Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g-doZTDJ4dezVYElv_Oy7QHkZQk.roa
File: g-doZTDJ4dezVYElv_Oy7QHkZQk.roa (raw, json)
Hash identifier: hbtsmyoRL6+/DCyRuJIHuZJs0mFtr5c8twcGzFySqww=
Subject key identifier: 83:E7:68:65:30:C9:E1:D7:B3:55:81:25:BF:F3:B2:ED:01:E4:65:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28BC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g-doZTDJ4dezVYElv_Oy7QHkZQk.roa
Signing time: Fri 01 Sep 2023 10:05:43 +0000
ROA not before: Fri 01 Sep 2023 10:05:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10428 (0x28bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=83E7686530C9E1D7B3558125BFF3B2ED01E46509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:71:f0:60:8c:37:c2:d9:29:a7:f3:3d:65:2e:
64:5d:9f:71:02:fc:42:b6:24:97:b6:c8:64:8b:08:
c6:3a:29:e3:20:18:80:f3:a5:87:e9:47:c5:41:8d:
8c:7b:ba:b8:ab:bd:31:19:a0:9a:32:c5:b0:29:d4:
37:44:86:2c:02:d1:50:0f:4a:b5:f9:56:e4:b0:6e:
78:89:09:8d:f3:c5:73:88:6c:96:75:fe:f1:70:bb:
86:3d:cf:44:8f:20:36:f3:2c:18:9c:5d:01:09:40:
f1:08:d0:3d:e6:ff:98:ff:37:47:b7:af:52:6b:b0:
54:16:80:a2:6d:3a:05:9d:33:f2:59:eb:11:c4:79:
c5:45:d3:2c:b5:28:71:e6:79:c1:97:46:06:a3:a7:
d3:ef:0d:af:f7:4e:bb:80:f8:37:f5:70:63:41:5e:
17:55:8e:c4:73:a6:20:d1:e7:14:6b:df:83:03:58:
d7:07:fb:97:43:cc:f9:93:ef:0b:d6:11:3d:a9:32:
da:58:96:b9:f6:b0:ba:82:3c:c9:84:99:42:64:0b:
ba:65:8b:41:d9:09:ba:5c:de:fc:04:d1:a3:60:bc:
3e:8e:9c:25:90:e0:81:6c:88:e3:b7:c0:32:ec:ba:
3c:4c:58:51:7e:8e:e4:ec:90:0f:2d:71:15:ce:d8:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E7:68:65:30:C9:E1:D7:B3:55:81:25:BF:F3:B2:ED:01:E4:65:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g-doZTDJ4dezVYElv_Oy7QHkZQk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5b:c4:3c:8e:e0:30:cd:95:c3:92:c1:a9:8d:db:0e:5c:56:
8a:dc:98:36:c7:f8:12:55:db:8f:88:3d:b9:75:a5:ee:85:a6:
8e:dd:7e:a1:c6:6a:fc:58:85:e0:e6:e9:a9:56:a5:ca:84:20:
28:ee:a9:40:bf:24:f5:98:bb:ca:7d:35:73:46:4c:4f:64:21:
92:56:04:1c:cc:02:e0:0e:d6:cb:6c:38:f8:ba:ce:ee:51:86:
9a:12:da:b7:4d:41:3f:84:1e:7e:c9:95:1a:f2:4e:f8:0d:ab:
d2:6c:64:81:11:c7:34:a2:96:92:33:ad:20:9a:13:4a:24:df:
7e:a9:64:18:39:38:8f:c7:89:49:f3:ef:73:a1:87:0a:fc:80:
f2:40:b5:dd:cf:37:f2:76:15:7e:3a:85:54:8f:0e:40:30:2a:
d5:ed:d1:47:92:3a:8d:40:2c:2f:0f:e3:0b:9c:a2:86:52:5c:
f3:b9:ec:85:af:ec:cc:48:29:ec:be:55:10:32:38:87:8b:3d:
ae:e2:53:82:99:03:e2:95:9b:07:b5:9c:68:12:f8:fe:9d:97:
84:5e:7b:99:91:12:d2:59:d6:d5:8a:54:a7:ac:15:f1:57:55:
cb:24:51:3d:23:a7:d9:c7:8c:d5:16:69:70:27:b0:0e:31:02:
a5:04:e5:27
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKLwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1NDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDgzRTc2ODY1MzBDOUUx
RDdCMzU1ODEyNUJGRjNCMkVEMDFFNDY1MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJcfBgjDfC2Smn8z1lLmRdn3EC/EK2JJe2yGSLCMY6KeMgGIDz
pYfpR8VBjYx7urirvTEZoJoyxbAp1DdEhiwC0VAPSrX5VuSwbniJCY3zxXOIbJZ1
/vFwu4Y9z0SPIDbzLBicXQEJQPEI0D3m/5j/N0e3r1JrsFQWgKJtOgWdM/JZ6xHE
ecVF0yy1KHHmecGXRgajp9PvDa/3TruA+Df1cGNBXhdVjsRzpiDR5xRr34MDWNcH
+5dDzPmT7wvWET2pMtpYlrn2sLqCPMmEmUJkC7pli0HZCbpc3vwE0aNgvD6OnCWQ
4IFsiOO3wDLsujxMWFF+juTskA8tcRXO2MK/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUg+doZTDJ4dezVYElv/Oy7QHkZQkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2ctZG9aVERKNGRlelZZRWx2
X095N1FIa1pRay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
Ad8wDQYJKoZIhvcNAQELBQADggEBAFxbxDyO4DDNlcOSwamN2w5cVorcmDbH+BJV
24+IPbl1pe6Fpo7dfqHGavxYheDm6alWpcqEICjuqUC/JPWYu8p9NXNGTE9kIZJW
BBzMAuAO1stsOPi6zu5RhpoS2rdNQT+EHn7JlRryTvgNq9JsZIERxzSilpIzrSCa
E0ok336pZBg5OI/HiUnz73Ohhwr8gPJAtd3PN/J2FX46hVSPDkAwKtXt0UeSOo1A
LC8P4wucooZSXPO57IWv7MxIKey+VRAyOIeLPa7iU4KZA+KVmwe1nGgS+P6dl4Re
e5mREtJZ1tWKVKesFfFXVcskUT0jp9nHjNUWaXAnsA4xAqUE5Sc=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org