Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QI2iZqPkEF8-T4fND2S_mCGWZgQ.roa
File: QI2iZqPkEF8-T4fND2S_mCGWZgQ.roa (raw, json)
Hash identifier: 9OcJ1DllnvVkkHAzxzy4gSG+OWAOG5kMDjyPpOg8ado=
Subject key identifier: 40:8D:A2:66:A3:E4:10:5F:3E:4F:87:CD:0F:64:BF:98:21:96:66:04
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 280E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QI2iZqPkEF8-T4fND2S_mCGWZgQ.roa
Signing time: Fri 01 Sep 2023 10:04:53 +0000
ROA not before: Fri 01 Sep 2023 10:04:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10254 (0x280e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=408DA266A3E4105F3E4F87CD0F64BF9821966604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:f8:90:98:e7:c3:06:8e:fd:36:dc:64:db:
1e:1c:e8:bc:f8:87:1c:53:87:7a:d2:40:9d:3b:23:
7a:49:48:38:9b:4c:a4:58:06:9c:48:fd:ef:38:73:
fc:59:f3:84:ce:cf:80:8f:e0:2e:fc:42:67:1c:43:
78:97:70:e9:fa:c1:2b:a2:0a:6d:42:82:8d:fa:3d:
77:eb:cc:32:dd:b9:ae:c2:f8:fb:a6:3d:36:dc:59:
7e:ce:21:5e:15:2b:c2:18:65:77:84:57:9a:ec:12:
4b:fb:4e:52:61:88:81:36:c1:f3:16:3d:4b:9e:51:
bc:63:9f:52:50:33:84:e0:b2:60:4d:76:37:3f:61:
8a:70:7b:91:fe:15:03:e2:3d:1a:c0:d4:d0:0b:6e:
c0:f8:6d:54:ee:92:db:5f:1c:79:fa:cc:70:90:dd:
ee:9a:be:d9:c1:53:9a:69:1b:aa:60:ab:8f:b8:45:
87:d5:37:23:a5:f8:f9:14:64:89:db:c4:60:4a:4a:
28:d0:25:02:47:5d:46:07:e1:f1:01:7b:88:64:f5:
68:c1:15:1b:21:06:f7:17:85:48:fb:1c:6f:41:19:
96:0e:c8:77:7d:aa:bd:94:06:e1:e0:8f:ea:67:12:
81:27:b7:eb:13:2e:c3:f5:fd:83:f0:6c:cc:ab:a3:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8D:A2:66:A3:E4:10:5F:3E:4F:87:CD:0F:64:BF:98:21:96:66:04
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QI2iZqPkEF8-T4fND2S_mCGWZgQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.207.0/24
Signature Algorithm: sha256WithRSAEncryption
04:86:7c:51:14:3a:1d:25:30:ac:bc:a2:89:92:85:25:9a:94:
bf:ad:fd:3c:7d:ec:4f:12:31:bc:2f:3b:17:1b:64:c3:58:a7:
c5:eb:3e:58:3c:0d:80:30:ef:df:39:9c:ce:44:0d:54:a8:a8:
55:7f:c1:70:7b:1d:e0:f5:d8:08:56:4e:1d:61:58:39:1f:f9:
bd:75:53:01:69:38:dd:5c:c2:51:6b:e5:fe:51:e3:9b:1e:68:
c2:29:6d:8c:69:b7:52:25:7d:9b:6c:69:a2:f1:82:73:1c:32:
e0:08:77:9c:1a:42:ad:47:3e:48:44:88:35:19:5b:4c:9f:76:
50:e4:a9:c3:96:c2:07:e8:aa:e7:c8:4f:d1:6e:d0:86:65:2d:
b6:22:f4:40:99:e4:78:6a:01:62:c5:99:16:8e:15:3d:c7:38:
b1:a0:56:49:d8:6f:83:b4:bb:19:b4:9d:59:c2:ec:8e:d5:cd:
42:d1:28:f1:39:d1:be:0e:33:30:6b:f6:ec:e4:ba:26:a8:a2:
18:21:67:b7:36:ed:c5:30:55:a0:dc:10:70:dd:f4:11:97:7f:
9e:18:99:08:e6:ea:0d:e4:8d:04:e3:d9:43:e1:07:5f:4a:91:
f8:66:f4:3f:be:d5:d9:40:f5:ec:f4:3a:84:8e:af:31:fc:4d:
54:43:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org