Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z5vqxV7adqMcJrfxSpG5ncsxgW0.roa
File: Z5vqxV7adqMcJrfxSpG5ncsxgW0.roa (raw, json)
Hash identifier: ZsCPOa2aUsMdk7vIzYoG2cndVvwobGlkWXLfqgqaGqU=
Subject key identifier: 67:9B:EA:C5:5E:DA:76:A3:1C:26:B7:F1:4A:91:B9:9D:CB:31:81:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A13
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z5vqxV7adqMcJrfxSpG5ncsxgW0.roa
Signing time: Fri 01 Sep 2023 10:07:27 +0000
ROA not before: Fri 01 Sep 2023 10:07:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10771 (0x2a13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=679BEAC55EDA76A31C26B7F14A91B99DCB31816D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:c8:4a:af:83:05:3b:28:de:a9:f0:4b:7f:
b8:ab:01:46:e3:64:10:32:02:82:6a:99:c3:a0:7a:
af:35:3e:5f:da:ef:11:e7:b5:b3:c1:da:b5:12:ec:
d7:ad:c6:8b:26:ef:28:dc:5d:38:6e:e3:36:bc:14:
7a:23:25:91:14:1e:22:b7:ca:3b:b0:05:8b:c9:ca:
4a:c7:9e:94:11:4f:81:c8:d5:32:60:db:f6:f8:89:
d3:e4:ba:ce:9a:35:e1:85:57:1c:7c:e0:64:12:47:
47:38:ea:79:b0:9b:5f:e3:08:a6:3b:9a:69:ea:75:
42:39:6c:90:d4:34:16:03:f8:ef:6f:e6:5e:28:c5:
e7:fa:e3:39:05:9b:93:f3:d9:41:e6:62:d8:d6:a3:
74:03:4a:41:c0:44:60:26:99:11:6f:1d:54:dd:08:
cf:29:ca:3a:f4:b4:d7:c6:30:ea:d3:bd:86:84:e8:
09:72:aa:34:53:9a:95:cf:ee:dc:b0:dc:36:b4:ae:
9a:02:92:e8:a5:7e:19:7c:a4:51:56:2c:9d:c1:c4:
40:7e:d6:0d:f8:45:6e:5a:cc:83:ab:52:58:54:4e:
af:70:0c:de:df:a3:9a:19:72:49:df:82:71:52:40:
30:0e:d6:89:ca:53:0b:54:ca:95:b8:75:12:1a:e6:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:9B:EA:C5:5E:DA:76:A3:1C:26:B7:F1:4A:91:B9:9D:CB:31:81:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z5vqxV7adqMcJrfxSpG5ncsxgW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.164.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:a3:89:d1:cc:8f:f6:57:b6:02:3e:57:39:9d:19:d8:66:cb:
3b:ab:99:86:38:e0:ff:22:15:65:ac:c3:44:78:e7:e8:a6:cd:
75:71:ca:f6:0f:b9:12:db:d2:e6:2b:73:a1:66:60:9c:3e:9d:
68:84:33:c3:3c:df:43:7d:7a:84:8c:e0:c8:7f:02:cb:03:e0:
16:ec:25:31:ef:5f:a0:40:16:e6:69:14:3d:09:c7:c9:fc:fd:
7d:08:6d:3b:84:3a:fa:d1:22:c0:b4:5a:28:cd:1b:67:63:58:
b6:fe:d5:30:8a:54:54:6f:c4:a6:f8:16:5d:7e:bf:3a:59:dc:
15:21:40:c0:ae:7c:07:e3:a3:52:5c:90:e2:d6:02:4a:90:eb:
c6:1c:cd:80:8a:b3:4a:19:0e:5f:4b:9c:73:e9:69:c1:68:2d:
a8:c2:26:67:0c:90:93:50:0f:8a:41:d4:cb:fd:57:2a:66:61:
51:36:de:01:a1:26:b7:d5:75:86:06:89:c0:b8:1e:33:78:e5:
f7:92:29:2b:64:ff:ca:73:5d:5b:77:99:41:18:fc:27:3c:05:
93:42:e4:95:a5:27:16:6d:74:10:d9:39:a7:fe:37:5a:5d:d6:
07:f8:c5:93:1f:72:f8:20:f4:88:39:63:bf:d4:c9:5a:fe:71:
6b:75:d5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org