Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0feUVy3eTaKIw3PCnuOP79DIxv0.roa
File: 0feUVy3eTaKIw3PCnuOP79DIxv0.roa (raw, json)
Hash identifier: dKpAZdlVDLdqV/zBZ/m8/mq34ByQ9RCf/nrwCGwXk34=
Subject key identifier: D1:F7:94:57:2D:DE:4D:A2:88:C3:73:C2:9E:E3:8F:EF:D0:C8:C6:FD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A76
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0feUVy3eTaKIw3PCnuOP79DIxv0.roa
Signing time: Fri 01 Sep 2023 10:07:55 +0000
ROA not before: Fri 01 Sep 2023 10:07:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10870 (0x2a76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D1F794572DDE4DA288C373C29EE38FEFD0C8C6FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:9a:36:e6:48:b6:7f:e4:b2:af:0f:0f:72:
f2:79:c9:4e:52:09:d7:05:a7:55:f4:fd:e7:b5:8f:
f9:a7:8e:bc:5f:5d:fc:f3:60:cd:a0:27:43:cc:05:
f8:9b:a3:8c:78:87:c7:bd:f7:b2:4c:3e:84:a2:4a:
07:91:9e:73:4b:2d:3e:69:3f:f3:c2:7e:2f:76:84:
00:79:3e:d8:09:0a:ae:83:55:a8:a4:4c:14:d0:a8:
02:84:b2:10:10:bb:4f:ec:25:73:94:77:db:e2:48:
5e:57:0a:75:9a:3b:ed:0e:5d:10:38:a2:c0:45:42:
9e:01:ba:36:ce:89:4d:a3:37:29:40:40:fc:3e:86:
77:46:ba:50:05:ad:5c:57:d3:b7:5f:bb:eb:8e:f0:
9b:f9:e0:92:02:9b:e2:88:98:f6:45:2b:af:d4:3f:
79:d4:4b:a7:aa:d5:91:b4:1d:02:17:9a:eb:8c:cb:
b9:f1:75:67:1c:d2:1b:a1:6b:ca:9c:5a:70:c1:b3:
f1:6f:57:dd:6d:69:17:d9:e0:b9:a5:1e:3c:1d:9a:
48:46:1c:84:76:fa:72:b0:c4:22:75:2e:f9:b1:98:
45:e7:0f:4d:8b:12:c9:fe:b5:13:4b:76:02:ae:60:
8d:37:32:ff:c3:03:fa:33:f4:75:12:ff:84:cd:76:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F7:94:57:2D:DE:4D:A2:88:C3:73:C2:9E:E3:8F:EF:D0:C8:C6:FD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0feUVy3eTaKIw3PCnuOP79DIxv0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.120.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:c8:ea:78:9e:14:e3:f7:ec:e2:39:81:38:12:e7:89:3d:e3:
28:17:0b:0f:9f:a1:27:e1:09:8e:e2:cd:aa:1f:d1:e8:0d:97:
8b:d9:2e:1d:61:e6:bd:37:4c:13:e2:5c:c3:9c:4b:3c:a8:65:
62:8c:63:f2:0a:ed:d7:61:96:90:d1:23:21:8d:c0:06:40:53:
70:79:56:90:cc:0a:27:a4:13:a0:5c:5f:3b:ab:70:0f:7e:70:
55:79:6b:0d:10:29:bb:2a:27:9b:86:f8:16:7a:7c:a5:f5:e6:
db:0b:52:4a:c3:99:c1:35:2c:62:9c:ad:f1:69:15:fb:27:df:
d4:3a:9f:27:78:04:3e:36:2c:78:a9:b8:6e:49:90:c1:77:1d:
75:4b:84:72:e5:c0:8b:bf:65:06:6a:bf:d7:b9:fa:2c:50:28:
f0:c3:3d:b0:73:2b:52:49:f8:c3:24:40:cd:12:45:59:e7:e0:
24:ff:f4:df:d9:1c:ad:9a:d8:6e:c9:8c:67:41:d2:80:66:a3:
50:25:d3:c6:86:1f:4e:78:85:3d:9c:e6:a5:43:89:a2:50:6d:
45:e4:24:06:f0:42:5d:dd:2c:41:7f:89:cf:bc:67:71:05:84:
5e:cb:77:b9:58:2a:68:d7:8f:63:a3:7f:2f:35:53:21:d1:7d:
70:d2:5f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org