Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQMjfq_LO9VhkgcdhaSXZRBPygQ.roa
File: uQMjfq_LO9VhkgcdhaSXZRBPygQ.roa (raw, json)
Hash identifier: ++w53+B472JzL8/eDL1jttxK22HRq/P5cYtiV5BZxvg=
Subject key identifier: B9:03:23:7E:AF:CB:3B:D5:61:92:07:1D:85:A4:97:65:10:4F:CA:04
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2990
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQMjfq_LO9VhkgcdhaSXZRBPygQ.roa
Signing time: Fri 01 Sep 2023 10:06:45 +0000
ROA not before: Fri 01 Sep 2023 10:06:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.56.0/21 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10640 (0x2990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B903237EAFCB3BD56192071D85A49765104FCA04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:67:48:f2:fa:1e:60:8f:c7:93:3c:63:e1:
ee:e2:17:d7:96:92:23:87:c0:7d:f1:a8:1d:05:d6:
26:90:94:91:48:40:a3:15:a3:9b:e3:ba:49:94:09:
91:40:c5:db:b8:71:21:5b:42:78:2c:d2:49:e7:2c:
fc:2c:85:a3:c8:70:7c:fb:ad:2a:e5:74:03:42:6d:
44:10:39:20:1b:72:98:79:4a:84:64:bc:bf:77:f4:
d9:30:3d:99:9a:65:a1:b3:97:1a:8a:57:09:5a:28:
c9:e4:8d:6f:59:81:7a:59:5e:23:b1:82:05:77:93:
7c:ac:01:bd:49:45:4f:71:24:39:75:a9:4f:9d:76:
b6:0e:55:e5:9f:d6:24:12:f5:11:83:26:31:a5:71:
ac:83:c3:59:47:b3:84:ac:13:45:5d:36:ba:31:61:
d6:25:b8:f4:e5:e5:84:09:53:af:89:88:a6:53:51:
11:c9:37:9d:e9:7e:36:3e:39:41:be:fa:4a:54:97:
fd:c6:90:a5:4d:31:ea:12:a7:4c:51:d1:ed:1c:1b:
5a:57:36:12:d7:f0:af:d4:ef:5a:59:0c:4c:49:b7:
4a:19:9f:fe:9b:d1:7c:cb:eb:16:d4:ae:6c:57:88:
30:38:79:53:4f:9b:62:05:0a:d0:d8:c0:4a:cd:5e:
67:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:03:23:7E:AF:CB:3B:D5:61:92:07:1D:85:A4:97:65:10:4F:CA:04
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uQMjfq_LO9VhkgcdhaSXZRBPygQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.56.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:ed:36:80:45:31:7b:5d:fa:77:13:33:7e:81:49:61:cb:3c:
09:97:f7:6e:c9:b0:33:3e:60:38:91:d4:44:e1:0c:d0:4c:42:
97:1f:9d:c9:9c:e2:c8:f6:be:70:3c:ad:d8:d1:42:03:ae:66:
7a:96:85:d7:dd:5a:43:72:95:28:9a:0d:f4:35:55:db:9f:f0:
af:75:cb:e8:09:aa:60:de:f1:40:8a:6d:7f:5e:8f:9a:13:30:
99:7a:0b:c7:3e:04:e2:43:44:6c:bf:e7:cc:da:8b:d5:10:3f:
50:8c:5a:ba:4c:19:2e:d2:73:39:c9:2a:70:99:42:92:06:f1:
82:6d:f5:95:fe:ad:42:54:89:a6:5f:8b:11:a1:ea:cb:99:aa:
00:20:f4:9e:7f:f8:62:d9:aa:e6:0f:87:77:8a:5f:cd:b8:59:
5b:50:e3:56:eb:98:88:28:a6:e5:09:2e:86:c3:91:78:77:7f:
9f:12:57:15:6f:84:e3:1f:2c:ab:d0:5d:d8:43:ec:4e:49:0a:
26:43:9b:cc:07:f4:86:a0:43:4f:b1:4b:31:3c:8b:30:ec:f7:
79:9b:2b:26:e9:46:68:34:89:8d:fe:47:9b:09:e9:d9:a0:1f:
7d:04:81:66:6c:11:63:d6:48:4b:44:89:40:e3:d9:a3:85:15:
86:64:e1:9d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKZAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI5MDMyMzdFQUZDQjNC
RDU2MTkyMDcxRDg1QTQ5NzY1MTA0RkNBMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC1GdI8voeYI/Hkzxj4e7iF9eWkiOHwH3xqB0F1iaQlJFIQKMV
o5vjukmUCZFAxdu4cSFbQngs0knnLPwshaPIcHz7rSrldANCbUQQOSAbcph5SoRk
vL939NkwPZmaZaGzlxqKVwlaKMnkjW9ZgXpZXiOxggV3k3ysAb1JRU9xJDl1qU+d
drYOVeWf1iQS9RGDJjGlcayDw1lHs4SsE0VdNroxYdYluPTl5YQJU6+JiKZTURHJ
N53pfjY+OUG++kpUl/3GkKVNMeoSp0xR0e0cG1pXNhLX8K/U71pZDExJt0oZn/6b
0XzL6xbUrmxXiDA4eVNPm2IFCtDYwErNXmdrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuQMjfq/LO9VhkgcdhaSXZRBPygQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VRTWpmcV9MTzlWaGtnY2Ro
YVNYWlJCUHlnUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
ATgwDQYJKoZIhvcNAQELBQADggEBAJztNoBFMXtd+ncTM36BSWHLPAmX927JsDM+
YDiR1EThDNBMQpcfncmc4sj2vnA8rdjRQgOuZnqWhdfdWkNylSiaDfQ1Vduf8K91
y+gJqmDe8UCKbX9ej5oTMJl6C8c+BOJDRGy/58zai9UQP1CMWrpMGS7ScznJKnCZ
QpIG8YJt9ZX+rUJUiaZfixGh6suZqgAg9J5/+GLZquYPh3eKX824WVtQ41brmIgo
puUJLobDkXh3f58SVxVvhOMfLKvQXdhD7E5JCiZDm8wH9IagQ0+xSzE8izDs93mb
KybpRmg0iY3+R5sJ6dmgH30EgWZsEWPWSEtEiUDj2aOFFYZk4Z0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org