Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOc0yu--ks8DQF9Ez7lXC9e2aSs.roa
File: bOc0yu--ks8DQF9Ez7lXC9e2aSs.roa (raw, json)
Hash identifier: tqq1yUWcIonhV0NIOU4AFWlstTmh1Du65dK691ht7Kw=
Subject key identifier: 6C:E7:34:CA:EF:BE:92:CF:03:40:5F:44:CF:B9:57:0B:D7:B6:69:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2936
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOc0yu--ks8DQF9Ez7lXC9e2aSs.roa
Signing time: Fri 01 Sep 2023 10:06:17 +0000
ROA not before: Fri 01 Sep 2023 10:06:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10550 (0x2936)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6CE734CAEFBE92CF03405F44CFB9570BD7B6692B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:51:13:cf:38:64:6d:61:e5:cd:b2:95:34:
d4:21:b6:91:ae:07:40:63:65:45:09:34:d8:30:49:
d7:47:0c:6b:6f:d7:10:49:8a:90:db:6f:ff:2b:b3:
06:e2:2c:42:86:ae:d9:c2:6d:11:d7:f7:76:d4:aa:
e6:94:5e:f7:d6:ef:62:31:b5:21:96:7e:1d:29:14:
0c:b0:6c:f7:6a:ec:08:25:5e:4c:c2:39:2d:39:46:
60:72:49:90:7e:08:b1:0f:40:d6:e1:d5:ae:40:08:
05:a8:e8:c1:b5:72:b6:e0:d6:01:e0:86:3d:58:fa:
a9:bd:16:a0:f7:38:35:e6:b6:6f:24:86:2c:e9:ac:
9d:28:09:a8:ef:71:b9:63:e5:10:3c:35:3b:8b:0d:
c9:67:54:e8:7f:de:4c:a4:cd:54:1b:4e:22:89:0c:
a1:39:1f:19:d2:e0:6e:c2:18:05:5d:8e:26:27:25:
cf:a9:ff:9f:f0:ce:68:fa:df:29:c3:dd:d3:6d:68:
40:b3:c7:3a:cc:e7:13:b2:0f:2f:f7:b5:3b:8f:89:
3e:14:c4:f8:2a:85:44:5b:56:72:a6:22:76:b8:1c:
3d:48:cf:e0:c2:41:d8:65:26:2d:56:ae:3e:a2:82:
49:a3:07:66:b8:b8:d7:e0:83:d4:41:4d:f6:f8:80:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E7:34:CA:EF:BE:92:CF:03:40:5F:44:CF:B9:57:0B:D7:B6:69:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bOc0yu--ks8DQF9Ez7lXC9e2aSs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.220.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:83:67:3a:25:15:3d:0b:5f:b7:d6:78:57:b7:c3:bd:f4:83:
61:25:6a:7c:15:85:48:03:27:c6:b3:83:70:3d:81:3d:db:39:
ed:b5:33:f9:88:7f:7c:66:97:b6:1d:72:11:b7:20:81:64:7e:
a2:4c:cc:f4:a6:33:98:c4:21:66:9c:c3:21:5b:7a:fd:6c:ff:
c5:78:12:51:c8:ca:10:0e:df:98:2e:c2:4a:49:69:eb:6d:51:
51:d6:cb:cf:41:61:25:2f:9c:f0:cb:cf:45:01:cb:fe:56:f0:
1b:2d:2a:49:74:c2:98:4c:00:14:fb:79:1f:c9:2d:9a:55:93:
d9:44:b1:1e:83:cd:c8:db:37:74:3c:d8:4f:e0:b8:94:b9:82:
7a:25:48:20:b8:25:16:f2:06:27:c6:f3:5e:7d:8a:89:25:75:
46:b9:0a:28:6d:9e:72:10:ab:93:9a:95:61:2a:06:88:fb:ec:
8b:90:ba:2b:1a:4b:44:48:a2:92:21:57:4f:99:bd:3c:1e:37:
ba:cd:e2:07:ee:85:c2:2e:4d:c0:94:0e:1e:21:e3:1f:39:0e:
6c:f0:98:ba:97:35:86:3c:7e:4c:1c:76:75:f1:c5:b9:1f:32:
32:46:e7:bc:43:b3:0b:c7:f4:af:1d:37:18:19:85:f5:da:8f:
18:c7:2d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org