Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zbk4PSCDZ0ZDu_0Ui4c0-dLbE40.roa
File: Zbk4PSCDZ0ZDu_0Ui4c0-dLbE40.roa (raw, json)
Hash identifier: k7k2DnA1vlG9wIjGul8uQ4px9NfeTMw6+xT46Y5Mw5M=
Subject key identifier: 65:B9:38:3D:20:83:67:46:43:BB:FD:14:8B:87:34:F9:D2:DB:13:8D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28F3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zbk4PSCDZ0ZDu_0Ui4c0-dLbE40.roa
Signing time: Fri 01 Sep 2023 10:05:57 +0000
ROA not before: Fri 01 Sep 2023 10:05:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10483 (0x28f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=65B9383D2083674643BBFD148B8734F9D2DB138D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:c8:60:36:d8:e8:62:47:f6:06:31:d9:4e:
05:4e:37:2a:5f:61:35:97:01:28:57:a2:ce:b1:1b:
94:98:e7:00:3a:90:69:d3:5d:0c:7c:28:8e:32:32:
da:71:39:10:a2:62:41:f5:1c:59:84:14:45:5b:a9:
5e:6b:55:7c:ab:00:14:9d:53:67:d8:dd:5b:a9:08:
54:0a:ec:6f:11:5c:1f:c6:c9:e1:78:b9:6e:d3:01:
e2:62:8b:eb:6d:f7:8f:ac:c3:60:c9:0d:c1:f2:58:
8e:99:46:8f:fb:b9:16:e8:f3:f6:28:a7:4f:e4:80:
39:7c:d5:87:d8:a4:d2:1b:fe:0f:88:9d:ef:5d:27:
4c:3b:d6:12:7b:7c:2c:67:39:3b:00:98:b0:12:f5:
80:98:41:a1:62:35:1d:d3:f6:63:8c:fe:ba:48:54:
56:7a:16:68:5f:a8:f0:b5:65:ec:d1:08:5a:05:51:
69:f9:ef:73:2e:5a:47:b3:43:fc:b1:b0:be:20:2f:
07:6d:50:b1:8a:09:d6:58:a3:33:89:c3:29:3f:b3:
4b:5a:11:45:42:fb:29:d7:19:57:dd:21:26:d3:38:
67:b9:87:c1:6b:58:49:6b:b7:dd:1d:c5:49:c3:69:
22:fd:fc:1d:70:73:19:b8:38:24:b0:20:18:71:9e:
a3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B9:38:3D:20:83:67:46:43:BB:FD:14:8B:87:34:F9:D2:DB:13:8D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zbk4PSCDZ0ZDu_0Ui4c0-dLbE40.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:a9:b5:e5:15:f6:8f:0d:46:6a:93:d9:58:be:23:89:84:78:
49:dc:ae:a0:0b:29:49:d6:ca:31:66:0c:8c:57:9a:7a:79:ac:
f7:aa:0d:99:77:d9:99:cd:34:ed:66:7c:95:b6:67:37:63:67:
61:40:2e:a6:8f:ba:2e:cc:47:0c:82:7a:d9:4f:cc:fe:57:5d:
c4:a6:7e:27:59:1a:5b:2c:a7:d4:04:03:71:62:28:ca:cc:59:
c2:b9:35:34:e4:8e:56:83:a9:07:39:bc:81:1f:c9:59:c7:37:
9b:96:b8:ef:76:44:e7:f9:f5:bd:90:d1:cf:c4:29:51:62:8c:
b3:24:c5:10:82:76:e5:ca:ba:ee:22:a0:10:42:d3:82:a4:9b:
25:f7:3f:45:d7:7b:1d:bb:25:ed:2b:fe:03:25:46:9b:8e:0b:
ed:26:ab:77:bc:9f:04:5b:7e:d7:95:a3:ba:22:73:bd:d5:fd:
6c:4d:a4:fc:3a:45:91:1b:dc:97:f5:0d:f6:ea:b9:8c:bb:cb:
78:ed:af:f2:33:f1:b6:18:fc:28:22:29:6a:7c:7a:0b:18:b7:
64:f5:bd:e1:20:a4:27:77:62:63:ac:61:e0:b8:2b:64:1c:7a:
cb:19:92:1e:7f:be:c5:7e:91:c6:3b:cd:0b:2b:69:ed:3f:54:
bf:96:30:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org