Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WwdDl9P8DxgVdDBJoO-t6Toh0_c.roa
File: WwdDl9P8DxgVdDBJoO-t6Toh0_c.roa (raw, json)
Hash identifier: d0CFKSpKPFYcMN8pbcA+3UHjU9yAR4aMza6ApLcQKw0=
Subject key identifier: 5B:07:43:97:D3:FC:0F:18:15:74:30:49:A0:EF:AD:E9:3A:21:D3:F7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2827
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WwdDl9P8DxgVdDBJoO-t6Toh0_c.roa
Signing time: Fri 01 Sep 2023 10:05:00 +0000
ROA not before: Fri 01 Sep 2023 10:05:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.0.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10279 (0x2827)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5B074397D3FC0F1815743049A0EFADE93A21D3F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:bf:04:28:43:7b:97:ed:1d:2c:c1:07:a0:
ac:a3:96:07:6d:15:f1:43:22:92:49:c5:97:3d:1c:
58:d7:ad:ea:e0:77:01:99:38:40:c7:57:1c:c3:c1:
38:2c:29:66:d3:2a:4d:58:15:90:84:49:0a:6c:2e:
6a:ed:02:ec:ed:79:6f:42:2e:e0:57:32:85:5b:f3:
bb:61:7f:95:55:bf:a0:3f:0d:73:64:07:17:89:c4:
d6:dd:60:1e:41:cd:01:3a:31:ee:69:3e:19:28:18:
24:80:be:fd:f9:fc:e4:2c:64:65:cd:f4:eb:50:5a:
96:e9:ba:f8:22:bc:a6:93:3a:da:6e:04:2e:bb:df:
b8:4a:f7:9b:49:db:ad:99:1e:a6:29:fd:a0:22:c3:
b5:95:2d:e1:96:bb:8f:94:e9:1b:31:83:f4:ac:b7:
9f:53:fd:6a:5e:88:ed:ec:21:89:7e:a6:96:36:07:
da:b4:8b:23:4c:41:e8:b2:f4:3a:7f:e1:67:05:dc:
d7:68:8f:8b:1c:a6:f9:9e:85:b7:66:37:1b:03:72:
e5:c4:32:5b:1e:4d:74:fd:a6:3c:eb:68:b6:6e:83:
aa:f5:a6:81:8c:6f:04:c6:28:16:84:bb:73:d5:00:
2d:84:bc:d7:55:ca:52:4d:91:00:f9:71:c2:bf:12:
8a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:43:97:D3:FC:0F:18:15:74:30:49:A0:EF:AD:E9:3A:21:D3:F7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WwdDl9P8DxgVdDBJoO-t6Toh0_c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.0.0/21
Signature Algorithm: sha256WithRSAEncryption
af:b0:74:3a:af:f3:fb:ae:7c:f8:2d:b2:31:a5:f0:d0:81:ac:
f5:20:a2:ab:b3:a1:78:3b:d1:c9:b4:69:4e:6d:3d:3e:d9:ea:
06:87:45:00:4e:55:e8:53:1f:80:2f:22:b6:41:71:b3:4c:57:
5b:34:ed:90:0d:13:9a:0a:20:1b:30:5a:0d:b1:2f:10:6d:fe:
4c:c6:29:13:9c:ea:04:e7:cf:5b:76:ad:9a:3b:c1:11:ec:59:
e8:eb:01:5a:fd:e7:b7:44:c1:46:ff:72:93:a8:76:58:f5:65:
f2:c1:a2:e1:99:36:1e:e7:0c:80:2b:15:fc:38:93:01:89:64:
6d:a2:67:c1:21:3e:ee:83:28:c5:3b:b6:87:32:b0:c7:65:b0:
36:fe:5f:72:a0:5e:64:de:11:02:67:ad:d3:5e:82:68:43:89:
51:4d:1b:0e:01:51:fc:1b:4d:8d:67:b6:b8:ea:06:9a:42:e6:
ec:64:6c:08:f1:32:ea:b3:f4:e0:fb:63:42:92:65:20:6d:8f:
6b:c8:ed:f0:61:1c:09:8f:d7:a7:89:f3:98:34:9d:f4:a6:cf:
9a:34:b2:1e:99:df:6f:70:a8:72:a5:11:3c:4e:4b:5a:bc:a0:
10:69:f5:2f:48:e6:8a:5c:00:fd:0d:f1:c1:6e:21:5b:06:ea:
08:28:91:6f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKCcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDVCMDc0Mzk3RDNGQzBG
MTgxNTc0MzA0OUEwRUZBREU5M0EyMUQzRjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAob8EKEN7l+0dLMEHoKyjlgdtFfFDIpJJxZc9HFjXrergdwGZ
OEDHVxzDwTgsKWbTKk1YFZCESQpsLmrtAuzteW9CLuBXMoVb87thf5VVv6A/DXNk
BxeJxNbdYB5BzQE6Me5pPhkoGCSAvv35/OQsZGXN9OtQWpbpuvgivKaTOtpuBC67
37hK95tJ262ZHqYp/aAiw7WVLeGWu4+U6Rsxg/Sst59T/WpeiO3sIYl+ppY2B9q0
iyNMQeiy9Dp/4WcF3Ndoj4scpvmehbdmNxsDcuXEMlseTXT9pjzraLZug6r1poGM
bwTGKBaEu3PVAC2EvNdVylJNkQD5ccK/EorvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUWwdDl9P8DxgVdDBJoO+t6Toh0/cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1d3ZERsOVA4RHhnVmREQkpv
Ty10NlRvaDBfYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
AQAwDQYJKoZIhvcNAQELBQADggEBAK+wdDqv8/uufPgtsjGl8NCBrPUgoquzoXg7
0cm0aU5tPT7Z6gaHRQBOVehTH4AvIrZBcbNMV1s07ZANE5oKIBswWg2xLxBt/kzG
KROc6gTnz1t2rZo7wRHsWejrAVr957dEwUb/cpOodlj1ZfLBouGZNh7nDIArFfw4
kwGJZG2iZ8EhPu6DKMU7tocysMdlsDb+X3KgXmTeEQJnrdNegmhDiVFNGw4BUfwb
TY1ntrjqBppC5uxkbAjxMuqz9OD7Y0KSZSBtj2vI7fBhHAmP16eJ85g0nfSmz5o0
sh6Z329wqHKlETxOS1q8oBBp9S9I5opcAP0N8cFuIVsG6ggokW8=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org