Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0jY58Oukbli7xe_x4hN_MwAk5-A.roa
File: 0jY58Oukbli7xe_x4hN_MwAk5-A.roa (raw, json)
Hash identifier: ks1sCCd3JT53SdcrmDqetMMlb31+3vo+DMFdptWgd2k=
Subject key identifier: D2:36:39:F0:EB:A4:6E:58:BB:C5:EF:F1:E2:13:7F:33:00:24:E7:E0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2826
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0jY58Oukbli7xe_x4hN_MwAk5-A.roa
Signing time: Fri 01 Sep 2023 10:05:00 +0000
ROA not before: Fri 01 Sep 2023 10:05:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10278 (0x2826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D23639F0EBA46E58BBC5EFF1E2137F330024E7E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:91:4b:17:f3:b3:91:de:46:29:08:86:2d:
9d:fc:ca:55:6d:0a:ad:1c:73:43:ec:9c:d5:2c:5f:
1b:f0:30:c7:d5:83:74:43:ec:94:6d:b1:a6:4a:8c:
e2:16:33:a4:96:1b:b7:30:0b:7c:ad:a0:1b:2c:9d:
88:fc:04:44:8b:ca:74:c9:b9:3c:14:04:6d:34:4d:
92:64:9c:2d:7b:f6:34:9d:d9:d2:97:8c:3f:d6:b3:
84:d9:36:e1:e7:b2:90:e6:c0:85:e4:2f:1c:60:7c:
b2:a7:12:dd:53:23:6a:5c:72:b8:ef:94:c6:b0:67:
74:68:05:ab:05:37:d5:c0:f8:73:83:2f:70:af:00:
74:ef:98:71:76:ea:22:e1:0d:67:bf:fa:93:ff:ae:
9d:65:98:05:d0:0a:8f:53:82:4e:f7:10:99:74:cf:
ac:0f:f8:43:35:27:ac:a1:32:04:b3:a2:6f:91:99:
5f:00:6b:5a:13:47:84:f9:1c:e1:86:46:fc:91:53:
a5:51:f5:cb:5d:75:3d:64:9d:36:13:9c:b1:8f:e6:
1a:43:b7:8a:04:3b:29:81:cf:2d:82:ad:99:8b:72:
e2:92:9d:28:48:68:4b:c5:98:04:dd:47:37:8e:64:
1b:34:31:7c:34:3b:37:45:59:3e:83:97:50:8d:2b:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:36:39:F0:EB:A4:6E:58:BB:C5:EF:F1:E2:13:7F:33:00:24:E7:E0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0jY58Oukbli7xe_x4hN_MwAk5-A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.40.0/22
Signature Algorithm: sha256WithRSAEncryption
42:36:fb:20:36:0a:5f:ec:73:b2:e6:3c:18:c9:c7:d6:e9:82:
88:48:a2:bd:40:9a:ac:22:e4:15:4d:d0:a3:58:6d:5e:5f:5d:
d8:ee:b2:28:84:bd:2b:24:b8:d8:ef:3b:bc:24:9a:f7:dd:32:
a0:00:ca:cd:ea:21:07:5f:d6:73:4a:0b:7d:e7:f2:f3:2b:31:
ba:99:da:61:4a:97:6d:7e:0b:19:86:d5:21:cb:51:ce:a5:09:
71:a0:26:60:86:5d:3d:e1:de:6a:78:e7:6d:89:ae:f8:86:a6:
34:20:87:c8:26:c9:79:71:de:db:a9:99:c4:4e:69:f8:72:72:
dc:7a:6b:3d:d1:42:db:95:ed:e7:2a:cf:a0:d8:60:de:dc:72:
e7:7d:d2:18:8f:62:7f:52:e8:44:a9:f6:25:2e:d8:ed:0a:a7:
5b:1f:c2:4a:1e:70:c8:76:da:40:be:06:a2:3b:3e:23:c6:79:
95:9e:26:68:13:8a:17:4c:f1:c9:de:99:e9:34:dd:75:cd:b2:
f7:3a:0f:74:45:8e:95:16:b2:2b:c1:99:3c:ce:49:ba:03:91:
a4:e1:db:85:df:ba:a6:72:50:db:2f:c0:41:82:c1:60:92:e9:
6b:17:cc:5c:db:0c:12:bd:30:f1:9d:4b:79:55:db:f8:62:84:
01:f6:57:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org