Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n8JVQyFGb23-TRTX0GPTmF4vgRg.roa
File: n8JVQyFGb23-TRTX0GPTmF4vgRg.roa (raw, json)
Hash identifier: T7eCtcMZE3eJ6eGW8puqttzqVDW+p1mebenpIM5eBDA=
Subject key identifier: 9F:C2:55:43:21:46:6F:6D:FE:4D:14:D7:D0:63:D3:98:5E:2F:81:18
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27E9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n8JVQyFGb23-TRTX0GPTmF4vgRg.roa
Signing time: Fri 01 Sep 2023 10:04:43 +0000
ROA not before: Fri 01 Sep 2023 10:04:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10217 (0x27e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9FC2554321466F6DFE4D14D7D063D3985E2F8118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:8d:5a:8a:ad:5f:d2:7e:f6:d5:fa:7a:70:5d:
6b:0d:5c:af:12:79:b6:f0:fa:f4:b4:97:30:8d:85:
08:0d:79:89:a5:40:85:09:b3:6d:b3:34:d0:cd:40:
25:c3:8e:99:4f:8a:da:7f:99:48:a9:83:2c:60:04:
fe:74:2f:8f:a8:ff:a5:c8:42:d5:72:19:5f:57:83:
94:d0:45:e1:14:b9:dd:92:b4:c0:85:92:9b:7c:ca:
cc:ba:87:f1:ec:33:7c:db:80:c0:16:2b:4e:99:bd:
66:8e:0e:f3:48:ac:71:ab:8a:05:8e:d7:8b:1e:e1:
dd:24:01:ff:a5:45:e4:54:b3:71:30:7a:01:29:49:
c4:e2:4c:29:ab:99:be:2f:e8:1d:cd:39:e3:38:3e:
09:e1:44:04:a6:35:14:00:2e:12:50:d2:d2:63:a6:
2f:cc:5d:c0:0b:17:32:64:b6:de:dc:2a:e0:38:05:
18:46:1b:14:a2:b4:2d:94:63:12:35:2a:67:4a:83:
cb:07:90:00:69:6f:0e:9f:9e:79:be:85:e9:73:a8:
da:90:ef:0c:11:da:f9:fe:cf:cd:09:20:e2:54:01:
45:1b:b2:1d:65:96:f2:74:ab:f1:b3:c3:41:4d:17:
aa:a9:a8:22:f7:b2:64:2f:bd:e1:c0:b5:a7:97:15:
13:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:55:43:21:46:6F:6D:FE:4D:14:D7:D0:63:D3:98:5E:2F:81:18
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/n8JVQyFGb23-TRTX0GPTmF4vgRg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.212.0/22
Signature Algorithm: sha256WithRSAEncryption
38:cd:8e:63:a7:a8:60:55:cc:ad:37:dd:36:75:b9:63:80:03:
0b:e2:8c:01:17:fa:52:a5:c6:46:00:7a:9f:56:ee:d8:14:bf:
3b:48:a7:e6:cc:68:a2:f5:94:fd:64:26:f6:35:75:49:cc:10:
ea:2a:0d:63:0b:8b:98:21:b0:f9:83:98:2a:37:ce:f6:7b:47:
f6:39:52:ac:d9:d0:15:ad:55:ee:bb:fa:09:72:2b:e4:c2:39:
a0:68:2a:94:a4:e5:14:23:59:e6:d5:41:42:bf:44:70:18:f2:
1b:2b:79:d3:92:33:12:ac:90:fe:f9:e8:53:70:64:c8:b2:8a:
fd:c4:bc:b8:0a:24:71:b5:76:aa:97:d5:a4:7e:87:a4:d0:42:
fb:38:93:9c:61:0b:fc:52:10:92:fe:3a:bb:4c:b3:57:0d:35:
36:81:79:90:96:22:12:61:52:26:57:4e:1f:73:fd:2f:8a:ef:
8a:06:13:08:2e:38:15:46:69:b2:98:a3:71:5f:4b:9d:dd:06:
a5:0e:71:95:72:5f:fb:91:32:5f:8e:70:68:6c:07:c1:81:99:
aa:bf:bf:d6:bc:f2:7c:c0:d8:53:82:64:c6:7b:c0:77:7f:fb:
4f:d3:ff:6c:82:a6:cf:d6:ea:9c:be:94:8f:55:c9:d9:f0:99:
06:e3:42:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org