Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-C6CovDA9akULYRX840MDznIv0w.roa
File: -C6CovDA9akULYRX840MDznIv0w.roa (raw, json)
Hash identifier: x9fwiLuWBg4FsxYGYISoz/eXB7/Ob2ZNSkQuWS9piks=
Subject key identifier: F8:2E:82:A2:F0:C0:F5:A9:14:2D:84:57:F3:8D:0C:0F:39:C8:BF:4C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B1B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-C6CovDA9akULYRX840MDznIv0w.roa
Signing time: Fri 01 Sep 2023 10:09:51 +0000
ROA not before: Fri 01 Sep 2023 10:09:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11035 (0x2b1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F82E82A2F0C0F5A9142D8457F38D0C0F39C8BF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ad:de:33:cd:b8:95:25:74:ef:77:20:cb:53:
91:c7:5b:36:f7:47:1d:35:36:f4:81:4b:9e:54:ff:
fd:4c:8c:8b:c6:e0:80:1e:64:76:5a:5b:58:5c:9c:
70:46:64:a2:ad:47:72:f5:a7:44:33:31:83:c4:f6:
92:9e:58:b4:8b:e5:82:e1:fd:83:fd:82:06:30:9e:
da:7e:51:6e:6f:d2:e1:24:b0:05:42:73:40:3d:12:
80:4e:f8:38:a6:db:7f:51:fc:45:c8:5e:76:9d:e7:
5c:29:c2:71:ce:93:73:1b:3e:ac:1e:a4:2c:d6:16:
c6:e6:5c:70:42:bb:96:85:13:2b:1b:c7:7c:83:09:
a9:81:ff:6d:c0:e4:4f:13:d7:9f:81:1d:fc:67:6e:
5a:7f:33:d2:be:00:02:38:4a:df:62:3e:22:2c:06:
c3:71:36:47:03:aa:da:19:91:24:96:df:0b:47:5a:
3a:08:ac:96:07:04:da:53:9c:51:c1:66:ec:cc:5b:
42:89:f6:3b:8a:3f:0e:ec:c1:36:88:82:f3:de:dc:
fb:f8:bf:51:30:01:c4:65:b9:cf:16:67:f6:3d:86:
32:56:a2:fc:81:e0:85:1c:94:15:51:79:89:af:c4:
67:76:de:67:9b:68:06:fe:ee:b7:7d:ab:f5:5a:f7:
50:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:82:A2:F0:C0:F5:A9:14:2D:84:57:F3:8D:0C:0F:39:C8:BF:4C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-C6CovDA9akULYRX840MDznIv0w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.136.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:02:d9:22:24:0e:a3:2e:00:37:4f:ec:fe:e4:74:ea:bd:3a:
fc:28:56:bc:42:0c:d2:9a:ff:30:89:d9:7b:4c:7b:04:13:d4:
65:a4:ae:d6:5c:e9:e1:5d:2f:4d:e5:fd:29:f8:f5:e6:ad:ba:
15:e9:d1:14:36:9d:83:cc:90:82:89:c8:07:6d:2f:0e:60:63:
34:72:09:17:87:18:b3:5f:dc:35:4a:1d:cf:3a:8a:e2:0e:2b:
0d:a9:3f:8d:c4:2f:42:5f:03:d8:3e:b9:dd:23:a4:10:fe:a5:
a0:1d:b6:d1:43:0d:47:af:6c:c5:6e:51:52:26:cc:95:11:a9:
b8:00:c2:a2:0c:8f:93:b0:ac:7f:40:f1:dd:a5:30:88:f4:ec:
67:12:ce:66:41:6d:3e:17:9b:bb:a8:4d:b4:f5:cd:49:00:64:
02:98:b4:3a:22:e2:68:90:ba:94:6e:56:bb:39:d9:46:95:e7:
14:02:6d:b1:3b:c6:50:9d:1c:a2:24:1e:a0:a2:4d:6f:48:03:
f9:f3:7b:7b:13:d7:ef:5e:5d:08:4c:af:2d:c1:c6:27:1e:ba:
39:2b:5b:f0:41:77:a8:ab:f4:60:aa:8e:d9:a1:03:50:b7:c9:
d0:71:51:07:b6:bd:23:3e:63:61:08:62:c4:0e:96:2e:13:f0:
15:81:59:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org