Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QPqYOt8cJSq4d1RRgF_fY40his8.roa
File: QPqYOt8cJSq4d1RRgF_fY40his8.roa (raw, json)
Hash identifier: VRj3EuJGp7ugv+HSD4sd6FEdaddMevbdbu6AkoJCu14=
Subject key identifier: 40:FA:98:3A:DF:1C:25:2A:B8:77:54:51:80:5F:DF:63:8D:21:8A:CF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AD6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QPqYOt8cJSq4d1RRgF_fY40his8.roa
Signing time: Fri 01 Sep 2023 10:08:20 +0000
ROA not before: Fri 01 Sep 2023 10:08:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.144.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10966 (0x2ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=40FA983ADF1C252AB8775451805FDF638D218ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:5b:b0:40:90:8e:5b:4e:de:ba:96:7c:eb:
f9:76:01:ca:73:4c:e0:31:bb:e6:2a:b0:83:c6:f5:
8d:fa:b7:38:85:92:77:a6:de:24:b6:68:ae:55:92:
d2:f2:39:57:9d:8b:60:9a:a7:14:c2:89:5e:f5:df:
d7:ca:51:7a:36:2e:99:e7:fb:f3:da:f8:57:08:d8:
41:0b:06:df:87:1a:d6:f7:e0:34:1b:7b:50:b3:96:
c9:ea:6a:b0:2a:88:19:29:23:3a:c5:77:cf:6a:1a:
93:55:d3:71:a5:8d:0e:c6:12:20:aa:c1:e3:f8:c5:
eb:6e:ae:05:dc:3a:e6:29:16:0c:50:3f:d1:29:29:
cb:10:e4:dd:f7:59:62:6f:36:b5:e8:ae:9b:cb:ce:
3c:1a:22:36:cb:22:11:e6:8f:0f:a8:33:6f:dd:75:
da:6e:b0:39:ca:cc:b3:cc:c5:98:81:ab:3b:c3:95:
99:49:36:a0:31:b5:4e:86:70:d9:5f:d0:15:0a:90:
1e:fa:14:5c:3b:f9:40:f4:1a:cd:3f:55:4b:89:1b:
07:18:74:6d:6c:dc:f6:d9:1a:a0:f1:ec:eb:39:b0:
72:d1:73:78:85:47:b4:26:17:0e:ae:ef:43:b2:3c:
fb:d2:84:eb:5c:96:cc:87:a4:ed:0a:04:2e:58:34:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FA:98:3A:DF:1C:25:2A:B8:77:54:51:80:5F:DF:63:8D:21:8A:CF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QPqYOt8cJSq4d1RRgF_fY40his8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.144.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:a6:cf:aa:28:64:86:bb:2f:e7:ca:85:5a:08:3d:7d:7a:35:
d8:45:09:af:de:f5:f2:64:f8:6c:11:47:82:6c:76:fc:87:b0:
15:d8:60:fb:b1:b2:bd:f0:90:38:68:fc:79:d5:0c:8e:b3:a9:
8d:36:95:b8:bb:eb:38:29:4c:d5:4b:76:07:b3:3a:6d:b0:0e:
21:85:f9:6c:77:bc:2a:36:bc:4b:34:4a:06:42:71:5d:e4:34:
57:d6:f9:59:f3:58:24:2d:02:6b:f3:ab:e3:79:fa:ad:de:a0:
83:cd:81:f4:5c:9f:38:67:85:a1:04:a6:16:b2:ee:74:3d:10:
88:2b:98:11:5c:3e:f7:3a:c7:bb:83:3a:ac:cc:17:10:6e:b0:
fc:7d:35:2c:22:8c:b0:83:d8:b2:60:ec:d4:90:15:63:5b:23:
c0:9c:2f:7e:42:ad:4c:84:2b:5d:f1:c5:29:7c:05:5d:c9:ac:
70:c6:40:fa:5b:6c:ff:19:af:e9:46:b1:3a:5a:7f:ac:bf:b6:
a5:8d:45:26:2d:72:dd:07:46:d1:a3:af:6a:92:6f:ce:23:d1:
75:85:66:fc:86:99:29:dd:da:7d:20:75:89:eb:1a:69:37:80:
f4:46:ac:20:8f:92:01:da:6c:48:74:81:ba:18:d9:30:cd:47:
0a:76:c1:25
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQwRkE5ODNBREYxQzI1
MkFCODc3NTQ1MTgwNUZERjYzOEQyMThBQ0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClAFuwQJCOW07eupZ86/l2AcpzTOAxu+YqsIPG9Y36tziFknem
3iS2aK5VktLyOVedi2CapxTCiV7139fKUXo2Lpnn+/Pa+FcI2EELBt+HGtb34DQb
e1CzlsnqarAqiBkpIzrFd89qGpNV03GljQ7GEiCqweP4xeturgXcOuYpFgxQP9Ep
KcsQ5N33WWJvNrXorpvLzjwaIjbLIhHmjw+oM2/dddpusDnKzLPMxZiBqzvDlZlJ
NqAxtU6GcNlf0BUKkB76FFw7+UD0Gs0/VUuJGwcYdG1s3PbZGqDx7Os5sHLRc3iF
R7QmFw6u70OyPPvShOtclsyHpO0KBC5YNDU7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUQPqYOt8cJSq4d1RRgF/fY40his8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1FQcVlPdDhjSlNxNGQxUlJn
Rl9mWTQwaGlzOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
AZAwDQYJKoZIhvcNAQELBQADggEBAF6mz6ooZIa7L+fKhVoIPX16NdhFCa/e9fJk
+GwRR4JsdvyHsBXYYPuxsr3wkDho/HnVDI6zqY02lbi76zgpTNVLdgezOm2wDiGF
+Wx3vCo2vEs0SgZCcV3kNFfW+VnzWCQtAmvzq+N5+q3eoIPNgfRcnzhnhaEEphay
7nQ9EIgrmBFcPvc6x7uDOqzMFxBusPx9NSwijLCD2LJg7NSQFWNbI8CcL35CrUyE
K13xxSl8BV3JrHDGQPpbbP8Zr+lGsTpaf6y/tqWNRSYtct0HRtGjr2qSb84j0XWF
ZvyGmSnd2n0gdYnrGmk3gPRGrCCPkgHabEh0gboY2TDNRwp2wSU=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org