Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0VlEHoNKjZzupjcMps_dBnQ7mgM.roa
File: 0VlEHoNKjZzupjcMps_dBnQ7mgM.roa (raw, json)
Hash identifier: HSWp9oauHIIIphFp2PiMtRF0kF584GyiR+Jd4SLyEhY=
Subject key identifier: D1:59:44:1E:83:4A:8D:9C:EE:A6:37:0C:A6:CF:DD:06:74:3B:9A:03
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2998
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0VlEHoNKjZzupjcMps_dBnQ7mgM.roa
Signing time: Fri 01 Sep 2023 10:06:48 +0000
ROA not before: Fri 01 Sep 2023 10:06:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10648 (0x2998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D159441E834A8D9CEEA6370CA6CFDD06743B9A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:34:91:30:29:ae:95:be:44:b2:ee:a0:cd:
18:8f:d9:a9:c3:3e:8b:5f:a0:87:29:ed:79:cc:20:
f2:86:82:97:13:77:ec:4b:1b:76:e0:03:93:c0:3f:
59:ab:5a:79:94:1f:f5:b0:9e:27:a4:cb:a9:c4:09:
64:e6:89:d0:b0:9a:b2:cb:5c:e7:95:78:11:08:76:
ac:70:6b:28:3e:78:0c:4e:1f:44:ff:39:20:2e:83:
c7:63:5e:e4:56:a5:30:f3:e8:89:0a:8a:bc:b5:45:
23:7e:2d:34:1e:5e:a2:ca:a8:b4:44:0d:6a:c8:0f:
5f:b0:14:10:bc:78:a1:cf:ea:5c:de:00:0a:30:49:
f9:8c:ae:5d:19:b5:ec:67:7b:d3:3e:e7:a7:ae:1b:
3c:b2:1a:e2:d1:92:7e:be:48:60:cf:95:5d:bd:84:
c0:2d:23:b2:ac:95:95:55:e8:a2:0b:c0:db:4f:76:
e0:c1:71:65:cf:0b:a7:0d:6e:ed:6d:7b:e2:f1:f6:
f7:f2:c3:03:a7:c6:d2:00:7b:63:4a:c3:64:a8:ab:
98:91:ac:0e:02:c6:2a:fa:5d:e6:34:16:b7:52:88:
f2:3b:92:fb:3e:a3:d5:0f:22:ce:87:81:58:74:0a:
ee:67:e3:21:81:22:02:23:da:a6:12:24:fb:51:9d:
ea:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:59:44:1E:83:4A:8D:9C:EE:A6:37:0C:A6:CF:DD:06:74:3B:9A:03
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0VlEHoNKjZzupjcMps_dBnQ7mgM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.144.0/21
Signature Algorithm: sha256WithRSAEncryption
94:5b:3e:3c:aa:bd:f1:3a:32:c6:a3:98:e3:e0:e0:c7:10:c3:
d1:1b:aa:b7:15:2d:b6:c9:93:27:21:49:28:56:b4:de:12:c0:
25:67:9f:63:40:32:65:c8:7a:70:41:cf:a7:1c:f5:06:ea:b5:
fb:cd:16:59:d7:95:9f:55:cf:8a:7e:f9:a1:02:cc:39:1d:2c:
4e:25:f6:34:5d:6e:ad:d9:04:fe:20:10:51:f3:5b:4d:68:ed:
c3:75:d9:52:e5:fe:6c:1e:72:0d:00:51:42:29:e0:62:7c:06:
1a:ae:90:e7:de:e6:97:09:4e:f1:1c:46:de:f5:86:aa:09:51:
9b:2c:80:cc:1d:19:be:72:3e:8b:2c:a7:38:77:1c:11:2c:ca:
e7:e9:7a:72:4a:64:83:7b:17:e4:2f:a8:0e:ee:d1:46:0c:7f:
66:c7:a9:84:8d:6b:b1:97:e4:1f:6f:68:61:9a:48:45:fa:34:
37:b0:47:6a:ec:33:cb:35:6c:66:78:8c:e1:aa:08:d7:14:33:
89:4d:31:3a:f2:5b:ef:0f:af:aa:fc:94:02:d1:24:2c:51:ce:
2a:11:e5:17:de:fe:72:9e:ad:65:67:28:b1:58:31:48:8b:a9:
63:c1:91:bc:fc:fa:c2:22:8f:2f:00:fc:ce:88:ec:35:28:75:
f8:1b:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org