Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0jsnyywRNu6je3FGBApDsY5MURQ.roa
File: 0jsnyywRNu6je3FGBApDsY5MURQ.roa (raw, json)
Hash identifier: q/7N8vakLHVEAPtQb0nS3K0ujohN4uY4zBG/Z5dcfRs=
Subject key identifier: D2:3B:27:CB:2C:11:36:EE:A3:7B:71:46:04:0A:43:B1:8E:4C:51:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2849
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0jsnyywRNu6je3FGBApDsY5MURQ.roa
Signing time: Fri 01 Sep 2023 10:05:10 +0000
ROA not before: Fri 01 Sep 2023 10:05:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10313 (0x2849)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D23B27CB2C1136EEA37B7146040A43B18E4C5114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:c4:83:54:2b:70:3f:d5:95:7e:99:eb:97:
e5:9b:27:a0:ed:b4:25:53:37:77:cb:4a:4f:c8:a3:
07:44:90:31:2f:64:00:ce:be:a5:cb:19:49:1e:6c:
34:04:41:55:df:38:6b:84:d9:c1:3c:aa:02:75:87:
e1:bd:ad:a0:03:90:fe:cc:24:ee:f6:96:bc:08:40:
6a:06:7d:f9:c0:9c:51:66:8a:8e:30:0c:2a:7e:5c:
5a:5e:38:a1:9e:3c:fb:28:ef:5c:8c:6c:5e:42:07:
90:f8:de:0a:a4:f5:5b:7d:bb:59:de:e6:c1:27:81:
11:a2:37:28:21:3e:e1:89:52:a2:56:31:d2:f3:98:
e3:7b:9a:c3:f1:eb:af:43:e8:95:e3:77:4c:c7:74:
02:b7:e1:13:8c:91:c3:8c:f7:de:f9:1c:dd:0f:b5:
8f:da:e4:25:4f:b1:fc:9f:19:ab:f9:3b:e3:6a:01:
1d:8d:f6:44:6d:f6:db:13:6f:c2:47:43:24:95:e7:
24:ec:d1:14:9c:4c:d2:14:f8:f0:03:fb:4d:73:ad:
a7:d3:63:5a:51:37:fc:ae:e7:af:31:3f:bb:d7:7d:
c5:c9:0d:42:7a:33:14:5c:61:2b:50:bc:1d:c8:64:
bb:1d:8a:bc:82:50:23:ce:40:87:5c:39:bf:88:ce:
45:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3B:27:CB:2C:11:36:EE:A3:7B:71:46:04:0A:43:B1:8E:4C:51:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0jsnyywRNu6je3FGBApDsY5MURQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.232.0/21
Signature Algorithm: sha256WithRSAEncryption
9a:d8:e6:a1:2a:db:32:47:ed:99:2c:64:bb:5e:60:0f:34:3f:
0d:34:cf:ee:6f:0f:b7:6c:2a:fa:14:7a:0c:f7:93:bf:93:bb:
5d:3e:11:6d:c5:e7:ae:06:52:a9:97:56:a8:8c:3a:fb:6b:c5:
c2:a9:d8:d9:a1:fd:cc:ec:46:b0:45:21:86:d0:6a:b1:a8:ee:
8f:b2:5c:5c:22:f6:cd:8c:52:ae:0b:4a:08:b1:04:67:f6:4b:
dc:67:d1:20:a2:4e:5f:91:49:33:e7:d1:c9:7c:de:b0:16:02:
33:5d:0b:91:fd:cf:31:23:1b:72:19:c7:5a:7d:69:71:e0:44:
00:57:7b:b1:30:48:5d:ce:a7:a8:50:e0:63:31:28:83:7f:3c:
53:06:bf:ad:66:75:e8:fc:e3:3d:e4:c8:df:ce:dd:2b:9e:b3:
7c:f1:2c:c6:bf:6e:00:17:03:d5:21:fb:b2:dc:90:69:0d:b8:
33:dc:b9:cf:87:4e:fb:47:d5:ea:1f:fc:6e:00:e6:ed:ad:69:
1a:66:f8:67:bf:ff:b9:08:67:e7:a3:27:8b:ee:fa:f6:6b:c6:
ab:0a:de:51:a8:b1:1a:ef:86:65:f2:dd:a4:11:68:52:e1:e5:
96:47:2f:7a:12:b6:52:29:ca:f9:f4:67:b3:2d:9e:94:a7:8e:
30:94:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org