Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i1JcMYsOzAXJwuXi_b8DCRsbO8k.roa
File: i1JcMYsOzAXJwuXi_b8DCRsbO8k.roa (raw, json)
Hash identifier: Yxue4WIB9zF17JjQKKUkUhQXqTGsJNjWqBltkhuBvhY=
Subject key identifier: 8B:52:5C:31:8B:0E:CC:05:C9:C2:E5:E2:FD:BF:03:09:1B:1B:3B:C9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AC0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i1JcMYsOzAXJwuXi_b8DCRsbO8k.roa
Signing time: Fri 01 Sep 2023 10:08:15 +0000
ROA not before: Fri 01 Sep 2023 10:08:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10944 (0x2ac0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8B525C318B0ECC05C9C2E5E2FDBF03091B1B3BC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:ab:ef:36:93:ca:b7:a8:ea:9b:3a:40:9b:
60:86:83:2d:ba:ee:a3:23:3e:9f:cb:44:6f:ca:6a:
ce:eb:e4:0a:b6:2a:17:1d:a0:9e:03:d0:e9:e6:60:
45:22:c5:95:87:8a:60:75:be:5b:f3:88:18:6b:89:
81:23:44:18:4d:8c:7f:e8:db:87:0d:0c:a7:f3:52:
78:1e:81:12:7d:62:0c:58:7e:dc:79:c3:db:ea:7c:
22:bf:3f:40:96:d5:53:25:48:76:72:7a:71:45:25:
bb:a9:98:78:e5:1c:49:f0:ea:b9:99:5d:9d:03:8a:
ec:df:bf:29:35:5d:0a:22:21:40:f2:eb:42:75:39:
48:3b:ca:b5:78:57:a5:15:a8:3e:dd:72:b5:06:95:
5f:cd:94:6b:2d:a0:d1:9a:ed:95:17:58:ea:cf:7c:
e9:a7:3a:04:11:7d:99:aa:19:0e:fc:fc:4b:06:fd:
b7:f8:71:0f:e6:2a:6e:ec:90:66:01:b9:35:f3:a6:
31:55:a7:7c:92:15:fe:ee:34:6e:4a:ad:ce:c1:e5:
2a:7b:92:2a:f2:1e:ea:82:01:11:e5:eb:09:55:b8:
04:8f:19:cd:c2:55:96:37:a2:0f:72:54:9b:47:15:
51:2e:e0:f8:25:5d:e8:14:63:4d:18:fd:a1:39:65:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:52:5C:31:8B:0E:CC:05:C9:C2:E5:E2:FD:BF:03:09:1B:1B:3B:C9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i1JcMYsOzAXJwuXi_b8DCRsbO8k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.232.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:bc:a8:68:c2:31:d9:ea:78:bf:a8:31:c3:59:e4:47:8f:83:
8c:2e:e5:2b:a3:ea:28:15:ee:7f:eb:24:72:6b:21:3b:57:8e:
e6:07:2a:f3:70:a8:e9:76:54:46:78:36:d0:8c:5f:15:ee:1e:
18:ee:7d:25:dd:c2:b5:ba:03:14:9e:e5:d9:d0:80:d5:42:36:
a6:47:95:bb:1e:0c:6d:aa:e7:a0:12:45:e7:a8:77:a7:46:c8:
2b:17:7b:43:12:6c:f9:0e:7b:62:94:6e:68:52:23:b1:4e:34:
1c:88:1d:28:16:6f:2d:5f:85:7f:b3:09:c7:b9:49:41:85:bf:
8a:a6:a2:87:bc:24:83:ef:b3:f0:f1:09:d8:f4:7b:04:c5:1c:
ce:78:c6:56:a7:15:da:96:80:a7:f0:d0:47:9c:2a:00:4c:46:
78:96:97:29:20:cd:bb:7b:19:c5:6d:ab:01:aa:41:1d:51:ac:
cf:52:19:4b:15:8d:f6:d2:bd:78:96:06:43:9d:22:7f:4f:33:
63:68:73:9e:9d:6d:a6:68:fb:fe:da:94:04:e6:53:a5:30:d7:
a1:ca:a0:ea:8e:a1:36:a3:c2:91:aa:a9:11:2e:af:95:94:84:
c2:bf:32:40:6a:26:18:58:9e:fd:d8:be:58:dd:58:c0:0e:6c:
24:77:d2:87
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MTVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhCNTI1QzMxOEIwRUND
MDVDOUMyRTVFMkZEQkYwMzA5MUIxQjNCQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBwKvvNpPKt6jqmzpAm2CGgy267qMjPp/LRG/Kas7r5Aq2Khcd
oJ4D0OnmYEUixZWHimB1vlvziBhriYEjRBhNjH/o24cNDKfzUngegRJ9YgxYftx5
w9vqfCK/P0CW1VMlSHZyenFFJbupmHjlHEnw6rmZXZ0Diuzfvyk1XQoiIUDy60J1
OUg7yrV4V6UVqD7dcrUGlV/NlGstoNGa7ZUXWOrPfOmnOgQRfZmqGQ78/EsG/bf4
cQ/mKm7skGYBuTXzpjFVp3ySFf7uNG5Krc7B5Sp7kiryHuqCARHl6wlVuASPGc3C
VZY3og9yVJtHFVEu4PglXegUY00Y/aE5ZcUvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUi1JcMYsOzAXJwuXi/b8DCRsbO8kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2kxSmNNWXNPekFYSnd1WGlf
YjhEQ1JzYk84ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AegwDQYJKoZIhvcNAQELBQADggEBAEq8qGjCMdnqeL+oMcNZ5EePg4wu5Suj6igV
7n/rJHJrITtXjuYHKvNwqOl2VEZ4NtCMXxXuHhjufSXdwrW6AxSe5dnQgNVCNqZH
lbseDG2q56ASReeod6dGyCsXe0MSbPkOe2KUbmhSI7FONByIHSgWby1fhX+zCce5
SUGFv4qmooe8JIPvs/DxCdj0ewTFHM54xlanFdqWgKfw0EecKgBMRniWlykgzbt7
GcVtqwGqQR1RrM9SGUsVjfbSvXiWBkOdIn9PM2Noc56dbaZo+/7alATmU6Uw16HK
oOqOoTajwpGqqREur5WUhMK/MkBqJhhYnv3YvljdWMAObCR30oc=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org