Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oJ9UwtjTPIZY0egyLgktSLKyz3U.roa
File: oJ9UwtjTPIZY0egyLgktSLKyz3U.roa (raw, json)
Hash identifier: HOMgK647jtLuWT/aXeV25qwYGnYmdORiwKSoO/eqDcc=
Subject key identifier: A0:9F:54:C2:D8:D3:3C:86:58:D1:E8:32:2E:09:2D:48:B2:B2:CF:75
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A34
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oJ9UwtjTPIZY0egyLgktSLKyz3U.roa
Signing time: Fri 01 Sep 2023 10:07:37 +0000
ROA not before: Fri 01 Sep 2023 10:07:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10804 (0x2a34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A09F54C2D8D33C8658D1E8322E092D48B2B2CF75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:29:97:a6:f5:90:a2:89:1b:99:e3:0c:a7:9c:
c8:e1:ca:43:ad:f3:4a:9d:22:7c:e6:63:43:0a:6d:
23:aa:e1:4c:59:70:27:1c:ad:b8:1e:3e:42:c0:bf:
fc:06:45:0a:e3:b9:89:12:ed:df:f2:27:35:72:fa:
fd:e8:c0:c7:83:80:e9:1a:0b:6c:9a:a6:fd:4f:1d:
f4:74:2e:a4:a5:a3:d7:e2:c0:d6:30:96:37:d9:c2:
4e:88:7a:18:65:32:e4:b1:81:9f:eb:c4:59:64:7b:
e7:02:eb:f4:59:22:f3:86:5d:67:13:2f:d6:83:94:
dc:59:83:6f:bd:81:75:53:ca:60:8d:c5:54:36:56:
68:bc:7a:f3:c7:9b:6a:80:77:97:ef:63:c9:3c:2b:
28:4f:42:98:af:85:43:2a:da:45:22:4b:97:c1:a8:
4a:e7:eb:0e:5f:d3:ab:49:c4:1d:56:1b:4f:60:3d:
b9:c9:27:e9:dc:96:cf:1a:4a:44:3c:d2:97:9b:f2:
b5:02:20:eb:41:e7:c3:be:ee:8a:71:d7:f1:89:42:
1a:18:8a:ba:5a:7b:18:a0:35:49:75:d4:ea:b6:6b:
9d:f3:75:33:7d:82:a5:6c:0f:c5:1c:3e:1e:d7:80:
4d:f9:96:2a:9c:69:cf:8e:15:e2:77:5d:1d:81:98:
d3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9F:54:C2:D8:D3:3C:86:58:D1:E8:32:2E:09:2D:48:B2:B2:CF:75
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oJ9UwtjTPIZY0egyLgktSLKyz3U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f7:ac:10:65:22:16:6f:01:3b:12:f7:77:27:b0:3e:11:0d:
a9:67:d5:df:a4:c4:f3:4a:4f:6e:28:87:aa:e1:f1:b0:67:ef:
ff:98:b6:1d:ad:6f:ce:64:c0:c0:3c:e3:3c:16:c4:a0:4f:cd:
ba:8b:e5:44:a9:3d:72:cf:c5:1f:27:14:4b:85:85:f7:e8:13:
1a:83:da:98:c5:d7:0b:ca:e5:40:cc:32:6f:d2:a3:f9:5d:cc:
8b:2f:aa:96:f1:d3:46:66:f4:96:81:54:55:a0:a3:0d:ea:b8:
c8:75:7d:9b:1d:9e:1b:e2:78:28:3d:24:4e:eb:86:76:24:f4:
02:ca:1b:94:6f:bd:78:42:bc:be:39:3b:64:f8:e0:4f:96:6c:
8f:e1:74:fd:c9:2c:8b:79:0a:77:26:fc:23:ad:3f:94:24:0f:
68:6a:58:3c:24:9b:91:01:de:5b:a9:f4:d2:3b:57:b6:54:c6:
84:e1:21:49:86:ef:1b:d0:b0:d9:05:c7:3c:30:ae:e4:7a:c5:
0c:ac:e7:01:36:b3:dd:f0:65:19:d7:43:88:c5:86:9d:63:8c:
88:92:64:bc:5e:37:17:dc:9d:f1:3c:3a:89:f2:e6:08:48:1c:
55:b1:f3:d8:da:e5:5d:82:91:bd:33:62:ec:52:d1:3f:0a:90:
ef:f7:30:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org