Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2OLjgEWPk4qPjs53ODDNJHqXF1Y.roa
File: 2OLjgEWPk4qPjs53ODDNJHqXF1Y.roa (raw, json)
Hash identifier: HyltyAPZsCZO9YjruHeKP+YJOXDBsz5tLnnTOCaquwk=
Subject key identifier: D8:E2:E3:80:45:8F:93:8A:8F:8E:CE:77:38:30:CD:24:7A:97:17:56
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27F1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2OLjgEWPk4qPjs53ODDNJHqXF1Y.roa
Signing time: Fri 01 Sep 2023 10:04:45 +0000
ROA not before: Fri 01 Sep 2023 10:04:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10225 (0x27f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D8E2E380458F938A8F8ECE773830CD247A971756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8b:e9:87:98:1a:dd:68:a4:bb:ff:0c:bb:ee:
04:27:a6:27:0b:e9:46:06:19:ff:42:f3:2a:a0:28:
24:f6:26:b8:73:3d:2e:33:a6:00:9c:4a:86:87:cd:
00:1c:e9:18:e1:63:5c:55:0c:3f:b3:b8:6d:a5:26:
b0:1e:f7:d9:d2:54:67:69:fc:74:03:6f:70:7f:ec:
f1:32:cd:53:14:bd:5f:04:c2:89:7b:61:e1:ab:6a:
9c:68:c0:e3:0a:18:61:97:6d:5e:17:bb:07:06:e2:
67:40:55:50:1c:37:af:6a:ec:f8:41:96:c6:d5:63:
73:c2:8f:02:e5:f6:70:2d:9b:af:66:bc:a8:26:15:
55:3e:87:84:9e:60:18:97:7e:36:77:68:76:7b:34:
ae:5c:e8:54:58:89:22:10:f4:07:1d:8c:cb:1b:82:
b0:2f:3f:98:ae:6f:71:0c:a1:2c:44:a2:49:6b:6d:
a3:da:6e:5e:7f:14:93:51:9e:dc:e2:e7:1e:09:4b:
64:23:0e:98:83:63:3f:1f:45:ad:c3:66:89:ac:de:
b7:3b:b8:6b:42:50:a0:aa:1e:61:6a:e2:7c:96:a8:
61:6d:e1:9f:46:19:9b:d0:80:42:9b:8e:22:b3:60:
b0:0c:dc:5e:2f:d0:2f:4b:f9:4a:b5:58:5b:c5:17:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E2:E3:80:45:8F:93:8A:8F:8E:CE:77:38:30:CD:24:7A:97:17:56
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2OLjgEWPk4qPjs53ODDNJHqXF1Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.84.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:0f:ea:0a:2d:44:e1:dd:fb:5c:b1:09:ba:a7:a2:b0:9e:24:
47:2b:f1:fc:4b:43:df:36:43:21:1c:28:24:a1:54:b5:6c:b6:
75:9c:aa:52:31:34:42:76:aa:25:86:45:11:05:69:0f:12:7f:
c3:52:f6:97:80:11:1c:a3:ed:cf:c4:27:03:ef:44:9f:52:de:
47:4e:58:20:c1:ec:46:a9:30:76:c7:a6:ce:41:38:69:8d:2c:
b8:6b:2b:55:fb:fb:43:5b:f7:28:e9:fb:ea:24:d2:ae:ff:a3:
43:18:ee:ca:e2:28:4b:60:ce:43:ca:d6:35:60:1d:ab:8a:08:
df:a5:10:50:49:6e:6d:19:b4:14:32:e0:83:de:ce:13:c4:04:
c4:3e:b8:e0:dc:5a:3f:ce:15:77:86:39:65:14:61:9d:1e:3f:
cf:55:d0:a8:1d:40:b8:4f:6f:06:f2:cf:5e:05:db:19:2d:50:
3e:6e:f5:dd:92:00:f0:0b:f5:41:c1:1b:4f:03:08:7c:13:d5:
a6:ae:ac:ee:fe:24:96:ce:0f:a7:7e:f0:23:36:73:a5:0f:dd:
7e:02:ef:1f:53:c2:cf:4a:ed:7b:48:91:77:73:f8:05:2a:dd:
35:3c:dd:2d:21:98:3b:ba:38:20:9c:30:e5:bf:eb:f0:1c:96:
2f:1a:d5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org