Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLnbi33RsnUJpsP0UQ5LbHNRNM4.roa
File: gLnbi33RsnUJpsP0UQ5LbHNRNM4.roa (raw, json)
Hash identifier: SStcrd4KDQOfTDzFMa826KcBJpv9uj0ifffLgQNZXQo=
Subject key identifier: 80:B9:DB:8B:7D:D1:B2:75:09:A6:C3:F4:51:0E:4B:6C:73:51:34:CE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A4F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLnbi33RsnUJpsP0UQ5LbHNRNM4.roa
Signing time: Fri 01 Sep 2023 10:07:44 +0000
ROA not before: Fri 01 Sep 2023 10:07:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10831 (0x2a4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=80B9DB8B7DD1B27509A6C3F4510E4B6C735134CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3a:08:42:26:2c:0e:f4:4f:3f:49:18:89:b2:
d3:2e:29:13:5c:c1:7d:a5:26:b2:c6:1c:0e:6f:01:
f1:c9:67:46:0c:66:18:ca:0c:52:6c:a1:85:a8:95:
ca:6b:fd:43:17:ff:66:12:68:94:63:bc:bb:25:98:
f0:61:4e:9d:11:3d:9f:b6:29:c1:dd:82:37:4c:b8:
29:4e:4f:95:26:2d:52:33:ec:a2:66:9e:35:ca:90:
f3:7f:df:ea:89:77:12:f9:c1:18:99:1f:4c:7f:9f:
22:65:09:9a:d5:c2:f2:91:27:05:6d:16:59:60:0f:
0f:d7:a7:c7:85:23:5a:ee:8c:fc:25:32:94:21:40:
8d:73:27:23:40:5e:fc:9b:c6:7b:4a:b4:fd:3e:e2:
c6:8e:59:b9:5a:35:64:7b:ab:1a:5a:2c:ed:28:8d:
67:06:7b:6c:5b:98:38:dd:8f:42:97:24:06:ef:2e:
80:82:af:e6:5e:ff:86:8e:b0:28:73:38:f7:df:5c:
fb:84:ec:26:64:d0:d4:39:20:df:7c:54:fd:57:f5:
5c:ac:bd:d8:7c:ed:77:f8:48:f5:ee:8e:f0:7b:60:
b8:b8:c5:e4:80:1f:07:45:8a:cf:d1:73:c3:9c:e6:
4d:a3:8b:77:89:98:33:9f:d1:e2:9e:0b:9a:18:8f:
62:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B9:DB:8B:7D:D1:B2:75:09:A6:C3:F4:51:0E:4B:6C:73:51:34:CE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gLnbi33RsnUJpsP0UQ5LbHNRNM4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:80:aa:b6:d3:b8:e7:37:9a:cb:be:1c:3c:27:cc:e8:8f:d9:
64:a7:65:81:72:1d:a9:a5:5b:35:7f:02:f4:90:96:0b:dc:e7:
9d:0e:e3:c7:1b:98:16:66:15:ac:a7:04:f7:b2:ce:5f:89:ce:
b2:8b:f6:b0:d5:44:58:1a:f9:60:cf:ad:ff:09:f4:a3:b2:3a:
4b:e9:a9:eb:96:ac:69:da:17:f1:42:a7:71:e6:81:51:5b:b2:
d5:19:71:bd:31:b8:25:bb:e4:a6:df:ee:19:cf:b7:a8:d7:5a:
46:fc:3d:35:d3:ca:0a:e2:3d:7e:36:68:2c:e5:44:e8:ef:d5:
34:87:47:9b:4f:f6:f3:b7:be:89:1a:76:f1:3a:2c:49:3e:00:
c3:30:53:0b:3c:e0:cf:19:3f:2e:30:ad:d8:19:7d:99:f5:b9:
72:a1:96:d6:78:b8:43:cd:b0:a0:39:9a:43:ec:2f:25:9a:3e:
87:79:56:32:ae:ee:ff:12:e9:ea:fc:a1:f4:f2:dd:d6:3d:23:
49:20:6d:be:88:a2:97:9f:c5:e0:2f:0c:1d:73:09:44:bc:60:
8b:9d:e1:d1:b4:36:4d:8a:10:d7:00:39:50:b6:70:39:82:6d:
90:52:5d:ab:3c:b4:aa:7a:e7:fa:90:0c:17:ba:33:3a:05:c6:
ca:ff:eb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org