Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7QZ-1GVLCZ9EecV1DJ79n1zA9ic.roa
File: 7QZ-1GVLCZ9EecV1DJ79n1zA9ic.roa (raw, json)
Hash identifier: TrRF25FkG1Gye+yK2ks5G1h5B7KkEaPOoqpTzR038iA=
Subject key identifier: ED:06:7E:D4:65:4B:09:9F:44:79:C5:75:0C:9E:FD:9F:5C:C0:F6:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2870
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7QZ-1GVLCZ9EecV1DJ79n1zA9ic.roa
Signing time: Fri 01 Sep 2023 10:05:20 +0000
ROA not before: Fri 01 Sep 2023 10:05:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.184.0/21 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10352 (0x2870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ED067ED4654B099F4479C5750C9EFD9F5CC0F627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:f3:87:75:3a:82:93:99:e5:f6:fd:f8:42:
19:8a:c3:23:5a:94:f8:eb:0b:c9:ca:52:c9:8b:ec:
a7:78:01:bf:f4:dd:8d:34:a8:dd:11:e8:9e:50:08:
2c:b6:0b:49:17:95:31:28:e5:7b:59:53:b6:e1:ba:
f6:f7:31:fb:e0:99:43:00:dc:fa:9f:b3:e7:36:bb:
cc:64:94:c6:d8:b0:3b:ff:c9:12:cc:8d:9e:e0:51:
2b:43:8b:05:b3:d2:aa:16:2d:ab:5e:f4:eb:f4:ef:
22:88:25:45:cb:d0:ba:e4:6b:16:52:e3:38:be:ac:
ec:c5:d6:1c:d8:60:ca:d7:8b:52:90:2b:79:21:0a:
6f:16:5d:a2:29:a7:4a:20:a1:03:78:68:d6:93:4b:
ba:f3:55:94:92:06:bd:f6:7b:ae:d3:cb:a4:f6:0e:
fe:8a:5d:e5:f0:28:e5:b1:3d:2b:81:b7:16:7d:30:
85:78:ed:81:fb:a3:95:f3:7e:b5:9e:9d:67:d7:8f:
dc:b9:42:bd:15:96:67:1c:9f:09:08:f3:99:71:51:
18:56:4f:ae:83:4b:4c:99:c0:94:44:44:6f:bd:53:
1a:31:9d:12:5a:38:7e:8a:56:a2:55:46:95:66:e5:
33:ad:15:3e:11:06:a7:0f:d1:f5:8f:c8:f9:e5:a5:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:06:7E:D4:65:4B:09:9F:44:79:C5:75:0C:9E:FD:9F:5C:C0:F6:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7QZ-1GVLCZ9EecV1DJ79n1zA9ic.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.184.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:14:c7:c7:ef:58:46:bf:44:2e:0a:bd:70:8c:f6:4a:57:e3:
f5:da:30:15:6e:bb:c0:a7:8c:f0:c9:9c:94:3c:18:7b:fc:75:
55:34:6a:fd:58:df:1f:83:4e:19:a8:a3:06:19:5e:8f:07:3d:
7c:67:9d:aa:98:72:48:75:b0:99:a6:b4:aa:0e:e9:b0:16:b6:
2e:c1:e9:23:40:84:1a:c4:01:f4:74:a1:39:8c:46:26:05:4e:
9c:b6:e2:1c:ed:d2:86:33:76:96:48:46:21:11:04:76:97:b9:
b8:32:51:15:db:00:38:f0:65:a2:91:19:45:e7:10:d4:79:92:
62:44:e9:8e:b1:5e:22:e2:6b:9e:4c:65:d5:d4:77:ac:4a:9a:
33:87:4a:8a:75:00:88:0a:b9:82:9c:00:c0:fd:36:a9:49:1e:
32:a3:75:39:8b:08:1b:22:5a:ff:16:5b:40:30:ce:f3:fa:73:
25:1a:f6:f3:f2:35:92:0f:09:5e:1f:93:89:ab:cf:fb:ce:07:
e0:c7:16:af:35:f4:18:f9:c9:d6:97:24:cb:21:96:f6:4a:45:
58:22:3f:5d:fc:5e:10:bf:2d:33:7a:61:f3:43:05:4b:c4:d5:
62:b5:e4:58:71:e0:a7:26:72:a2:c6:eb:99:53:6f:e6:57:5c:
11:e1:d4:fd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKHAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MjBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVEMDY3RUQ0NjU0QjA5
OUY0NDc5QzU3NTBDOUVGRDlGNUNDMEY2MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEMfOHdTqCk5nl9v34QhmKwyNalPjrC8nKUsmL7Kd4Ab/03Y00
qN0R6J5QCCy2C0kXlTEo5XtZU7bhuvb3MfvgmUMA3Pqfs+c2u8xklMbYsDv/yRLM
jZ7gUStDiwWz0qoWLate9Ov07yKIJUXL0LrkaxZS4zi+rOzF1hzYYMrXi1KQK3kh
Cm8WXaIpp0ogoQN4aNaTS7rzVZSSBr32e67Ty6T2Dv6KXeXwKOWxPSuBtxZ9MIV4
7YH7o5XzfrWenWfXj9y5Qr0VlmccnwkI85lxURhWT66DS0yZwJRERG+9UxoxnRJa
OH6KVqJVRpVm5TOtFT4RBqcP0fWPyPnlpepjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7QZ+1GVLCZ9EecV1DJ79n1zA9icwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdRWi0xR1ZMQ1o5RWVjVjFE
Sjc5bjF6QTlpYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sLgwDQYJKoZIhvcNAQELBQADggEBAB0Ux8fvWEa/RC4KvXCM9kpX4/XaMBVuu8Cn
jPDJnJQ8GHv8dVU0av1Y3x+DThmoowYZXo8HPXxnnaqYckh1sJmmtKoO6bAWti7B
6SNAhBrEAfR0oTmMRiYFTpy24hzt0oYzdpZIRiERBHaXubgyURXbADjwZaKRGUXn
ENR5kmJE6Y6xXiLia55MZdXUd6xKmjOHSop1AIgKuYKcAMD9NqlJHjKjdTmLCBsi
Wv8WW0AwzvP6cyUa9vPyNZIPCV4fk4mrz/vOB+DHFq819Bj5ydaXJMshlvZKRVgi
P138XhC/LTN6YfNDBUvE1WK15Fhx4KcmcqLG65lTb+ZXXBHh1P0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org