Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/81vh_KWMIY6aRVgjuaspY8V9ysc.roa
File: 81vh_KWMIY6aRVgjuaspY8V9ysc.roa (raw, json)
Hash identifier: 3iDW9GcMxck3UFP9DniE+jBVEySfF/ShGQFVl2bEdZk=
Subject key identifier: F3:5B:E1:FC:A5:8C:21:8E:9A:45:58:23:B9:AB:29:63:C5:7D:CA:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A2D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/81vh_KWMIY6aRVgjuaspY8V9ysc.roa
Signing time: Fri 01 Sep 2023 10:07:35 +0000
ROA not before: Fri 01 Sep 2023 10:07:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10797 (0x2a2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F35BE1FCA58C218E9A455823B9AB2963C57DCAC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:db:68:c0:92:3a:2d:39:d2:15:20:20:36:bd:
78:ff:c4:0d:3c:9e:bf:c6:fb:70:d7:dd:38:a1:78:
8c:cb:17:ce:01:d3:7e:5b:df:7b:e0:b2:3f:7b:f3:
9b:86:62:20:ab:c5:7f:87:6a:5f:9b:c2:57:b5:cd:
ca:25:15:b6:d2:e3:24:11:80:c0:44:40:a8:90:73:
d2:78:56:9b:e9:ed:b2:f8:7f:37:c3:6d:a2:3c:35:
2d:e9:09:5a:b1:18:e9:7c:8f:89:90:3b:e3:43:7b:
e3:ee:21:b3:5c:61:a5:88:49:66:4b:d6:aa:a9:f6:
30:40:f3:9a:a7:f5:47:dc:9a:3b:8a:65:d7:4b:e8:
71:d6:2e:37:04:c4:52:95:7c:3b:ec:d2:6b:90:50:
ed:02:da:ae:90:c0:f5:c3:a8:fc:c6:18:e2:e9:0c:
19:8d:3c:7f:6b:3e:59:45:a8:90:d2:39:8c:a1:68:
ac:a9:5e:94:df:f4:18:9c:4f:18:37:97:fe:3c:87:
f7:44:25:7e:64:a7:5c:20:d5:df:b9:ce:fc:31:6e:
13:b9:a9:b9:2a:a0:f7:37:28:41:da:72:95:b8:a5:
c8:e3:2d:de:54:a5:61:7c:61:3a:c5:31:cb:d9:19:
90:d7:af:ab:53:aa:9f:b3:c5:21:37:ed:17:4f:a2:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5B:E1:FC:A5:8C:21:8E:9A:45:58:23:B9:AB:29:63:C5:7D:CA:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/81vh_KWMIY6aRVgjuaspY8V9ysc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:7c:b6:4c:80:56:a5:72:8d:c8:c9:f5:f9:9e:15:58:3f:b2:
06:2c:c3:0c:02:7c:de:3b:15:3a:0f:f7:20:a3:4b:98:b1:54:
04:93:1d:8d:ed:aa:b3:f8:ca:98:c4:64:31:2b:50:a7:45:4c:
9a:27:4b:85:9f:a3:3c:f9:f2:d3:b9:a1:c5:8b:b8:9f:88:65:
32:5a:24:4e:16:ff:1e:af:81:b7:e1:1d:1c:28:22:d5:7a:8f:
4d:0d:0d:43:74:96:f4:b7:0f:46:70:51:b9:ae:14:88:e7:a7:
68:e4:c5:c9:72:f5:72:af:ef:7f:99:2a:b6:35:14:cc:a2:de:
b6:12:a6:c0:2d:e3:7c:15:cc:82:84:71:14:ad:c9:1d:d3:05:
3c:b1:de:c7:8e:9c:b5:c5:d8:d6:b4:8f:d7:71:3f:8c:30:3d:
d0:09:ad:7c:7b:44:f8:dc:f8:f9:8c:ac:d2:77:f6:89:6b:df:
d5:f6:c6:fd:3e:ca:fe:aa:5d:b9:c3:72:21:e0:c1:51:20:c1:
09:31:53:54:59:a3:c9:2d:33:24:db:10:b8:1b:b9:b9:ef:bb:
d3:be:f5:c8:2c:44:61:64:7b:3c:c6:19:2e:f1:c9:21:3a:09:
7d:d0:e7:a3:6d:de:70:f8:ca:9f:7e:fd:93:e4:6b:30:e7:34:
e2:32:a5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org