Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0NptazDYp2G2ZDmaFaUJ1_xbNI.roa
File: S0NptazDYp2G2ZDmaFaUJ1_xbNI.roa (raw, json)
Hash identifier: vCmYDBBMGQYg8g/M/ux4Ta8PQLz6rFDy40iz9LId2NE=
Subject key identifier: 4B:43:69:B5:AC:C3:62:9D:86:D9:90:E6:68:56:94:27:5F:F1:6C:D2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28B2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0NptazDYp2G2ZDmaFaUJ1_xbNI.roa
Signing time: Fri 01 Sep 2023 10:05:40 +0000
ROA not before: Fri 01 Sep 2023 10:05:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10418 (0x28b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4B4369B5ACC3629D86D990E6685694275FF16CD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:80:fc:7e:f0:8a:99:a2:1a:11:6d:84:06:
e3:f3:09:1f:1e:2a:67:26:ac:b8:ff:68:12:af:4a:
b8:45:3b:b2:1b:8d:8a:61:c7:96:75:a6:31:35:6a:
c7:90:dd:63:91:c1:3c:18:08:18:87:97:ef:41:7b:
44:d2:7f:87:f8:7b:fd:ba:d7:cd:0a:aa:02:87:68:
c3:d1:bf:65:33:c5:95:69:e3:3b:86:bc:43:5c:c1:
ff:d1:a4:0a:75:45:d6:da:ca:5e:7e:f9:90:fa:d8:
11:df:8c:01:07:51:5c:2b:b4:47:7d:49:a1:d6:0a:
10:1b:e3:18:65:d6:17:ae:72:04:ec:5d:3d:e9:cb:
8d:41:13:18:fc:ae:02:cf:cb:b3:96:a2:cf:64:d5:
49:bb:fa:2c:a9:91:9f:f6:66:75:44:97:fd:d5:01:
7d:85:cd:8b:35:19:bf:0a:c5:c9:eb:f6:60:d3:d7:
f4:6d:6a:0e:05:3d:07:51:15:3a:54:0b:94:f2:86:
e1:d3:ad:dc:e0:af:0e:0c:3f:c1:f1:c3:e1:71:06:
63:fe:42:5c:e9:ac:26:86:fc:51:91:0b:7d:83:4a:
44:53:8a:f4:ea:e2:34:f6:8d:10:9c:f9:99:ab:bb:
e3:e4:2c:dd:e6:03:41:cb:73:b7:32:2d:43:6a:8f:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:43:69:B5:AC:C3:62:9D:86:D9:90:E6:68:56:94:27:5F:F1:6C:D2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S0NptazDYp2G2ZDmaFaUJ1_xbNI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.103.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:b8:cb:e7:28:18:54:16:ac:ae:4d:b9:57:25:c0:41:d9:59:
2f:30:a3:00:b9:c3:5b:1d:a2:d1:f1:95:bf:74:c7:eb:d9:6e:
6e:84:74:55:03:57:b5:e5:45:ac:98:b8:ab:5f:94:d3:2e:24:
c2:31:53:6f:51:3a:a6:32:f9:a9:48:59:e9:d7:9d:cd:58:4b:
0b:a1:f8:9c:4b:9b:e7:4b:f4:0c:aa:b5:27:55:b1:b9:f7:a1:
34:4c:65:b7:c5:29:f1:fe:a4:30:1c:80:32:d0:c7:86:8e:ea:
45:aa:17:f4:bf:8f:c3:c1:28:6a:b7:ac:07:0f:9f:7f:73:92:
3b:31:da:bd:71:3f:1b:aa:00:86:1c:66:05:da:41:b8:b9:c0:
24:7d:a6:04:b4:b7:11:1f:32:81:9f:39:c1:59:2f:3f:d1:3d:
4c:64:fa:88:89:90:32:b7:ea:c9:83:11:5e:5b:77:9f:0f:95:
c0:e8:5f:0b:69:0c:8b:65:89:42:f0:a5:19:28:9b:3b:e8:dc:
2b:9b:0b:72:6b:41:da:57:76:7f:04:56:fe:69:77:4b:19:2c:
da:7d:b8:ee:91:4a:30:f6:32:cc:6b:b0:d3:b2:cd:50:b9:1b:
51:81:1d:99:aa:a6:24:bd:3d:8a:34:3c:f2:a5:e9:77:d3:9f:
00:63:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org