Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3FigNNIjqknVGBaPubxHoL8o2HY.roa
File: 3FigNNIjqknVGBaPubxHoL8o2HY.roa (raw, json)
Hash identifier: trKJekaguGvH6PcWeUPQfJx/f2lF/rQ4hyTofExfIVI=
Subject key identifier: DC:58:A0:34:D2:23:AA:49:D5:18:16:8F:B9:BC:47:A0:BF:28:D8:76
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29FA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3FigNNIjqknVGBaPubxHoL8o2HY.roa
Signing time: Fri 01 Sep 2023 10:07:21 +0000
ROA not before: Fri 01 Sep 2023 10:07:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10746 (0x29fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DC58A034D223AA49D518168FB9BC47A0BF28D876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:d5:a8:93:08:2a:85:d1:dd:13:7f:d9:73:
ed:98:08:de:f3:50:83:c5:39:94:7c:e2:39:db:2d:
56:63:48:72:c2:66:23:d7:24:b4:d1:7a:2b:0d:5f:
68:24:87:c3:64:2f:09:d1:bd:6e:fb:91:ac:43:40:
0e:fe:ac:70:9a:86:3d:8d:b4:cb:4e:de:0e:b8:5b:
55:f4:01:4e:05:99:e2:45:c3:c6:38:34:87:de:d4:
15:55:27:b9:c9:08:7d:c6:5e:30:0e:77:0d:ce:b9:
9c:09:22:de:ae:d1:45:2b:65:ce:09:29:9c:60:2c:
38:ec:de:01:64:b0:e3:ae:9a:03:4e:79:e5:39:9b:
be:69:75:22:fd:9f:a3:5c:d2:a8:a2:24:37:e8:18:
b5:86:da:61:d4:46:0b:77:ff:9c:b8:0a:55:19:5b:
2c:27:a5:16:ab:d6:3a:e3:17:6b:05:00:db:c4:08:
1f:cf:af:1f:af:31:b3:d0:d0:1c:3a:fb:50:f7:70:
39:92:1e:66:b6:4b:46:d0:a7:de:31:41:48:2a:dc:
6c:e3:8a:d7:03:7f:ee:c8:c7:ed:a5:6e:b3:46:f0:
c8:1e:ab:26:ee:70:14:ef:98:2b:aa:e1:96:58:62:
0d:b8:8f:9b:ad:67:03:80:74:ee:56:aa:87:91:e5:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:58:A0:34:D2:23:AA:49:D5:18:16:8F:B9:BC:47:A0:BF:28:D8:76
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3FigNNIjqknVGBaPubxHoL8o2HY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.104.0/22
Signature Algorithm: sha256WithRSAEncryption
20:87:ce:1b:29:91:4a:93:98:99:3c:49:bf:49:ad:67:98:bc:
48:1b:d0:b9:b5:45:94:40:b2:1b:07:b3:7e:fe:f2:52:46:8e:
a7:e4:3f:ff:64:2d:dc:6f:3e:ea:b6:3a:c0:62:a9:2a:f7:07:
9c:0d:d6:e4:3f:cb:ac:d1:d8:33:9a:4a:fb:3d:a3:15:d9:41:
16:5a:35:96:0d:9b:22:6a:46:1d:0c:c0:20:a8:e4:86:fa:d8:
bd:fb:1d:df:0b:ae:d0:a4:ac:61:9d:5c:a8:f8:a5:f1:e4:ce:
0e:30:48:c4:b0:a3:fe:68:59:61:fb:6d:aa:e5:a1:fd:7e:cf:
c4:df:b3:7c:0c:c3:2b:93:60:af:77:a6:44:4b:c4:1c:40:f0:
73:ce:61:54:f0:28:9d:e6:68:d6:fe:de:36:4d:e7:8a:31:09:
c9:89:8a:8b:2a:e7:ed:37:e2:54:07:02:91:4a:b7:c5:ef:b5:
39:47:99:e7:86:9d:3c:34:aa:39:00:66:be:d6:d5:18:33:5e:
c8:5c:a3:c0:d2:aa:c9:b0:da:55:26:65:32:e9:1a:85:6e:f3:
df:86:24:d6:35:93:02:c3:6d:04:29:47:61:4c:21:55:ca:48:
9d:47:21:3c:75:b8:8f:0a:c6:c2:8e:55:7b:57:43:45:14:c7:
6e:3a:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org