Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Gn1gHaD5bU3Y_Qr0bQ5lKb9foA.roa
File: _Gn1gHaD5bU3Y_Qr0bQ5lKb9foA.roa (raw, json)
Hash identifier: nQocwXU0u0Xnao48/txrY0g/6WJAuVNWlFbSEFMfWNs=
Subject key identifier: FC:69:F5:80:76:83:E5:B5:37:63:F4:2B:D1:B4:39:94:A6:FD:7E:80
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28CE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Gn1gHaD5bU3Y_Qr0bQ5lKb9foA.roa
Signing time: Fri 01 Sep 2023 10:05:47 +0000
ROA not before: Fri 01 Sep 2023 10:05:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10446 (0x28ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FC69F5807683E5B53763F42BD1B43994A6FD7E80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d2:4a:fa:c8:e0:3e:d3:aa:24:11:ec:5d:ba:
33:a8:5c:82:ce:07:1f:d9:1e:d9:28:ee:11:b1:83:
8c:f4:35:6c:24:17:a2:62:31:b3:ea:c9:f7:1d:f0:
94:e7:36:2f:bc:34:5e:73:1b:01:21:18:75:d0:bb:
ff:ae:82:35:f5:f1:13:44:68:f2:e3:4d:f2:e9:2f:
35:68:c9:5f:79:55:59:e9:d9:27:8a:b2:5c:8c:96:
34:c2:97:46:5b:b3:3b:63:fc:f7:ac:47:59:6e:81:
ed:de:11:1e:0e:5f:70:f5:9d:cb:83:09:e8:99:94:
93:58:df:90:e7:21:41:37:f5:16:ed:31:eb:79:90:
15:88:d4:61:0c:84:39:89:05:54:67:56:bd:0f:45:
cd:89:31:8a:1b:c7:7e:2b:5c:e6:ac:e3:f1:71:51:
0d:12:ce:f3:0d:25:f4:7e:7f:f8:6b:14:bc:c3:b1:
a5:35:7a:87:58:6d:4a:7a:f3:b0:23:b3:61:e3:db:
92:84:c9:04:ef:53:fd:94:79:d4:66:4c:d4:50:4b:
dc:ef:b4:1d:d0:85:7d:4c:99:da:ea:82:1c:74:ef:
b7:46:98:4b:99:5a:a7:6b:fa:83:bb:ca:85:90:20:
9a:c1:ec:83:13:33:eb:b0:19:50:d0:7f:65:84:ef:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:F5:80:76:83:E5:B5:37:63:F4:2B:D1:B4:39:94:A6:FD:7E:80
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Gn1gHaD5bU3Y_Qr0bQ5lKb9foA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.224.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:d9:e8:67:d0:0d:ad:14:b2:7b:ee:89:05:1d:50:9b:3c:fb:
e0:d0:aa:7a:5c:b4:68:f3:bb:b2:28:4c:bd:48:4b:da:3d:28:
63:46:13:f9:5d:e3:d9:e4:99:fe:37:c6:be:df:b1:84:27:05:
4b:71:da:0a:a3:d0:0e:5e:d7:70:ed:eb:65:7a:48:98:72:dd:
26:8e:fc:8a:da:64:64:d5:be:8e:2a:16:88:e8:94:f0:28:a4:
97:f8:2b:5c:e8:77:77:d8:cb:3d:ad:ef:e8:cc:9d:79:dd:83:
a0:b7:b6:80:cb:b1:55:db:2d:7e:ab:dc:20:4c:1f:2f:a7:38:
43:49:f6:a0:8d:a4:70:13:de:75:74:53:73:22:f0:2d:e3:22:
96:70:49:dc:c8:24:12:92:64:44:b1:43:6c:b3:e8:93:8a:8d:
28:b7:ab:e8:0a:d9:a6:02:43:a6:26:a9:3f:be:39:84:30:1b:
34:dd:f8:9c:8b:aa:63:30:5c:84:f8:f1:f0:e9:32:78:a6:86:
a0:e5:85:96:62:e3:3e:c0:a4:0e:5b:2c:53:eb:99:8c:38:96:
43:5c:72:dd:02:15:66:a8:17:c6:77:c9:1b:5b:84:b6:36:7b:
bf:74:cd:d9:6a:0e:8b:52:d0:40:83:76:9a:81:5a:df:7b:41:
c2:d2:a2:35
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKM4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1NDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZDNjlGNTgwNzY4M0U1
QjUzNzYzRjQyQkQxQjQzOTk0QTZGRDdFODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz0kr6yOA+06okEexdujOoXILOBx/ZHtko7hGxg4z0NWwkF6Ji
MbPqyfcd8JTnNi+8NF5zGwEhGHXQu/+ugjX18RNEaPLjTfLpLzVoyV95VVnp2SeK
slyMljTCl0Zbsztj/PesR1luge3eER4OX3D1ncuDCeiZlJNY35DnIUE39RbtMet5
kBWI1GEMhDmJBVRnVr0PRc2JMYobx34rXOas4/FxUQ0SzvMNJfR+f/hrFLzDsaU1
eodYbUp687Ajs2Hj25KEyQTvU/2UedRmTNRQS9zvtB3QhX1Mmdrqghx077dGmEuZ
Wqdr+oO7yoWQIJrB7IMTM+uwGVDQf2WE71qJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/Gn1gHaD5bU3Y/Qr0bQ5lKb9foAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19HbjFnSGFENWJVM1lfUXIw
YlE1bEtiOWZvQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AeAwDQYJKoZIhvcNAQELBQADggEBAC/Z6GfQDa0UsnvuiQUdUJs8++DQqnpctGjz
u7IoTL1IS9o9KGNGE/ld49nkmf43xr7fsYQnBUtx2gqj0A5e13Dt62V6SJhy3SaO
/IraZGTVvo4qFojolPAopJf4K1zod3fYyz2t7+jMnXndg6C3toDLsVXbLX6r3CBM
Hy+nOENJ9qCNpHAT3nV0U3Mi8C3jIpZwSdzIJBKSZESxQ2yz6JOKjSi3q+gK2aYC
Q6YmqT++OYQwGzTd+JyLqmMwXIT48fDpMnimhqDlhZZi4z7ApA5bLFPrmYw4lkNc
ct0CFWaoF8Z3yRtbhLY2e790zdlqDotS0ECDdpqBWt97QcLSojU=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org