Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zCVN7t1etD093mP5EYtobej48II.roa
File: zCVN7t1etD093mP5EYtobej48II.roa (raw, json)
Hash identifier: TM3SmGq0oRUIMeyx7mMk8i5fYM4QH5yTVS4IVxNNM/8=
Subject key identifier: CC:25:4D:EE:DD:5E:B4:3D:3D:DE:63:F9:11:8B:68:6D:E8:F8:F0:82
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A8D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zCVN7t1etD093mP5EYtobej48II.roa
Signing time: Fri 01 Sep 2023 10:08:02 +0000
ROA not before: Fri 01 Sep 2023 10:08:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10893 (0x2a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CC254DEEDD5EB43D3DDE63F9118B686DE8F8F082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c1:4b:d7:73:db:d9:15:ce:f1:b8:c4:8c:db:
02:49:14:f0:66:34:b0:48:ed:d7:ed:f4:29:b8:c8:
be:f9:09:18:86:c7:35:b8:60:f7:c2:a2:5b:2d:56:
cb:d2:0c:8e:b5:3e:be:22:b0:80:08:00:a9:35:64:
85:73:0f:84:78:9c:ea:c8:cb:cb:31:96:37:eb:51:
37:3c:bb:41:2b:ca:1e:cd:b5:97:35:04:5c:18:8a:
63:59:c0:6b:36:3f:78:c6:10:ad:fe:bd:1d:66:c7:
2e:bd:a8:bd:0b:ae:37:a0:2d:7b:2d:d1:f3:a4:f1:
89:7a:39:17:d3:c2:d5:24:a6:51:5a:8f:46:e3:bd:
71:02:29:1d:ee:ed:5a:60:da:07:88:27:29:d3:c1:
ec:42:bf:9a:97:bc:e0:9c:db:d4:98:76:8c:22:d0:
5b:c8:5c:d6:fb:e4:a3:20:95:61:26:2b:a4:f1:d1:
1b:ce:95:fc:31:1a:c3:a3:6f:da:ca:0c:91:8a:06:
fa:ee:89:d9:5d:f7:33:60:8a:f1:ca:30:3c:5b:12:
45:ac:11:23:da:d1:e7:6d:c7:fe:7d:ed:48:fc:b2:
4d:a9:57:14:42:8f:ab:ef:bd:8c:ad:7c:12:89:c0:
00:9b:f6:f6:08:6f:6a:45:09:14:30:b2:05:23:c5:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:25:4D:EE:DD:5E:B4:3D:3D:DE:63:F9:11:8B:68:6D:E8:F8:F0:82
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zCVN7t1etD093mP5EYtobej48II.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.214.0/24
Signature Algorithm: sha256WithRSAEncryption
96:12:31:7e:b4:1d:c8:c6:0b:9d:b9:7e:50:92:fa:0a:84:7d:
25:a9:a1:4c:bb:2f:6b:12:7b:89:db:b5:b0:66:5c:0f:99:bc:
a7:cd:48:59:a1:44:ca:9c:70:24:ee:ed:c8:5c:7d:66:e6:1e:
d3:bf:d3:91:70:57:63:03:71:55:22:69:4c:78:cc:64:2e:1d:
9e:42:c0:c4:60:6f:34:5b:39:26:fb:9e:08:8f:16:b0:aa:11:
0a:2a:e9:bb:66:f6:a2:a8:30:84:95:ab:63:0d:e7:18:17:b4:
16:f3:71:71:e2:4c:47:0b:73:1f:c6:d7:2b:fe:48:50:1d:66:
0f:26:38:42:ce:82:8f:4d:5b:a6:c6:9d:89:b0:cf:3e:d6:63:
86:9c:c7:71:5e:32:58:1b:3e:80:be:89:78:c8:8b:7b:65:3c:
98:fb:7e:5b:6c:86:73:b4:e5:86:7d:48:32:3f:4b:c0:71:3f:
c1:b2:f3:82:64:76:70:bc:0c:a3:cd:4c:f7:69:36:b9:12:c5:
73:58:4c:ca:f2:14:d0:b0:ca:4a:90:47:62:9b:36:03:74:59:
86:cb:12:ba:20:04:42:b4:4a:33:b7:61:17:cc:0b:df:30:10:
3f:a9:92:02:47:e0:15:91:ef:60:c7:bd:a2:c8:b8:ed:65:ce:
42:c7:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org