Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tNvOFoz02vQlEusqLBrp_7FGN08.roa
File: tNvOFoz02vQlEusqLBrp_7FGN08.roa (raw, json)
Hash identifier: X6qH5+2f55vVzoaHbf6RyMU7VlkUMUZkS3FEZS4/+zQ=
Subject key identifier: B4:DB:CE:16:8C:F4:DA:F4:25:12:EB:2A:2C:1A:E9:FF:B1:46:37:4F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 285B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tNvOFoz02vQlEusqLBrp_7FGN08.roa
Signing time: Fri 01 Sep 2023 10:05:14 +0000
ROA not before: Fri 01 Sep 2023 10:05:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10331 (0x285b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B4DBCE168CF4DAF42512EB2A2C1AE9FFB146374F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:20:22:a4:0f:be:ae:38:7e:b1:55:59:24:
62:b8:29:0c:09:84:55:97:6f:fe:bf:ce:66:91:2c:
91:56:18:66:2c:22:4c:3e:ce:71:5e:ee:2d:33:68:
ec:89:92:bd:0e:01:b8:cd:fc:c1:25:65:dd:d6:28:
33:81:7e:50:7f:55:b7:e2:0d:e8:fc:6d:54:fa:ed:
7a:30:8b:6e:cf:ba:40:5a:12:0f:14:5f:74:c3:fe:
8d:36:e2:ca:4a:f1:4f:2b:ba:de:64:13:33:5f:ae:
5d:f3:82:88:2f:47:68:b6:83:65:94:a6:de:9d:e6:
4a:34:93:8e:ca:ae:4c:2d:61:c1:0d:be:e9:c3:7d:
0c:b5:cf:14:1b:ac:99:0a:4f:44:17:0c:58:4f:69:
f7:ba:5c:df:be:f8:ce:2f:8c:ed:df:bc:a2:e6:d8:
57:d6:1e:71:1c:3a:0a:bd:21:ae:4d:9c:6e:d9:78:
e8:b7:45:b2:7e:dd:41:9c:1b:50:30:fb:85:31:bd:
9f:69:55:4f:ec:f5:00:01:38:3e:5d:7c:9a:00:80:
15:0d:69:21:d9:4f:c4:07:4b:f4:92:12:dc:37:08:
82:d5:e7:fc:24:dd:8a:4c:27:77:2a:72:e6:e9:fb:
e6:7d:2c:d7:72:11:78:ba:a2:fd:1c:55:c2:d3:0f:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DB:CE:16:8C:F4:DA:F4:25:12:EB:2A:2C:1A:E9:FF:B1:46:37:4F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tNvOFoz02vQlEusqLBrp_7FGN08.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:64:d7:1c:75:f5:32:31:2a:71:43:2e:97:6e:67:d2:d1:d4:
32:eb:6e:1c:e8:25:76:c8:d1:1f:f4:f2:56:15:13:42:8d:9e:
28:69:c7:32:c3:69:9c:e1:63:9f:63:9c:85:81:83:17:45:29:
67:31:78:cd:0b:24:c7:1a:11:3d:54:0b:ab:ab:81:5e:73:04:
56:72:e4:e4:54:aa:66:ab:5a:7d:25:19:85:d2:ec:c1:c8:fe:
30:b1:a0:56:4f:7f:77:18:ed:d5:68:f0:73:c2:a2:3e:5b:6d:
8e:a0:ef:00:f1:8d:24:9a:3c:a6:b1:ae:ee:64:87:a5:52:dd:
ab:01:fd:22:01:df:e8:ff:38:f4:77:da:24:ff:51:bc:7a:a5:
48:48:43:49:5b:e8:c1:a0:8e:b9:82:49:26:64:af:d2:4b:14:
42:30:1b:e3:e1:85:7d:73:cf:85:15:3f:9c:b4:c1:06:67:d6:
94:c1:a8:ab:00:31:db:e2:47:b5:10:07:ff:38:dc:27:7f:f6:
4c:9b:7d:22:39:a7:3e:1f:12:9a:d7:e2:c3:f0:68:3e:74:a3:
35:19:62:62:ef:39:b5:5d:98:f9:b8:f2:1d:61:83:a4:c6:fd:
8e:c9:4f:a0:06:bc:a7:7e:1d:e9:37:d8:03:09:5b:2d:2a:37:
0c:04:93:0f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI0REJDRTE2OENGNERB
RjQyNTEyRUIyQTJDMUFFOUZGQjE0NjM3NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMJSAipA++rjh+sVVZJGK4KQwJhFWXb/6/zmaRLJFWGGYsIkw+
znFe7i0zaOyJkr0OAbjN/MElZd3WKDOBflB/VbfiDej8bVT67Xowi27PukBaEg8U
X3TD/o024spK8U8rut5kEzNfrl3zgogvR2i2g2WUpt6d5ko0k47KrkwtYcENvunD
fQy1zxQbrJkKT0QXDFhPafe6XN+++M4vjO3fvKLm2FfWHnEcOgq9Ia5NnG7ZeOi3
RbJ+3UGcG1Aw+4UxvZ9pVU/s9QABOD5dfJoAgBUNaSHZT8QHS/SSEtw3CILV5/wk
3YpMJ3cqcubp++Z9LNdyEXi6ov0cVcLTD4O3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtNvOFoz02vQlEusqLBrp/7FGN08wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ROdk9Gb3owMnZRbEV1c3FM
QnJwXzdGR04wOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AWQwDQYJKoZIhvcNAQELBQADggEBAKBk1xx19TIxKnFDLpduZ9LR1DLrbhzoJXbI
0R/08lYVE0KNnihpxzLDaZzhY59jnIWBgxdFKWcxeM0LJMcaET1UC6urgV5zBFZy
5ORUqmarWn0lGYXS7MHI/jCxoFZPf3cY7dVo8HPCoj5bbY6g7wDxjSSaPKaxru5k
h6VS3asB/SIB3+j/OPR32iT/Ubx6pUhIQ0lb6MGgjrmCSSZkr9JLFEIwG+PhhX1z
z4UVP5y0wQZn1pTBqKsAMdviR7UQB/843Cd/9kybfSI5pz4fEprX4sPwaD50ozUZ
YmLvObVdmPm48h1hg6TG/Y7JT6AGvKd+Hek32AMJWy0qNwwEkw8=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org