2d:f1:d8:a0:d4:9b:96:10:71:7a:b7:37:fe:bb:46:
6c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:4E:71:CC:6C:37:CF:FD:70:86:A0:21:F2:F9:66:05:0D:12:4D:9F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6U5xzGw3z_1whqAh8vlmBQ0STZ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:f1:16:70:40:b9:1b:8c:00:1c:f9:da:5d:04:7f:b5:ca:b3:
22:cd:68:f9:f2:a3:07:ac:4c:a2:8d:20:cf:bf:8a:47:34:c4:
ae:2b:af:b2:69:a2:be:3e:ed:cd:02:69:34:d3:1d:1d:80:2a:
89:34:c7:e0:9c:63:1b:44:90:4a:f8:e4:76:a2:3d:b6:2f:86:
f5:14:91:13:90:64:00:c7:cb:22:00:e7:29:01:83:69:4c:f4:
a0:84:04:6a:a8:8a:b9:06:c1:ad:e7:38:fc:5f:ca:f3:9d:af:
5a:70:5e:cb:88:f9:06:1d:25:87:c8:40:3e:1f:fa:f9:d2:e5:
86:46:48:57:9c:19:25:b1:da:51:b4:79:6d:04:94:09:fc:62:
ba:94:3c:bd:ee:3a:b8:18:38:b1:ba:2b:93:c0:1d:c1:9c:27:
bb:4a:c4:c6:c7:7c:16:f6:47:dc:29:72:f8:60:51:2d:8f:06:
10:61:03:00:23:41:0f:4f:ea:a5:42:83:88:be:26:2f:1a:29:
d5:79:7c:74:8f:cf:1a:ca:98:bf:89:58:1e:cb:68:d8:51:57:
0e:49:1f:21:f4:6c:f2:13:0b:c2:02:c5:85:37:02:4d:42:27:
a1:28:28:de:d1:a8:09:3d:46:5c:87:2a:3d:14:25:9d:bb:e2:
26:b2:72:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org