Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s-NQlnvnRWpJzG7dN7dSARMvgbE.roa
File: s-NQlnvnRWpJzG7dN7dSARMvgbE.roa (raw, json)
Hash identifier: 1JQwO+aGShqYhbW2Ytj2j/ILJJyV77ExZLgk6IO33xI=
Subject key identifier: B3:E3:50:96:7B:E7:45:6A:49:CC:6E:DD:37:B7:52:01:13:2F:81:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2825
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s-NQlnvnRWpJzG7dN7dSARMvgbE.roa
Signing time: Fri 01 Sep 2023 10:05:00 +0000
ROA not before: Fri 01 Sep 2023 10:05:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.16.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10277 (0x2825)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B3E350967BE7456A49CC6EDD37B75201132F81B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:47:68:a3:90:00:6b:f6:4c:51:17:8c:15:3a:
36:1f:dd:57:c1:b4:79:44:d9:04:e9:ba:57:92:d1:
16:f6:04:e4:7f:1b:88:0c:63:17:8b:30:94:89:99:
f9:51:45:84:07:31:aa:00:1e:e7:6d:d2:e3:87:a3:
5b:ef:51:ed:5a:4d:48:ca:0e:61:f2:be:f1:6a:b6:
33:93:4b:b5:a1:06:78:3e:4e:a8:2c:be:d1:ef:c0:
6d:ca:15:e8:f0:35:72:ff:8c:20:4d:d9:3a:4e:16:
71:f6:2f:23:b5:8d:f5:9c:d1:ec:b3:7e:dc:ce:e3:
40:88:d7:a7:13:d4:e1:cc:5d:d1:0d:38:b9:7d:47:
05:f7:54:f8:d5:91:15:dd:6d:6d:fc:cf:33:0d:df:
80:b3:ec:1e:44:b3:f3:10:ef:8b:09:d1:90:5b:8a:
e8:d8:6d:b6:11:db:de:5e:d7:2e:57:12:09:f5:de:
23:fa:dc:8d:bf:e2:b6:48:98:9f:ba:58:0b:a6:b5:
de:f3:c2:8c:95:63:2b:f2:d4:38:ef:53:73:b8:c2:
c0:50:be:05:5d:9d:f2:65:25:ef:3a:ce:4a:90:3b:
37:45:b0:ce:ef:e6:d3:5b:2c:ff:e9:4a:c1:dc:c7:
44:68:24:cf:15:ff:23:ba:db:56:fe:ea:17:53:5d:
48:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:50:96:7B:E7:45:6A:49:CC:6E:DD:37:B7:52:01:13:2F:81:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/s-NQlnvnRWpJzG7dN7dSARMvgbE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.16.0/21
Signature Algorithm: sha256WithRSAEncryption
94:da:e8:39:ab:b4:26:e6:f4:d8:b8:9c:ad:b6:b2:ea:d6:96:
97:57:80:94:36:43:93:48:a6:f4:b3:22:4b:3f:c9:fe:2f:23:
11:29:a7:bd:51:7e:9c:ee:c9:a9:29:ba:58:2a:06:0c:96:91:
80:46:d0:9c:1a:88:05:84:38:45:ed:4c:23:8a:18:7b:2f:87:
9a:7c:b9:06:6f:da:0d:46:b0:95:5a:58:e7:1d:4c:0f:78:93:
ee:81:da:c4:49:c7:9d:3a:cb:48:dc:cc:eb:fd:d4:d8:ae:f9:
af:7f:98:55:58:90:bd:67:82:5a:ef:34:ab:4a:be:ab:1d:dd:
da:1d:11:b1:9f:f7:d0:60:f0:5b:8a:5e:6c:ae:6a:46:86:ac:
8e:68:e6:65:da:c8:38:0b:18:1a:39:44:c9:12:6f:7b:d2:b6:
62:d0:f0:5a:e9:e9:ce:c0:c6:72:da:2a:3b:31:5b:23:27:d1:
29:16:f0:ef:57:74:e5:d3:22:5a:7b:3b:67:41:49:b0:ef:96:
21:28:4f:49:8f:c9:e5:34:11:2a:42:94:5c:29:23:91:47:c6:
d2:2e:3a:18:a4:74:6d:8c:56:1c:f7:12:43:96:22:ee:35:0a:
0f:b3:6c:25:7a:f2:b7:f6:c3:10:70:21:1c:fe:b4:ed:c9:67:
55:ec:c4:90
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKCUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEIzRTM1MDk2N0JFNzQ1
NkE0OUNDNkVERDM3Qjc1MjAxMTMyRjgxQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsR2ijkABr9kxRF4wVOjYf3VfBtHlE2QTpuleS0Rb2BOR/G4gM
YxeLMJSJmflRRYQHMaoAHudt0uOHo1vvUe1aTUjKDmHyvvFqtjOTS7WhBng+Tqgs
vtHvwG3KFejwNXL/jCBN2TpOFnH2LyO1jfWc0eyzftzO40CI16cT1OHMXdENOLl9
RwX3VPjVkRXdbW38zzMN34Cz7B5Es/MQ74sJ0ZBbiujYbbYR295e1y5XEgn13iP6
3I2/4rZImJ+6WAumtd7zwoyVYyvy1DjvU3O4wsBQvgVdnfJlJe86zkqQOzdFsM7v
5tNbLP/pSsHcx0RoJM8V/yO621b+6hdTXUh7AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUs+NQlnvnRWpJzG7dN7dSARMvgbEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3MtTlFsbnZuUldwSnpHN2RO
N2RTQVJNdmdiRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
ARAwDQYJKoZIhvcNAQELBQADggEBAJTa6DmrtCbm9Ni4nK22surWlpdXgJQ2Q5NI
pvSzIks/yf4vIxEpp71RfpzuyakpulgqBgyWkYBG0JwaiAWEOEXtTCOKGHsvh5p8
uQZv2g1GsJVaWOcdTA94k+6B2sRJx506y0jczOv91Niu+a9/mFVYkL1nglrvNKtK
vqsd3dodEbGf99Bg8FuKXmyuakaGrI5o5mXayDgLGBo5RMkSb3vStmLQ8Frp6c7A
xnLaKjsxWyMn0SkW8O9XdOXTIlp7O2dBSbDvliEoT0mPyeU0ESpClFwpI5FHxtIu
OhikdG2MVhz3EkOWIu41Cg+zbCV68rf2wxBwIRz+tO3JZ1XsxJA=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org