Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B_cKfqlIZ3W9P5uvTU_OrHNVGjE.roa
File: B_cKfqlIZ3W9P5uvTU_OrHNVGjE.roa (raw, json)
Hash identifier: Aedy+fhYVeYOEOabsT22nQEiEAszyxIZ741rWmZf88M=
Subject key identifier: 07:F7:0A:7E:A9:48:67:75:BD:3F:9B:AF:4D:4F:CE:AC:73:55:1A:31
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2837
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B_cKfqlIZ3W9P5uvTU_OrHNVGjE.roa
Signing time: Fri 01 Sep 2023 10:05:05 +0000
ROA not before: Fri 01 Sep 2023 10:05:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10295 (0x2837)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=07F70A7EA9486775BD3F9BAF4D4FCEAC73551A31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fb:e4:d1:98:81:db:27:ae:03:c9:dc:7a:9a:
1a:0e:e6:f3:73:e3:25:33:57:88:44:ae:9d:53:5b:
a0:b3:cb:25:86:8b:ec:c6:60:73:cf:f2:ab:f8:9b:
32:ea:20:9b:00:7a:fe:95:53:12:e0:83:61:36:b8:
dc:1f:60:e1:7e:46:b9:2b:57:53:9a:3f:b4:f5:5c:
39:1d:86:0c:1d:cf:31:f4:c0:d7:a3:5a:b5:0f:ad:
b5:c2:61:d5:a8:a9:ff:61:ce:d6:29:3d:1c:d1:26:
a1:e4:da:4e:31:93:44:07:76:3a:db:dd:1d:6b:6a:
38:cf:ec:5a:75:7b:33:b2:60:9b:0e:d0:60:67:de:
e0:64:f7:e5:a1:02:42:c7:2e:30:34:87:43:64:ad:
d7:85:7e:61:13:7b:08:12:41:c9:4a:54:06:06:be:
f4:e2:4a:15:9e:d1:0d:fc:a4:43:32:5f:ba:c2:da:
08:6c:58:f4:bb:0a:7d:f0:5a:44:45:c1:cd:af:a7:
56:3c:9c:5f:7e:52:5e:36:e7:62:26:f6:a9:ad:3d:
ec:81:11:5d:66:ab:55:dc:45:60:77:9c:a8:6a:f3:
95:5e:0c:9e:c3:fd:ac:73:60:bc:2e:03:96:bc:40:
ba:a8:18:71:9d:3b:0f:50:fd:ec:c7:97:cc:37:5b:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F7:0A:7E:A9:48:67:75:BD:3F:9B:AF:4D:4F:CE:AC:73:55:1A:31
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B_cKfqlIZ3W9P5uvTU_OrHNVGjE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.244.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:7c:c2:1a:d2:18:e4:66:d4:94:29:85:83:b1:31:32:03:00:
8d:28:07:bf:f9:a4:e5:63:cf:42:83:cc:05:55:00:93:2e:c5:
84:cd:c4:4d:b1:96:4d:aa:57:ad:a8:66:7f:7f:f7:85:a3:58:
fd:75:85:3c:17:75:2c:31:44:82:d6:a3:11:27:d7:12:3b:de:
1b:57:6f:81:ce:22:2f:d8:79:38:73:81:3a:45:b0:47:57:0b:
ca:e6:0d:b5:ce:af:b4:f7:4b:4f:32:b5:a5:87:41:b6:91:cf:
f7:3c:30:ed:e7:0e:8b:45:a5:30:da:d5:8b:aa:01:1e:f9:78:
36:ea:82:0b:dd:71:23:15:14:d9:2b:d0:ed:c5:4a:9d:f6:63:
2e:0d:cc:35:ce:cb:a3:3b:ec:90:18:d8:73:c3:0c:2a:d6:c8:
a8:f8:5f:73:3c:31:fa:4a:96:b8:2a:fb:a6:ce:a7:be:40:ba:
43:d0:43:a5:9b:4a:a7:d0:b1:f8:da:34:98:88:7f:83:f9:d4:
b2:ef:db:2a:62:be:9f:63:b8:b4:49:f6:ae:a5:b3:15:23:17:
50:40:17:84:20:df:da:fd:9d:1d:b9:bf:d3:b2:35:49:dc:10:
37:52:0b:2f:6d:ac:34:4c:35:a0:f2:18:aa:b1:be:b2:80:8a:
d0:47:d1:e0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKDcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDA3RjcwQTdFQTk0ODY3
NzVCRDNGOUJBRjRENEZDRUFDNzM1NTFBMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDm++TRmIHbJ64Dydx6mhoO5vNz4yUzV4hErp1TW6CzyyWGi+zG
YHPP8qv4mzLqIJsAev6VUxLgg2E2uNwfYOF+RrkrV1OaP7T1XDkdhgwdzzH0wNej
WrUPrbXCYdWoqf9hztYpPRzRJqHk2k4xk0QHdjrb3R1rajjP7Fp1ezOyYJsO0GBn
3uBk9+WhAkLHLjA0h0NkrdeFfmETewgSQclKVAYGvvTiShWe0Q38pEMyX7rC2ghs
WPS7Cn3wWkRFwc2vp1Y8nF9+Ul4252Im9qmtPeyBEV1mq1XcRWB3nKhq85VeDJ7D
/axzYLwuA5a8QLqoGHGdOw9Q/ezHl8w3W1GNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUB/cKfqlIZ3W9P5uvTU/OrHNVGjEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JfY0tmcWxJWjNXOVA1dXZU
VV9PckhOVkdqRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AfQwDQYJKoZIhvcNAQELBQADggEBALZ8whrSGORm1JQphYOxMTIDAI0oB7/5pOVj
z0KDzAVVAJMuxYTNxE2xlk2qV62oZn9/94WjWP11hTwXdSwxRILWoxEn1xI73htX
b4HOIi/YeThzgTpFsEdXC8rmDbXOr7T3S08ytaWHQbaRz/c8MO3nDotFpTDa1Yuq
AR75eDbqggvdcSMVFNkr0O3FSp32Yy4NzDXOy6M77JAY2HPDDCrWyKj4X3M8MfpK
lrgq+6bOp75AukPQQ6WbSqfQsfjaNJiIf4P51LLv2ypivp9juLRJ9q6lsxUjF1BA
F4Qg39r9nR25v9OyNUncEDdSCy9trDRMNaDyGKqxvrKAitBH0eA=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org