Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4d3ZsPatrUdutAmtRFrnfxXTnPA.roa
File: 4d3ZsPatrUdutAmtRFrnfxXTnPA.roa (raw, json)
Hash identifier: dH8fUkwP6l+QLx3cEt7hx/YXY9QSlNMXmhw/jKLA5EM=
Subject key identifier: E1:DD:D9:B0:F6:AD:AD:47:6E:B4:09:AD:44:5A:E7:7F:15:D3:9C:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2924
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4d3ZsPatrUdutAmtRFrnfxXTnPA.roa
Signing time: Fri 01 Sep 2023 10:06:12 +0000
ROA not before: Fri 01 Sep 2023 10:06:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10532 (0x2924)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E1DDD9B0F6ADAD476EB409AD445AE77F15D39CF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:f9:66:a6:f2:05:f0:8f:42:df:d0:41:71:
03:bf:30:32:1c:0e:68:31:1f:69:2b:da:6a:e1:10:
ff:03:97:f9:45:3a:7a:cf:90:5d:b5:e6:26:9d:17:
b1:1e:3f:77:60:55:76:72:1a:d5:d2:eb:d4:65:96:
dc:ff:81:70:e3:81:64:a8:3c:c8:86:39:43:5b:83:
c5:9f:8e:d8:c4:f7:04:e3:7a:7d:e8:b6:5d:1e:09:
b6:53:d3:19:c3:21:d2:ed:85:f0:a7:0f:ad:16:5c:
c2:c3:b3:5b:f8:1f:87:d9:0a:8b:25:4e:eb:d1:26:
3e:36:b7:d8:79:fb:1c:3e:1b:bf:7d:02:07:94:92:
0d:b6:67:f8:a2:17:81:73:45:10:b7:66:b6:8d:80:
96:0a:c2:fd:ee:4c:a7:7a:67:c6:de:66:27:70:c1:
24:f9:13:a2:c7:31:c4:cb:26:29:73:d6:6b:fb:0f:
15:37:1e:ba:74:b9:b1:90:c5:e4:e2:85:90:57:05:
bb:11:08:33:a6:54:87:b6:7e:13:a9:d6:fe:e5:d3:
d3:5b:3d:53:34:be:f0:ab:e1:04:5f:4f:71:73:6f:
fc:c1:32:e4:0f:77:e7:0e:69:77:ee:de:6f:3a:45:
ed:f6:ac:bc:25:ec:3e:2e:7e:0c:1d:5b:a1:25:57:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DD:D9:B0:F6:AD:AD:47:6E:B4:09:AD:44:5A:E7:7F:15:D3:9C:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4d3ZsPatrUdutAmtRFrnfxXTnPA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.108.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:fe:bb:5e:cf:23:cf:cb:f4:c3:b5:13:fa:d6:a5:e3:e8:39:
c2:45:3a:e2:c4:7a:61:e2:a5:82:84:31:9c:52:80:23:2b:2e:
5e:1b:16:0c:79:95:75:a0:77:4d:74:29:ed:05:71:d1:a5:3e:
c4:28:b2:9c:d6:4c:5b:c6:2c:c6:83:30:43:a3:c4:59:f6:6a:
7d:53:a1:7f:21:7d:71:a0:46:08:99:ba:bc:6f:8c:07:4a:08:
12:2c:c5:24:76:91:ab:18:80:ed:62:ff:5c:41:d7:98:5c:eb:
77:76:e3:fa:82:7c:5d:32:43:44:44:9a:11:39:b8:dd:7e:a1:
06:a2:42:58:83:ca:80:18:fa:be:6f:86:01:0b:92:14:86:5b:
f4:70:16:a3:7d:0b:9e:39:cc:a2:f0:52:77:a7:a9:41:d8:10:
ca:03:27:01:91:69:4c:49:bf:8f:76:e9:77:b0:23:0a:14:43:
00:a3:a5:3a:b2:f1:04:bf:a5:d1:20:94:9e:30:45:29:00:ec:
78:22:b1:6d:50:e6:a5:cc:01:db:95:18:68:e6:45:c7:02:d3:
82:5b:61:c0:ab:47:54:0b:2d:6e:4c:a4:4e:25:dc:55:d6:f0:
8a:8b:f0:a5:30:6e:30:2a:72:03:c6:9f:93:e9:08:84:67:f6:
84:b2:ea:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org