Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cjqyjSu97Qni7qYM5WNsqSFN-HE.roa
File: cjqyjSu97Qni7qYM5WNsqSFN-HE.roa (raw, json)
Hash identifier: r3z8wxn/Bc/iBWnbmgwzDWgYsslCZbyUmWoWJRMMGCM=
Subject key identifier: 72:3A:B2:8D:2B:BD:ED:09:E2:EE:A6:0C:E5:63:6C:A9:21:4D:F8:71
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2855
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cjqyjSu97Qni7qYM5WNsqSFN-HE.roa
Signing time: Fri 01 Sep 2023 10:05:13 +0000
ROA not before: Fri 01 Sep 2023 10:05:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10325 (0x2855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=723AB28D2BBDED09E2EEA60CE5636CA9214DF871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:34:e1:60:05:ee:a1:86:53:0d:b4:6c:a3:a6:
6a:47:10:97:dd:2d:0a:c7:93:b4:d6:08:bb:a3:40:
eb:bf:c7:6c:e6:7b:34:cb:1a:46:b7:80:43:31:a6:
6b:84:dc:15:ea:37:56:14:79:c7:5c:c1:51:ff:64:
9e:f7:b3:33:df:99:bd:34:08:a9:58:35:c0:b1:b0:
52:a1:65:bc:11:27:70:cc:1c:99:61:f5:d5:61:80:
74:ea:8d:71:ec:64:92:73:b4:64:c1:7e:60:3f:8c:
64:db:7d:fb:87:7c:81:73:4b:71:dd:e2:8b:81:ce:
6c:cb:bd:8d:0a:21:ee:48:5a:22:1f:e9:43:20:64:
3d:2d:9d:22:ef:46:47:0b:42:a0:a7:a6:e3:fc:d0:
7a:f3:58:d3:31:30:51:b8:55:ff:13:23:bc:d3:2b:
af:ff:89:d1:c8:53:fd:e0:78:4e:e7:be:9c:51:5b:
2a:71:33:92:41:fa:76:be:75:6c:09:45:c9:9a:93:
f0:45:00:e7:2c:54:c8:0a:2d:2e:8a:e9:d3:e0:bb:
2c:b9:f4:94:15:c0:9a:05:0b:79:7d:e3:64:be:e4:
f8:f2:bc:c3:93:19:69:6d:ce:10:94:60:d3:9b:bc:
5e:9a:0e:05:2b:39:a7:d4:be:be:19:3a:11:84:86:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:3A:B2:8D:2B:BD:ED:09:E2:EE:A6:0C:E5:63:6C:A9:21:4D:F8:71
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cjqyjSu97Qni7qYM5WNsqSFN-HE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.134.0/24
Signature Algorithm: sha256WithRSAEncryption
40:2c:12:09:83:19:aa:e5:73:b9:36:c5:fa:37:b0:6a:4b:16:
c1:da:d8:15:42:55:8e:72:f4:4e:76:fe:f6:84:8b:9c:79:e6:
c0:25:de:b3:62:8c:a5:be:1b:2f:09:45:00:bf:58:bd:d2:50:
06:86:ae:6a:ed:10:d1:d6:80:14:cd:b6:42:5d:d5:a0:50:4d:
94:d0:82:ec:0c:5c:69:f2:0e:df:38:e9:d5:b4:ce:6b:88:b6:
58:78:98:a9:e0:06:0f:6c:45:34:ea:e2:ad:ee:25:5f:96:3b:
20:76:05:24:a3:f2:31:47:b3:36:ed:79:45:08:e7:46:4c:9c:
b7:99:65:7f:5f:0c:3e:66:67:55:57:c0:e4:94:09:a5:ad:fc:
f4:2f:f0:a9:a5:4a:d6:96:ec:41:48:1f:7e:20:4e:4c:7a:ce:
08:fe:d2:61:03:c2:65:25:4c:59:f7:8b:01:4b:dc:96:7a:c4:
54:bb:6a:24:84:30:91:af:68:f6:d6:ef:c1:8b:10:e0:5f:88:
8a:71:7b:63:49:32:69:88:e2:26:bb:37:db:20:e5:aa:ed:72:
eb:56:e4:76:a8:e2:ac:6b:6c:79:9e:fb:f9:17:70:1d:14:ff:
4f:7a:9b:12:4b:4f:b0:77:59:d7:02:f7:fe:54:62:68:28:6b:
b1:46:11:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org