Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ImqxDp0g7aJ-hnV0h_O5rOOUppQ.roa
File: ImqxDp0g7aJ-hnV0h_O5rOOUppQ.roa (raw, json)
Hash identifier: 87Em5ZmJInSE/EyEtDbDoDLR0B1dJm0Art1W5/a1UAQ=
Subject key identifier: 22:6A:B1:0E:9D:20:ED:A2:7E:86:75:74:87:F3:B9:AC:E3:94:A6:94
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A4B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ImqxDp0g7aJ-hnV0h_O5rOOUppQ.roa
Signing time: Fri 01 Sep 2023 10:07:43 +0000
ROA not before: Fri 01 Sep 2023 10:07:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10827 (0x2a4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=226AB10E9D20EDA27E86757487F3B9ACE394A694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:56:95:cb:9d:a5:22:3d:2a:37:ad:30:73:
be:1d:78:d8:81:36:a9:a8:d5:8d:86:27:1c:1e:f4:
3e:24:f0:8d:64:66:ac:c4:34:6c:bf:9d:78:ad:2a:
35:b2:22:e0:c3:55:71:e8:e6:36:43:41:80:43:cb:
97:9d:71:55:36:d6:bc:8c:53:e1:43:5a:fc:53:94:
c4:43:90:4b:7e:8d:2d:21:d2:fa:c7:27:de:d4:a3:
de:7d:8f:a9:c1:bd:43:6e:55:23:10:6b:f5:d5:73:
04:6a:fa:d1:54:94:40:dc:91:ab:34:37:18:da:54:
b1:bb:3b:30:29:e1:0c:f0:41:4e:ee:60:5a:a9:d5:
38:4c:05:ab:d1:46:cb:ee:a0:1d:8c:2e:23:88:6b:
1b:b9:54:22:9b:34:3b:a5:3d:9a:3c:9e:13:07:9f:
89:7b:ae:70:49:33:e8:2a:be:9d:6d:7d:5f:36:16:
ba:d9:76:7f:75:63:7d:76:36:6b:ca:1d:12:ac:50:
3a:f7:95:4d:55:9b:4a:d7:1d:ea:99:27:6f:e4:80:
eb:7f:b3:55:75:88:3b:20:54:56:92:d1:4f:ba:50:
35:32:e1:35:52:1f:7f:07:ae:d3:fa:a3:c1:58:00:
26:ce:60:19:20:f5:0b:0c:cf:e6:c1:8e:18:b7:3e:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6A:B1:0E:9D:20:ED:A2:7E:86:75:74:87:F3:B9:AC:E3:94:A6:94
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ImqxDp0g7aJ-hnV0h_O5rOOUppQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.236.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0f:25:08:8b:98:bf:40:10:b7:83:93:2a:06:f2:d9:d8:2b:
e4:be:a1:80:76:c0:3b:cf:c9:59:4d:4b:9c:54:a1:b4:2d:ef:
17:d8:3a:55:e6:56:ba:1f:3f:71:55:cb:06:11:50:0b:4a:db:
18:14:b5:b9:0f:49:8a:ff:ab:c8:0e:ae:ca:dc:d8:dd:0e:0c:
b6:90:41:e7:7c:db:85:d8:77:92:2b:42:b8:0b:08:d0:9c:a7:
95:6c:b6:53:38:7f:d4:dc:b0:a2:d7:57:aa:31:a8:a8:7d:1c:
8c:fe:86:d7:32:11:4a:e5:46:d5:04:8b:b8:33:12:05:58:5a:
20:3c:2f:7e:e4:d4:2e:f8:af:39:04:d1:a7:4d:a9:ba:00:b5:
c8:45:b8:f9:50:84:b9:a9:6d:16:70:b8:88:da:6c:92:81:ba:
4e:55:5a:4c:71:86:e4:b9:62:05:ed:94:9d:79:31:39:ba:a2:
32:3a:b1:3d:d6:a5:1e:b1:f2:84:21:d2:37:27:8c:d6:ec:a6:
c2:5e:8d:de:a5:cf:b3:2d:ea:74:d3:35:df:c7:5a:1c:96:44:
72:92:68:60:14:cd:86:23:57:9a:7e:68:e8:f6:e9:4b:87:22:
00:4d:07:af:8e:68:7c:8c:35:96:d6:f4:7c:5a:d7:0b:cf:8a:
a6:b1:3a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org