Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YbZkJ1VhMiL3ddBJLyVD0j1N6gM.roa
File: YbZkJ1VhMiL3ddBJLyVD0j1N6gM.roa (raw, json)
Hash identifier: KplGncmCWRqpPNytOGjijA08eG/PVtJQrJgsusKMrUI=
Subject key identifier: 61:B6:64:27:55:61:32:22:F7:75:D0:49:2F:25:43:D2:3D:4D:EA:03
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A2C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YbZkJ1VhMiL3ddBJLyVD0j1N6gM.roa
Signing time: Fri 01 Sep 2023 10:07:34 +0000
ROA not before: Fri 01 Sep 2023 10:07:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10796 (0x2a2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=61B6642755613222F775D0492F2543D23D4DEA03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:55:e6:0a:23:c4:9f:6d:54:6a:3d:69:82:
bd:75:53:37:ad:d8:ff:32:b3:81:f5:d3:68:35:cf:
57:c5:75:52:1f:4a:7f:fb:32:83:64:39:f0:45:2d:
48:2d:c7:a4:07:ef:2c:12:f2:24:66:08:97:64:66:
6d:a4:84:10:81:77:16:6e:02:98:eb:f1:f3:0f:a4:
cd:15:d2:22:f1:ab:6d:0e:2a:51:80:0e:1d:54:6c:
30:0a:9a:34:92:aa:91:8b:d9:6a:f9:7d:76:cb:3b:
b4:67:bf:e3:73:7d:7c:dd:2c:e2:42:a2:3e:ca:ba:
31:f6:11:0d:fd:ba:53:6e:cf:ef:9d:73:42:54:65:
28:5c:61:91:7d:eb:8b:ad:82:03:d8:61:ef:85:47:
71:10:ae:b7:17:ec:d0:7c:f2:32:d2:87:a9:a2:74:
37:eb:20:00:0e:d4:ba:c8:b4:9c:49:db:23:1d:3e:
44:7c:c8:f4:10:6d:f4:d5:d4:a0:ea:23:25:96:1e:
da:b9:64:2d:43:7a:8d:17:42:38:5a:69:03:05:2b:
61:42:4d:86:2b:64:f8:8a:ac:79:49:1c:9d:12:ce:
c3:ec:10:62:d9:a9:95:38:22:02:af:01:e4:9d:eb:
6c:e3:1d:29:ad:24:d1:ae:74:cc:0b:2d:72:24:08:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B6:64:27:55:61:32:22:F7:75:D0:49:2F:25:43:D2:3D:4D:EA:03
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YbZkJ1VhMiL3ddBJLyVD0j1N6gM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.152.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:c3:18:d3:27:2f:0e:87:18:28:67:78:a4:e0:3b:f1:7c:60:
20:01:73:6e:28:15:bc:b2:38:28:85:3a:5e:f3:e8:2c:57:9d:
79:7a:0c:6b:8f:ab:6d:d4:6e:47:31:00:4c:6e:8e:45:05:25:
64:1a:cf:69:ac:a3:76:57:66:80:f6:0b:72:3d:27:98:e4:9f:
3c:61:af:d4:75:93:e7:ba:d0:8c:13:ae:d8:85:45:99:fd:e6:
71:6c:e3:09:9c:ab:f6:d8:bb:25:a3:06:f6:50:88:62:f9:e7:
84:8b:4f:31:6f:93:63:53:98:e7:67:71:42:1d:9a:07:55:0b:
ec:0d:87:15:1b:f4:0d:15:58:d7:9e:53:fa:76:3d:47:d5:e7:
54:78:c4:a6:d8:15:6a:44:fc:96:50:4d:fd:f1:12:64:31:6c:
5d:63:9e:ef:4b:88:ea:ee:19:11:f4:80:3b:19:04:99:9e:a8:
ed:0f:5b:7a:9f:b0:47:95:1c:cd:0c:65:68:00:fe:3f:41:b6:
3f:05:37:c0:47:4a:f2:4e:e4:1f:fb:22:c2:71:1f:36:79:80:
b9:89:d7:9d:0e:43:4a:7f:61:ce:bf:52:07:9f:3c:ec:b9:8a:
75:7b:80:79:ba:ce:8d:f0:81:1f:34:5b:cb:7d:8f:0c:dc:39:
10:64:b1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org