Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Czq3YI64KNNKJoTYA6v0c0odec.roa
File: 7Czq3YI64KNNKJoTYA6v0c0odec.roa (raw, json)
Hash identifier: W+YG+MGgEIOqsOOpL/JmsnriBMBloCmxPs86OHZ1BGY=
Subject key identifier: EC:2C:EA:DD:82:3A:E0:A3:4D:28:9A:13:60:0E:AF:D1:CD:28:75:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 285E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Czq3YI64KNNKJoTYA6v0c0odec.roa
Signing time: Fri 01 Sep 2023 10:05:16 +0000
ROA not before: Fri 01 Sep 2023 10:05:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10334 (0x285e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EC2CEADD823AE0A34D289A13600EAFD1CD2875E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:86:d2:f7:8e:1e:36:12:7e:f2:4f:08:25:
58:ff:75:3f:23:10:d5:97:01:ab:82:dc:66:e6:93:
a5:7c:16:f6:eb:b4:20:fc:d8:ca:94:28:4b:19:29:
82:84:bd:df:33:11:8a:37:62:05:5f:e9:ba:52:fd:
41:a4:3d:b2:be:45:bb:a3:a2:85:dc:a6:b9:3b:26:
ba:a6:07:52:3a:15:06:d9:80:1e:28:e4:5b:26:cc:
a9:5f:56:2c:71:4b:23:4e:fa:34:de:8a:1f:ed:16:
20:00:a0:9b:dd:b4:8d:37:d5:6c:c0:0c:2d:d2:ac:
ca:9d:ab:17:8d:be:4c:2c:72:b5:ad:12:64:89:7a:
9d:d3:24:5e:c1:f5:e6:48:66:53:3e:c5:0e:59:b4:
fc:fe:d7:21:f8:0d:a5:0f:c0:3c:29:2c:2e:61:ca:
fe:7b:c6:6b:dd:46:90:13:64:e6:75:2c:a7:48:c1:
2b:24:76:76:af:bc:f6:20:ea:40:5f:fb:f4:72:ec:
2e:b6:c6:bf:04:93:00:ec:ec:e7:35:1f:90:3c:bd:
fe:c5:7f:98:6a:60:4e:2d:b0:ac:69:8d:d9:8e:03:
47:b1:f5:ac:44:ac:88:96:96:71:6e:68:ec:5d:e1:
03:09:80:0d:4d:9d:25:bb:ce:9d:2f:83:e5:c1:ee:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:EA:DD:82:3A:E0:A3:4D:28:9A:13:60:0E:AF:D1:CD:28:75:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Czq3YI64KNNKJoTYA6v0c0odec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.12.0/22
Signature Algorithm: sha256WithRSAEncryption
93:dd:0b:ce:9e:e9:4e:18:d1:f9:b8:14:d5:af:35:cf:9a:76:
d6:e3:1a:01:62:00:09:8c:42:e8:f0:11:7d:77:9e:f8:66:b6:
e8:b5:a0:ea:2b:b1:f5:30:be:72:fa:ae:71:4c:39:b2:6d:88:
9a:47:22:a3:3e:32:3b:7d:f1:96:47:13:92:50:ec:ce:9d:d4:
d8:38:38:28:a2:cf:d5:e3:b4:28:a0:e7:a5:31:81:1d:d2:0d:
9f:96:7d:ab:53:b8:12:a7:0a:2d:21:0c:f4:f7:42:11:8b:1f:
dc:ba:1e:af:a3:73:a5:09:b1:84:5f:4e:87:74:78:9a:b2:f7:
af:90:bf:44:67:3e:6e:a9:51:cf:6e:02:10:c3:5e:68:1f:c7:
6a:58:11:85:04:5f:38:23:c8:b8:32:cf:f4:6f:53:80:b7:d6:
8d:47:53:55:6b:cc:b2:43:dd:82:e6:6f:48:7c:0a:16:aa:d6:
2d:3a:82:19:af:e1:1d:29:09:dd:83:2d:55:20:02:cd:8e:be:
06:19:87:f3:c6:fe:01:81:4f:e4:10:34:f9:e8:2d:a0:54:80:
79:86:8e:57:ab:88:50:22:a9:1a:f9:98:66:7e:66:e8:0a:40:
4a:5f:b7:00:99:3b:f1:4c:f6:0e:70:f5:b0:65:36:3f:62:a9:
fd:2f:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org