Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hpTXCbT0IvyYS5xhiFT89-QkqKo.roa
File: hpTXCbT0IvyYS5xhiFT89-QkqKo.roa (raw, json)
Hash identifier: m1GzYPIs8xZKAoT72/P8swvPl1fNzi7HgCwhdOJvFaQ=
Subject key identifier: 86:94:D7:09:B4:F4:22:FC:98:4B:9C:61:88:54:FC:F7:E4:24:A8:AA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2831
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hpTXCbT0IvyYS5xhiFT89-QkqKo.roa
Signing time: Fri 01 Sep 2023 10:05:03 +0000
ROA not before: Fri 01 Sep 2023 10:05:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10289 (0x2831)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8694D709B4F422FC984B9C618854FCF7E424A8AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:59:92:49:bf:59:ae:45:89:67:1c:a9:c3:
5e:d1:bf:99:98:3d:ca:36:b2:58:81:d2:ae:32:70:
08:fd:1a:6e:a6:23:d9:a0:9e:d5:b1:26:85:d1:90:
ac:a5:4b:d3:78:7a:57:82:b0:7d:b8:6d:7b:24:f8:
32:be:0f:e6:95:4b:e3:cd:a6:8a:1a:b6:a2:e1:7f:
9f:fd:03:42:b2:05:fc:6f:9a:52:15:9a:d4:7c:b0:
51:8f:b7:37:55:64:02:c8:6a:60:da:b8:0f:1f:ae:
66:32:ba:7f:27:04:95:6b:79:03:66:63:fc:a1:a4:
8d:1a:56:c3:3b:0d:6c:e1:39:a7:19:eb:95:51:4b:
e0:94:5a:bf:f3:cc:24:e9:d6:3e:54:a6:df:1a:7e:
be:7f:0b:de:63:36:8f:3c:52:24:27:ff:68:58:14:
2f:b8:cf:e2:56:56:5f:2d:d2:55:55:8d:fe:0a:12:
c5:d2:15:a8:3e:8e:33:ee:de:88:aa:3c:0a:12:2d:
fc:25:10:2e:dc:3c:07:e7:3f:40:c0:6a:d0:9f:b4:
30:a3:78:55:5c:fc:71:c9:b8:a3:18:00:01:d7:5e:
f6:78:c5:a8:89:2a:07:56:dc:34:ba:d1:e8:8d:c1:
df:d7:cb:d1:2a:a9:c4:39:de:7d:98:7e:88:7b:73:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:94:D7:09:B4:F4:22:FC:98:4B:9C:61:88:54:FC:F7:E4:24:A8:AA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hpTXCbT0IvyYS5xhiFT89-QkqKo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.165.0/24
Signature Algorithm: sha256WithRSAEncryption
58:20:40:30:af:71:86:f7:77:4f:de:aa:db:c2:d9:cc:48:7a:
1b:9d:1d:ce:92:4f:39:20:bd:c6:a7:f7:83:34:0c:5e:1a:b4:
35:1c:30:b8:17:bf:f3:2f:84:3c:a3:96:d5:3a:50:e4:56:75:
fb:f4:d9:45:63:19:b3:72:ce:e7:ca:7a:95:01:a5:00:3f:3b:
c9:9b:6c:2c:16:85:04:1b:57:96:5d:05:d6:03:e5:0e:46:38:
e8:b6:56:5e:f1:f6:33:06:25:ce:9a:39:33:82:9e:b6:00:1d:
e6:28:c2:dc:ce:a6:24:13:4b:89:1e:90:98:20:5f:c4:3f:ce:
68:da:46:10:2c:0e:41:df:26:7b:78:35:ca:a6:1b:72:c1:fa:
69:c4:34:f6:84:05:6e:5e:62:e6:88:a0:77:42:a8:cc:30:1d:
ac:e7:ff:2e:e5:1a:3a:5d:a2:bc:ed:6b:86:b7:9d:e6:b0:9a:
60:b5:78:29:59:25:9f:c6:50:18:7b:96:01:49:5c:ae:1a:48:
4c:e2:52:11:d3:96:29:05:72:42:27:a6:e6:c0:99:78:7d:2e:
82:c2:03:ae:5f:36:c6:4a:a4:0f:b4:72:fb:c6:bd:b3:6e:4a:
80:b3:b4:25:9d:90:b6:3a:c1:de:ff:7d:6e:e7:f7:36:03:bd:
ac:84:69:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org