Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ofBnLI1I-rasXpeurZfkAeqNwcM.roa
File: ofBnLI1I-rasXpeurZfkAeqNwcM.roa (raw, json)
Hash identifier: Sdz+mXRak+a4TNqvMSBEHmt/asQ/IvBppK8yZREVq2Y=
Subject key identifier: A1:F0:67:2C:8D:48:FA:B6:AC:5E:97:AE:AD:97:E4:01:EA:8D:C1:C3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2859
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ofBnLI1I-rasXpeurZfkAeqNwcM.roa
Signing time: Fri 01 Sep 2023 10:05:14 +0000
ROA not before: Fri 01 Sep 2023 10:05:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10329 (0x2859)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A1F0672C8D48FAB6AC5E97AEAD97E401EA8DC1C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:0a:57:16:70:12:4d:5c:e1:ee:d4:42:d5:
cb:dd:17:71:f0:13:0c:e5:fe:e0:06:b6:3e:bc:f9:
0c:c5:37:33:bb:9d:a2:f4:1c:62:a4:99:47:3b:1e:
4a:7c:85:65:23:76:9a:e3:31:1c:d8:3f:4d:37:20:
70:e3:28:29:34:84:02:fa:44:75:8a:bb:5f:ce:7d:
bf:0b:d7:7b:42:57:49:c7:ad:e1:a6:a3:02:34:ba:
00:0f:1f:f8:c4:78:9f:ad:31:09:b0:d4:4c:be:41:
63:97:7a:f9:6b:1f:b0:8e:b7:fa:ed:d8:02:32:8a:
77:4d:e5:15:c3:b8:de:b3:86:ae:07:f0:94:b4:b4:
94:aa:6a:19:f5:a2:c2:86:21:f1:b3:b7:0c:96:1d:
4e:8d:fc:00:f5:5c:39:f4:ee:19:7b:ef:67:93:b5:
d6:c9:a3:9d:bc:2d:1e:4b:72:f9:06:12:91:4a:8d:
53:2e:9f:f9:36:67:50:3d:d2:66:75:61:61:a3:05:
3e:26:8c:7f:4d:dc:93:86:39:88:cf:80:34:0e:b8:
85:ef:58:d3:2d:5e:8e:4f:a4:2b:cc:59:12:1b:02:
3a:29:02:d4:df:6c:94:dc:52:2d:c5:02:27:74:4d:
1c:a1:32:b9:32:a2:1d:28:b6:96:eb:9a:15:10:06:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:67:2C:8D:48:FA:B6:AC:5E:97:AE:AD:97:E4:01:EA:8D:C1:C3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ofBnLI1I-rasXpeurZfkAeqNwcM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:ac:98:39:9c:8f:8b:43:31:7b:26:d5:be:3c:19:53:39:90:
88:2b:d9:d4:6b:40:22:f3:d4:65:61:72:da:e7:06:db:93:14:
02:e2:ad:7b:69:e3:8d:a3:2e:07:96:4d:e2:f3:cf:b2:2e:8f:
b0:37:1d:08:b8:54:cb:96:7d:b6:9d:99:d6:f1:a6:cf:08:ac:
4b:49:4d:b5:fb:bc:38:66:7c:a8:3e:e7:f9:65:9f:d8:67:45:
28:3b:8d:8f:08:6d:ce:06:99:8b:d2:ed:46:57:12:06:0c:ef:
72:19:1d:f9:a6:b2:28:be:87:6c:1a:34:b4:07:9a:5f:2e:ef:
c2:3a:ac:4f:eb:a5:c4:f7:cb:3a:17:ea:eb:96:71:31:ff:51:
84:cc:7e:98:37:3e:8a:aa:e6:b8:26:c0:6a:7e:4b:e5:3d:6e:
8c:b8:01:47:4c:d8:61:f8:37:59:b9:2b:64:6b:e7:26:83:94:
a6:f8:61:66:94:9a:82:ea:67:6c:2c:9c:e2:eb:db:57:c7:a0:
f8:ce:24:cc:d7:d4:5c:08:2e:44:eb:0c:5f:fb:f3:e3:61:2a:
13:13:09:77:83:d2:32:12:eb:ca:fb:08:9f:a9:ac:fe:ce:c9:
66:3f:21:20:02:0b:ec:f6:6c:37:74:d3:b3:1a:f7:1b:2f:6f:
c4:d5:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org