Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/72iSO-dyKKepTlcYXM94VGjDwaU.roa
File: 72iSO-dyKKepTlcYXM94VGjDwaU.roa (raw, json)
Hash identifier: Mi1DTXXByoBbbUFB+zQVB0f6tAvo8Ns+I5fJM40+B9Q=
Subject key identifier: EF:68:92:3B:E7:72:28:A7:A9:4E:57:18:5C:CF:78:54:68:C3:C1:A5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2902
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/72iSO-dyKKepTlcYXM94VGjDwaU.roa
Signing time: Fri 01 Sep 2023 10:06:03 +0000
ROA not before: Fri 01 Sep 2023 10:06:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10498 (0x2902)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EF68923BE77228A7A94E57185CCF785468C3C1A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9d:c4:dc:ff:68:3e:4a:d8:ae:1e:8d:8c:cd:
14:85:9e:2b:b2:68:8f:67:b1:b6:a9:75:e8:77:dc:
c6:90:fb:a0:09:c1:1d:5d:a7:55:08:84:ef:06:68:
32:e4:5b:18:ff:3a:77:1f:1b:93:ec:1e:5f:77:35:
f4:98:12:9b:fa:0e:70:b0:ce:12:0d:48:59:02:fc:
3d:65:6b:e4:53:a6:84:8d:95:10:d8:d0:8f:14:f9:
47:57:24:05:c1:d5:be:04:2a:ea:5a:d2:05:b9:b9:
52:e2:35:d5:6d:b4:93:c4:ca:cc:44:22:91:23:96:
76:66:c4:2f:e8:5a:03:4c:ef:af:84:f8:95:c7:6c:
70:ed:da:36:4c:dd:7d:ff:7b:b1:18:52:64:72:ed:
c2:76:29:6c:b6:66:45:b4:80:d1:d6:dd:84:25:99:
78:28:29:2d:37:55:df:39:81:d7:84:d0:15:86:71:
8a:6a:3b:be:d8:05:2f:3f:18:66:66:55:59:13:ae:
ea:d3:a7:65:18:71:f9:00:2e:4d:93:9d:49:83:36:
04:8e:4f:2c:13:5d:89:0d:c4:8c:e0:54:e0:83:9b:
25:2b:32:c8:5c:21:4d:3a:48:c2:e3:23:f1:8f:aa:
72:7b:74:f9:40:81:a6:30:f2:80:f7:52:29:f2:3f:
92:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:68:92:3B:E7:72:28:A7:A9:4E:57:18:5C:CF:78:54:68:C3:C1:A5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/72iSO-dyKKepTlcYXM94VGjDwaU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.168.0/21
Signature Algorithm: sha256WithRSAEncryption
12:8e:fb:55:81:04:04:3f:bd:37:05:f7:c1:0b:e1:f6:53:3e:
1b:69:12:ba:ef:04:22:1f:3a:e9:16:44:95:2a:5c:2d:4e:f9:
13:27:b7:64:e6:de:bb:47:3b:39:38:d0:b8:6a:aa:64:c0:1a:
b9:23:98:40:42:57:c0:8f:df:4f:15:5c:56:50:97:aa:1f:e6:
d4:2b:f9:f1:a5:b8:07:b7:95:1c:92:9d:e2:51:86:ce:14:94:
d5:9a:1f:71:94:7b:ea:b3:ed:86:38:3c:d5:a9:d8:93:d8:2b:
c0:36:c9:e6:be:94:fd:d1:8a:15:48:72:0a:b5:b6:44:a9:a4:
32:ee:d3:79:4c:76:c8:13:24:85:bc:3d:d8:31:ce:c3:f5:9a:
65:ff:f4:b8:27:b6:63:90:cb:65:1a:72:4b:88:88:43:e8:1b:
94:1e:1c:2a:05:41:df:dd:bf:a0:55:17:0e:db:fb:c0:7b:94:
a9:48:d4:98:2a:3d:8b:c4:9a:3f:49:2c:94:1d:b7:bd:92:e4:
04:6d:fa:ea:66:31:a0:93:8e:e9:86:e3:70:1f:75:62:15:f5:
4c:91:79:4d:ff:a6:2d:87:78:fb:60:9d:be:e0:e0:45:47:c7:
dc:88:89:1e:47:26:7a:9f:5e:41:b5:6f:9b:ea:af:f6:f5:56:
72:65:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org