Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5Oc4x24Z5a97bG0_Z7zlLWB8I8I.roa
File: 5Oc4x24Z5a97bG0_Z7zlLWB8I8I.roa (raw, json)
Hash identifier: pzGJVzDgKVLbXclYGVPyUuTNyUK+fP7jTvHGOEDi1bc=
Subject key identifier: E4:E7:38:C7:6E:19:E5:AF:7B:6C:6D:3F:67:BC:E5:2D:60:7C:23:C2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A6A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5Oc4x24Z5a97bG0_Z7zlLWB8I8I.roa
Signing time: Fri 01 Sep 2023 10:07:52 +0000
ROA not before: Fri 01 Sep 2023 10:07:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 103.224.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10858 (0x2a6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E4E738C76E19E5AF7B6C6D3F67BCE52D607C23C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:5d:6e:2f:83:19:dd:84:b2:4c:4f:ac:2a:
11:ab:2a:4a:e1:87:30:d5:59:82:25:fe:26:e8:ef:
67:62:72:62:06:61:c4:61:4e:1e:7f:1a:fc:10:fd:
b8:99:56:2a:e4:62:43:cb:da:62:76:63:c4:a1:cd:
3d:b4:70:1b:96:50:10:8b:7c:77:2f:9b:dc:bc:73:
60:5d:81:d6:1c:7e:b8:75:ff:28:f5:90:e7:3f:e0:
ee:92:ff:5a:35:8a:fe:fa:90:0f:b7:2a:6e:de:51:
8e:fa:f6:f7:2c:50:6f:84:11:dd:2e:7c:c2:12:34:
e9:7c:fa:f7:42:ba:48:5a:88:2d:2e:16:ec:df:c5:
34:18:a8:a9:1e:81:6e:52:c6:06:e0:30:6a:aa:a1:
4a:18:39:dd:e1:1c:37:22:4b:9f:fd:18:ce:44:47:
97:1a:be:5b:a4:59:0b:cd:66:bf:5c:ac:a8:62:fd:
c8:57:a2:2b:54:a8:24:d3:60:c9:b7:98:5d:12:9b:
cc:74:33:78:74:9c:c6:cc:19:50:1d:b4:60:a8:29:
7d:33:9d:ce:f1:4b:f4:c0:3e:03:1e:f8:31:37:e0:
e6:c8:dd:74:12:05:96:3d:eb:ed:12:d3:49:c4:09:
37:6d:d0:92:b7:0e:0d:0a:89:a9:76:bf:6c:e2:16:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E7:38:C7:6E:19:E5:AF:7B:6C:6D:3F:67:BC:E5:2D:60:7C:23:C2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5Oc4x24Z5a97bG0_Z7zlLWB8I8I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.192.0/22
Signature Algorithm: sha256WithRSAEncryption
56:49:ef:19:3e:ed:01:35:66:d2:97:a8:bc:53:8e:d1:d2:9e:
6f:48:f9:a2:0f:f2:aa:6a:de:4e:1c:3b:35:38:d1:bc:b5:f5:
51:90:14:bc:0b:e1:b1:96:17:9c:21:66:cb:a1:ed:83:1c:65:
ad:28:7c:7b:92:16:72:c7:89:aa:b3:bf:95:3e:54:46:c2:2c:
3c:17:d3:97:9b:ea:f1:0f:15:f1:1f:d9:1c:95:2c:dd:53:ac:
07:d8:1d:ab:26:20:49:79:34:c7:b9:fb:58:94:4e:14:ba:68:
63:9f:7d:63:df:b4:35:0d:a6:f6:51:a1:84:61:b7:e9:9f:26:
a2:bb:d3:c8:a4:03:d1:95:3c:a6:76:1d:36:4f:60:82:b5:7a:
44:a9:2d:22:f9:f3:00:c4:8c:97:03:2d:f1:1a:92:db:a8:06:
70:8d:d3:df:6e:c2:9c:4d:fe:34:f9:23:02:6f:b6:c4:6b:98:
e7:09:ee:d7:1a:d5:30:9a:01:7b:9a:32:ab:ea:21:83:d6:8a:
0b:9a:75:3d:b0:d6:ae:fa:f5:6c:f9:53:20:48:22:e5:fc:72:
1d:71:34:da:bb:17:63:89:3a:64:0c:41:f6:34:06:7a:c7:d4:
f2:80:fa:13:1a:04:d0:66:19:fc:7a:27:97:00:94:fb:e7:84:
38:79:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org