Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rRAgpGBFo2bdAYVLXxQnQbl6V84.roa
File: rRAgpGBFo2bdAYVLXxQnQbl6V84.roa (raw, json)
Hash identifier: 4E+mJx51Q9u6W/fBGZ/xXsvj71NiMLyGMnmqbMdRNIs=
Subject key identifier: AD:10:20:A4:60:45:A3:66:DD:01:85:4B:5F:14:27:41:B9:7A:57:CE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2956
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rRAgpGBFo2bdAYVLXxQnQbl6V84.roa
Signing time: Fri 01 Sep 2023 10:06:24 +0000
ROA not before: Fri 01 Sep 2023 10:06:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10582 (0x2956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AD1020A46045A366DD01854B5F142741B97A57CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b5:2c:62:13:75:0d:c5:b6:e9:e7:bc:5f:67:
ed:d1:a9:65:c7:fe:30:b9:89:fd:60:44:bf:12:59:
98:7f:1c:03:a8:5e:e1:fc:97:ac:cd:3f:fc:e2:76:
7d:13:51:0e:e6:71:c6:97:8c:08:22:0b:1e:c8:0c:
58:9d:8c:b0:d3:0a:2d:53:8b:90:6e:71:2e:50:fd:
82:ed:47:59:9d:4d:8b:08:63:20:cc:b9:40:8a:4c:
ab:05:3e:cd:04:f1:18:c6:a4:60:78:18:0a:d3:af:
35:be:8d:1a:0c:d8:09:e6:c3:b7:ec:6f:21:b4:f5:
a6:c0:0d:90:28:ed:4e:ec:8b:ca:26:fb:aa:32:52:
1d:af:96:5b:55:eb:c5:a1:ec:5e:52:66:e7:5e:7a:
a9:89:80:23:9d:d6:08:62:40:16:68:07:a4:15:1c:
29:06:39:88:1d:57:93:65:5b:01:b2:22:b7:c3:0e:
42:72:6a:cd:2f:66:a7:28:40:89:a9:fc:81:9f:9a:
c6:e4:87:97:ea:04:22:f7:52:94:30:f9:b9:dd:09:
7c:62:7a:99:03:ee:6f:5d:f7:33:ea:1a:92:7f:64:
c9:7b:a2:ef:28:85:1c:5b:60:ad:41:31:3c:14:6f:
cb:d2:b9:66:69:1f:34:87:5a:84:ac:6a:27:70:d5:
a1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:20:A4:60:45:A3:66:DD:01:85:4B:5F:14:27:41:B9:7A:57:CE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rRAgpGBFo2bdAYVLXxQnQbl6V84.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8d:13:34:3b:c1:6f:d9:b8:f0:90:60:c5:d9:c0:38:78:b6:
e0:62:cc:da:0d:c5:bb:30:27:14:fb:fd:b5:90:ae:ff:7f:82:
c4:41:a3:98:59:03:80:58:f0:28:55:a2:ab:52:12:b1:ac:a5:
dd:dc:50:13:18:96:b5:46:59:e3:86:88:30:56:cd:86:47:b9:
d3:9c:f1:36:f1:d8:45:1c:66:45:c5:21:3f:2f:ea:5b:6f:db:
13:2b:cd:a1:0f:80:97:49:ae:41:68:ee:b9:03:78:ef:78:eb:
b7:ed:33:50:ed:ba:f6:b7:33:3a:9c:88:a7:a6:72:9b:56:0d:
a2:8b:b6:f9:9f:34:a1:2a:00:27:c1:66:1f:fb:3c:b5:e8:4b:
aa:15:d3:7d:d0:8c:af:ba:0b:f8:d5:2b:bd:2d:dc:8f:7e:b0:
dd:6c:76:87:72:b5:a2:e6:5f:d5:ed:2c:d2:ad:29:e0:99:88:
ad:52:ee:21:6f:84:90:45:4f:83:7b:32:b3:d9:92:8b:ae:1f:
83:97:af:b6:0a:50:a9:cb:08:98:09:59:94:b1:0a:46:db:e2:
96:d8:0a:3d:81:e3:35:19:fe:e0:5c:93:20:f4:e1:58:9d:bf:
1d:4f:25:b5:45:79:5f:53:93:2a:cf:41:8b:5f:a2:38:be:8b:
c1:4c:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org