Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oiqMlzH1tpPhhoZeDWy_70UAQbg.roa
File: oiqMlzH1tpPhhoZeDWy_70UAQbg.roa (raw, json)
Hash identifier: 6jAefoaHZlASXB8sQN/Susj4aKXlfZZaevU+R57ySc8=
Subject key identifier: A2:2A:8C:97:31:F5:B6:93:E1:86:86:5E:0D:6C:BF:EF:45:00:41:B8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A75
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oiqMlzH1tpPhhoZeDWy_70UAQbg.roa
Signing time: Fri 01 Sep 2023 10:07:55 +0000
ROA not before: Fri 01 Sep 2023 10:07:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10869 (0x2a75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A22A8C9731F5B693E186865E0D6CBFEF450041B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:ef:5f:75:b5:48:1c:91:ff:e9:db:71:27:
83:7b:77:b8:a6:07:57:96:e0:ce:63:bd:16:ac:19:
a3:46:25:52:53:25:4a:b2:be:0a:bc:78:3d:53:9b:
e7:77:14:68:2e:ba:d7:90:02:59:5f:b2:ff:8b:48:
99:15:56:8b:1a:ee:09:7b:d3:db:a4:2d:18:64:2c:
ad:04:22:1d:fb:8d:b7:aa:41:3d:01:82:d9:1a:82:
3c:f1:0e:3f:a5:c6:85:11:29:0c:31:fe:a7:f1:1e:
8e:98:55:6a:7a:82:b1:9f:8c:12:1a:d0:29:4d:c4:
a4:93:89:9f:f1:bf:da:63:ca:fa:84:c9:e3:27:9c:
db:db:4f:a6:99:16:f1:6e:31:ef:9a:f0:d2:c1:e0:
a3:24:d6:3e:5e:7e:d6:a3:d3:e4:53:d0:50:f5:d2:
45:9b:0c:31:41:21:0f:74:20:59:c8:c6:74:2d:82:
58:85:27:24:4b:30:5a:6e:cf:a8:b2:d3:c6:3f:28:
2f:de:48:17:27:8f:de:19:13:e5:dc:37:10:ed:6d:
88:63:1a:e6:47:de:dc:af:13:9d:2f:00:08:5b:18:
98:37:4f:d3:83:34:e9:2f:4e:49:46:51:0a:95:74:
5f:54:ce:16:64:fd:76:51:29:1f:8c:f1:95:e0:c3:
a8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2A:8C:97:31:F5:B6:93:E1:86:86:5E:0D:6C:BF:EF:45:00:41:B8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oiqMlzH1tpPhhoZeDWy_70UAQbg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.80.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:e6:61:42:3d:9a:b6:1c:b5:e2:79:8d:74:88:8d:66:68:54:
75:13:98:de:a0:75:a1:7c:19:02:a4:e0:dc:a9:79:47:87:52:
65:cd:a8:0b:20:97:55:bd:73:ec:72:7d:47:83:c0:3a:dd:60:
43:48:3a:2c:30:73:e9:8f:b4:2c:c9:97:47:8c:c8:bc:ae:74:
c6:1f:6d:92:56:cf:9a:4d:78:95:18:0e:26:dc:75:95:21:89:
a5:f0:5a:72:24:67:d9:3f:71:68:52:8a:7b:87:76:39:c4:84:
fd:87:a4:50:09:83:10:05:e4:31:07:01:68:50:45:05:a6:08:
67:a7:e1:3f:4e:55:9a:c7:b0:53:c4:5b:ea:a7:3b:9a:4c:1e:
35:10:5c:e0:c7:74:32:5a:11:eb:41:cf:a7:c8:1f:88:b6:be:
af:ba:41:23:cc:9b:ac:be:d0:45:f2:f8:5d:ec:4b:dc:88:c9:
f9:5f:42:81:78:a9:c5:9b:18:63:3b:73:bc:bc:4c:b0:66:24:
68:44:aa:2c:fe:39:c4:cb:0a:86:f6:22:5d:a7:09:67:40:84:
f4:4f:41:46:a2:9f:1e:5a:3d:e5:f3:06:0c:e9:6b:0a:9a:17:
52:cc:84:5e:cd:7f:f3:80:cd:d8:d1:e0:13:2b:33:5d:6f:2b:
0c:d7:7e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org