Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WWmaN2gySQH7r9tmLcZcfxuRT30.roa
File: WWmaN2gySQH7r9tmLcZcfxuRT30.roa (raw, json)
Hash identifier: 8NeKP2fhVdYSqPimcamV8gNCf1rFT5ZTuIQDI/MpjNo=
Subject key identifier: 59:69:9A:37:68:32:49:01:FB:AF:DB:66:2D:C6:5C:7F:1B:91:4F:7D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28CC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WWmaN2gySQH7r9tmLcZcfxuRT30.roa
Signing time: Fri 01 Sep 2023 10:05:46 +0000
ROA not before: Fri 01 Sep 2023 10:05:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10444 (0x28cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=59699A3768324901FBAFDB662DC65C7F1B914F7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:24:69:c1:a9:4e:74:06:6e:c3:86:f2:f0:
33:6f:b1:a2:7c:60:41:b3:33:f3:e6:42:57:f0:b3:
22:2b:8c:89:e2:6d:53:a5:2f:8c:e4:6a:7b:78:15:
43:93:03:ec:94:00:92:ef:2b:e5:71:fb:44:53:00:
c8:51:62:af:b5:47:2c:99:aa:90:d2:b0:35:42:e8:
ad:5d:bd:d2:93:01:ec:75:e7:25:15:60:a5:3d:eb:
5a:92:b1:a1:44:8b:e1:37:f2:21:19:22:91:43:fd:
e4:c2:ff:fc:79:8e:39:f4:03:a4:87:6d:25:cb:1c:
a9:db:fb:0e:19:96:b1:50:29:05:7d:ca:fd:e6:31:
13:2d:f0:36:a9:a0:ba:fb:83:37:a6:98:c7:3d:52:
2c:87:eb:b0:78:13:2e:46:6c:50:76:fe:32:ba:c2:
ab:19:1d:39:05:74:47:9f:3d:4d:0c:be:32:4c:6a:
3f:af:29:ce:c2:7e:9b:4e:ae:7c:2b:30:83:bc:f0:
c7:5a:b3:29:38:77:80:e4:75:42:c9:29:7d:b4:91:
1b:c7:f5:6d:10:d7:e1:7e:89:5d:88:02:3a:9f:db:
67:2c:38:72:9e:c6:b7:fd:a6:b1:71:98:ed:0f:31:
03:fd:fd:97:7b:be:07:29:85:2f:3c:81:29:95:6a:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:9A:37:68:32:49:01:FB:AF:DB:66:2D:C6:5C:7F:1B:91:4F:7D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WWmaN2gySQH7r9tmLcZcfxuRT30.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.112.0/22
Signature Algorithm: sha256WithRSAEncryption
79:cc:a6:bf:28:ae:96:2d:65:b0:a3:d9:84:2f:fa:52:06:00:
f4:49:09:06:9a:d6:40:43:1d:1b:34:71:d8:8c:ff:38:f0:1a:
c3:bf:1d:cb:76:65:84:f5:96:84:56:3d:82:aa:8c:f8:e8:33:
3e:5d:30:20:af:f9:fa:f5:fb:de:f7:1a:7d:ce:21:8c:e3:3a:
96:ef:fc:02:3e:af:b2:3f:e6:0b:d8:18:02:09:1b:7c:11:f1:
87:a3:94:a7:1d:40:5d:0b:57:f1:09:8e:e0:de:1a:61:18:71:
5b:10:ea:d6:1d:d7:d0:72:b2:a7:73:30:aa:79:ea:ff:de:47:
8b:69:b9:c3:64:02:55:f6:e1:3d:a6:37:bb:28:a7:d2:b7:7b:
25:fd:58:4b:38:f2:f4:11:93:f0:a1:f9:e8:98:42:32:16:c1:
e4:86:7a:b1:80:d0:f4:7c:51:36:9b:e4:13:b0:5c:0e:d4:39:
be:76:b8:08:ae:eb:df:bd:93:d4:57:91:4a:8b:58:41:9c:c7:
8d:27:7a:0e:b0:9d:84:ca:66:4c:dc:df:90:cd:33:0d:d5:dd:
9c:8a:60:47:a6:81:7d:8c:df:d8:c5:12:eb:60:19:c0:7f:1a:
89:9e:9f:3b:a2:b6:2c:ca:0d:59:79:08:fd:df:4d:90:83:b6:
d1:02:45:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org