Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EsX40EuNLfteK-A2BfkmHpTaSis.roa
File: EsX40EuNLfteK-A2BfkmHpTaSis.roa (raw, json)
Hash identifier: jxy9b75XuBSefO5C/ULCi5B7P2rVThvOBkjjFfCoD0o=
Subject key identifier: 12:C5:F8:D0:4B:8D:2D:FB:5E:2B:E0:36:05:F9:26:1E:94:DA:4A:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A1B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EsX40EuNLfteK-A2BfkmHpTaSis.roa
Signing time: Fri 01 Sep 2023 10:07:30 +0000
ROA not before: Fri 01 Sep 2023 10:07:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10779 (0x2a1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=12C5F8D04B8D2DFB5E2BE03605F9261E94DA4A2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:66:70:4f:3a:95:b0:cf:f7:ad:7e:a1:fe:f7:
51:5f:e4:ca:e5:4e:e0:5c:cc:41:02:43:62:8e:cd:
76:7d:8e:1b:c5:c1:e1:d6:0f:c0:6a:c1:2a:0f:22:
2c:3b:66:06:10:a3:ad:97:4a:91:85:ed:99:53:e8:
95:c4:30:f0:fe:95:7c:d2:44:c5:ad:36:37:85:25:
f2:b3:06:93:b9:21:84:a6:b6:c7:b5:bd:57:32:07:
bf:00:03:72:08:88:fa:12:fc:5a:81:1c:f9:c5:7c:
f9:75:8e:8c:53:f4:21:58:e5:54:0d:7b:ae:46:ee:
dd:db:c5:cd:2f:d4:46:28:1f:cf:63:2e:a3:81:9c:
ec:d2:36:85:ea:82:c5:6e:f2:39:be:0c:5c:f9:a0:
e9:e6:00:ff:da:f1:ca:bc:c2:9c:27:65:68:c7:36:
5c:94:2a:6e:9e:72:ef:f6:00:5e:6a:2a:c7:c2:57:
6f:11:91:8a:4c:3c:af:16:99:b1:79:5e:0d:51:32:
1d:42:4b:4f:1e:1d:28:4f:25:a4:06:ed:d8:63:3e:
b0:dd:db:96:72:6d:35:04:85:47:72:a9:35:18:1a:
50:52:75:a5:5c:dc:22:d5:ed:da:8c:f7:df:f8:c3:
5f:41:18:e5:e9:f9:56:e2:e5:ab:6e:f8:df:a7:b1:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C5:F8:D0:4B:8D:2D:FB:5E:2B:E0:36:05:F9:26:1E:94:DA:4A:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EsX40EuNLfteK-A2BfkmHpTaSis.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.4.0/22
Signature Algorithm: sha256WithRSAEncryption
15:98:6a:ed:78:ea:75:41:51:fe:fd:98:3e:b1:e8:2a:8e:0b:
0d:7c:83:ba:79:52:6b:5c:c4:5e:0b:14:26:05:cd:fc:fa:a0:
1d:7e:06:f3:63:64:4b:c5:e3:4e:d2:af:99:6f:19:66:d8:90:
6a:46:4e:11:b1:4d:6a:0b:d9:58:fb:8b:3b:27:4d:de:57:d9:
83:c2:3f:61:55:e6:1c:26:52:22:99:46:ac:94:15:69:29:37:
2c:82:12:4e:91:c3:88:1a:cd:b9:33:21:1e:ce:56:43:72:21:
e0:98:12:3f:b1:a0:81:5a:b6:3e:38:5e:a7:fb:30:3f:14:37:
c7:f7:02:f7:01:e9:28:0d:6e:09:94:66:18:19:10:15:78:87:
24:74:3a:52:c8:c5:cb:b4:0e:96:af:98:2b:ca:9b:e6:38:d2:
59:77:35:bb:31:a7:af:3d:1e:2a:fa:68:80:f0:59:15:1b:c8:
a9:f6:95:72:3f:f5:cc:b0:93:af:45:68:57:61:a4:48:e3:da:
2a:2d:a1:eb:a4:92:1e:1f:f5:5f:f2:f4:33:61:bf:10:6b:b0:
f1:ae:86:81:e9:8d:4e:4e:84:20:46:ce:a2:9b:08:3b:02:07:
a2:13:73:bd:ff:46:a8:09:88:6d:08:ea:41:eb:55:62:85:01:
0f:06:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org