Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IltsiDH0dI1MK8dFZv_eHN7OAmc.roa
File: IltsiDH0dI1MK8dFZv_eHN7OAmc.roa (raw, json)
Hash identifier: pghftdRggzGKtpudsf0ExMLp0Wv2yYlJXLMvEw8DnOs=
Subject key identifier: 22:5B:6C:88:31:F4:74:8D:4C:2B:C7:45:66:FF:DE:1C:DE:CE:02:67
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A51
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IltsiDH0dI1MK8dFZv_eHN7OAmc.roa
Signing time: Fri 01 Sep 2023 10:07:46 +0000
ROA not before: Fri 01 Sep 2023 10:07:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10833 (0x2a51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=225B6C8831F4748D4C2BC74566FFDE1CDECE0267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cf:7e:87:6a:f1:bb:b7:77:a9:b1:1a:f6:a5:
31:7f:0d:10:f4:24:85:41:90:7a:6a:ae:0a:f0:4f:
a8:9f:b1:29:b6:3b:90:40:5e:bc:59:c7:7f:4a:de:
ef:ad:85:76:0c:c9:c8:87:fb:78:41:24:f2:14:e7:
d7:29:58:3b:f1:10:11:9e:7d:41:3a:1e:7e:27:67:
eb:2b:4a:74:92:89:68:4e:e0:a3:51:4f:55:99:cb:
af:f1:6e:17:c2:38:26:1c:19:17:86:6a:4f:22:02:
0f:71:b9:95:b2:05:1e:a0:33:47:26:ba:9e:aa:f5:
56:79:27:52:49:03:c6:65:98:ff:1f:67:25:c1:b7:
1e:a0:b4:6d:65:c5:d3:7f:0f:20:fd:fc:ba:6c:37:
48:2a:39:2f:70:c2:8d:c0:26:d3:3d:8b:2e:f6:b5:
02:22:d7:be:4e:0d:a4:6c:2f:bb:75:f2:5f:fc:42:
3b:03:6f:2d:d2:2b:94:33:4c:41:1c:7b:c8:dd:2e:
9d:77:a8:73:2e:f1:d7:2d:d7:23:6f:4b:42:9f:d5:
6a:6e:a3:71:0d:55:35:9b:1c:7a:32:eb:b4:d8:48:
d5:de:fe:f0:39:e9:3a:fb:95:58:90:35:6d:ad:5c:
bf:d9:47:23:65:9d:27:b8:f8:83:c1:e4:3c:75:2e:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:5B:6C:88:31:F4:74:8D:4C:2B:C7:45:66:FF:DE:1C:DE:CE:02:67
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IltsiDH0dI1MK8dFZv_eHN7OAmc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:36:9e:1c:0b:1a:30:52:be:6d:64:f8:b5:2d:8e:91:e5:86:
8a:c2:2a:e0:ca:d9:29:fc:5a:13:bd:73:8c:b9:85:9b:2d:ff:
0e:4b:27:46:80:45:db:79:56:a5:ae:6a:2c:63:c7:af:4a:74:
f8:9d:aa:69:77:97:ca:13:27:52:72:aa:8c:7c:40:92:66:f8:
dd:29:bb:88:8a:4f:2f:e9:31:6f:0f:10:97:a5:38:84:9d:43:
b1:19:33:ec:a0:37:e7:bc:f4:4c:cb:16:dc:cd:02:99:a7:cd:
94:d4:67:9b:57:1f:e4:d0:3e:8f:15:27:51:12:ab:20:c0:56:
58:60:7d:2e:df:fd:09:f1:ea:56:1b:41:7f:6a:62:e9:1f:cf:
20:03:22:26:1b:37:34:b0:38:e7:52:1c:70:97:a1:bb:6e:5a:
b1:0b:8f:6e:b1:67:d9:26:09:d8:4f:38:02:5e:b1:18:45:e0:
2f:7d:c2:40:9a:d3:44:c7:80:8c:ca:a7:21:b8:b4:6a:6e:d3:
ea:30:ec:24:61:f7:22:11:de:be:84:3a:46:88:84:17:58:c8:
bd:13:dc:b6:15:65:4f:a3:81:6e:dc:07:ca:07:95:56:98:54:
05:bd:62:62:46:52:47:ed:20:98:75:3b:ca:21:24:52:cd:0d:
90:56:66:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKlEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIyNUI2Qzg4MzFGNDc0
OEQ0QzJCQzc0NTY2RkZERTFDREVDRTAyNjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDez36HavG7t3epsRr2pTF/DRD0JIVBkHpqrgrwT6ifsSm2O5BA
XrxZx39K3u+thXYMyciH+3hBJPIU59cpWDvxEBGefUE6Hn4nZ+srSnSSiWhO4KNR
T1WZy6/xbhfCOCYcGReGak8iAg9xuZWyBR6gM0cmup6q9VZ5J1JJA8ZlmP8fZyXB
tx6gtG1lxdN/DyD9/LpsN0gqOS9wwo3AJtM9iy72tQIi175ODaRsL7t18l/8QjsD
by3SK5QzTEEce8jdLp13qHMu8dct1yNvS0Kf1Wpuo3ENVTWbHHoy67TYSNXe/vA5
6Tr7lViQNW2tXL/ZRyNlnSe4+IPB5Dx1LloBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIltsiDH0dI1MK8dFZv/eHN7OAmcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lsdHNpREgwZEkxTUs4ZEZa
dl9lSE43T0FtYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AaowDQYJKoZIhvcNAQELBQADggEBAE42nhwLGjBSvm1k+LUtjpHlhorCKuDK2Sn8
WhO9c4y5hZst/w5LJ0aARdt5VqWuaixjx69KdPidqml3l8oTJ1Jyqox8QJJm+N0p
u4iKTy/pMW8PEJelOISdQ7EZM+ygN+e89EzLFtzNApmnzZTUZ5tXH+TQPo8VJ1ES
qyDAVlhgfS7f/Qnx6lYbQX9qYukfzyADIiYbNzSwOOdSHHCXobtuWrELj26xZ9km
CdhPOAJesRhF4C99wkCa00THgIzKpyG4tGpu0+ow7CRh9yIR3r6EOkaIhBdYyL0T
3LYVZU+jgW7cB8oHlVaYVAW9YmJGUkftIJh1O8ohJFLNDZBWZvI=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org