Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwyxvA-hyYf2ztogsJ0zQiIZDzQ.roa
File: cwyxvA-hyYf2ztogsJ0zQiIZDzQ.roa (raw, json)
Hash identifier: bhqv6FuVIsxfpHcCiwioKmWflxyg6aTojkEyNBf3RL4=
Subject key identifier: 73:0C:B1:BC:0F:A1:C9:87:F6:CE:DA:20:B0:9D:33:42:22:19:0F:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwyxvA-hyYf2ztogsJ0zQiIZDzQ.roa
Signing time: Fri 01 Sep 2023 10:04:30 +0000
ROA not before: Fri 01 Sep 2023 10:04:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10178 (0x27c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=730CB1BC0FA1C987F6CEDA20B09D334222190F34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:ca:12:8c:bb:e2:41:51:30:4a:d9:97:6d:
0b:9e:ff:4b:26:99:a1:c1:f9:69:fe:3b:a1:c2:fc:
52:8f:f0:42:a3:90:f3:d1:1f:36:24:b5:60:9f:c2:
19:55:3e:8f:d4:48:55:be:42:4f:97:5e:f5:05:19:
31:0f:f3:97:52:9a:34:ed:0d:58:c9:04:56:ce:42:
19:fa:de:31:55:56:87:63:6e:e5:12:6c:6d:73:df:
5a:b2:ba:b6:20:de:c4:ea:79:45:07:55:ec:c1:83:
ca:ec:e2:d9:2c:b0:5e:2d:ee:23:31:2c:a4:4e:f2:
e1:7f:04:e3:64:8e:26:8f:77:15:dc:b6:9d:82:f9:
ba:ad:4c:ab:b2:f3:ae:1b:16:78:cf:31:80:78:4a:
d2:b1:c4:33:f2:e8:7d:61:56:4e:5c:7f:29:cf:32:
99:6e:9a:d2:77:ea:fc:f5:9b:85:f5:56:d4:5f:0c:
de:e5:61:fd:75:74:8e:8d:8b:d0:9d:85:1c:e0:24:
e3:69:5e:56:f1:56:1e:b7:e2:a9:91:8f:eb:ad:ed:
2f:90:3a:40:4f:5b:07:5b:38:47:2c:b2:57:7e:36:
a1:76:09:ab:cc:a3:e2:b8:ce:3e:36:cc:3b:a6:02:
5f:0e:c2:95:22:a3:b5:f5:eb:01:3c:e9:7d:c7:87:
65:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:0C:B1:BC:0F:A1:C9:87:F6:CE:DA:20:B0:9D:33:42:22:19:0F:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwyxvA-hyYf2ztogsJ0zQiIZDzQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.148.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:40:e6:f0:47:54:19:ca:56:b6:54:6b:63:e6:c9:bd:12:94:
e5:36:49:bf:39:53:00:19:4d:8f:3b:0d:c5:06:80:7e:02:8f:
3f:da:b6:52:d2:ea:d0:c1:76:23:2d:c9:5a:b7:0a:b0:f6:4a:
fa:43:88:67:e4:aa:d8:01:86:79:49:c2:14:ac:18:a7:a2:74:
8e:67:b3:55:c5:92:6f:3d:9b:6f:b9:31:56:37:a2:00:e2:a1:
ed:5e:00:9e:da:4b:62:95:92:f2:ad:79:f3:4c:a1:5b:e4:3c:
7d:3f:84:73:9d:80:b3:ac:4d:fd:79:09:fa:ab:56:87:8e:76:
17:16:44:3f:6b:88:7c:bd:50:c2:13:4b:f2:74:5c:fd:1c:34:
2f:81:5c:64:fc:fe:4c:93:3a:3d:78:73:20:4a:51:35:53:1a:
92:f8:72:e4:d3:90:93:67:2a:33:94:18:02:0b:8d:c4:21:2b:
64:cb:c5:f9:35:b0:af:d9:5b:4a:a6:2e:48:f7:0e:ec:81:36:
cb:3e:8e:5d:d5:21:11:39:96:01:88:2d:5f:ff:d0:c0:34:26:
1e:cf:5e:31:57:4d:3b:cf:03:80:f0:b7:8b:74:fe:9b:78:57:
d1:f4:cb:d5:04:3e:c4:af:68:81:d5:ec:66:12:ab:14:3a:c9:
a1:ac:23:76
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJ8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA0MzBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDczMENCMUJDMEZBMUM5
ODdGNkNFREEyMEIwOUQzMzQyMjIxOTBGMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMlsoSjLviQVEwStmXbQue/0smmaHB+Wn+O6HC/FKP8EKjkPPR
HzYktWCfwhlVPo/USFW+Qk+XXvUFGTEP85dSmjTtDVjJBFbOQhn63jFVVodjbuUS
bG1z31qyurYg3sTqeUUHVezBg8rs4tkssF4t7iMxLKRO8uF/BONkjiaPdxXctp2C
+bqtTKuy864bFnjPMYB4StKxxDPy6H1hVk5cfynPMplumtJ36vz1m4X1VtRfDN7l
Yf11dI6Ni9CdhRzgJONpXlbxVh634qmRj+ut7S+QOkBPWwdbOEcssld+NqF2CavM
o+K4zj42zDumAl8OwpUio7X16wE86X3Hh2WzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcwyxvA+hyYf2ztogsJ0zQiIZDzQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2N3eXh2QS1oeVlmMnp0b2dz
SjB6UWlJWkR6US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
AZQwDQYJKoZIhvcNAQELBQADggEBAKNA5vBHVBnKVrZUa2Pmyb0SlOU2Sb85UwAZ
TY87DcUGgH4Cjz/atlLS6tDBdiMtyVq3CrD2SvpDiGfkqtgBhnlJwhSsGKeidI5n
s1XFkm89m2+5MVY3ogDioe1eAJ7aS2KVkvKtefNMoVvkPH0/hHOdgLOsTf15Cfqr
VoeOdhcWRD9riHy9UMITS/J0XP0cNC+BXGT8/kyTOj14cyBKUTVTGpL4cuTTkJNn
KjOUGAILjcQhK2TLxfk1sK/ZW0qmLkj3DuyBNss+jl3VIRE5lgGILV//0MA0Jh7P
XjFXTTvPA4Dwt4t0/pt4V9H0y9UEPsSvaIHV7GYSqxQ6yaGsI3Y=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org