Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8TZ4IT3bJy74oZ-wreY7iOIOxTA.roa
File: 8TZ4IT3bJy74oZ-wreY7iOIOxTA.roa (raw, json)
Hash identifier: X051L1GZVPLSCfGSmcD5u+w5bv/FBbjGegxIYgRn1qI=
Subject key identifier: F1:36:78:21:3D:DB:27:2E:F8:A1:9F:B0:AD:E6:3B:88:E2:0E:C5:30
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29E8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8TZ4IT3bJy74oZ-wreY7iOIOxTA.roa
Signing time: Fri 01 Sep 2023 10:07:14 +0000
ROA not before: Fri 01 Sep 2023 10:07:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10728 (0x29e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F13678213DDB272EF8A19FB0ADE63B88E20EC530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:27:5d:c3:26:e8:68:24:57:60:2a:f8:08:
94:25:6a:03:c6:e1:c1:29:8e:1f:f1:37:55:e2:18:
c2:4a:c2:b8:4e:26:62:dd:29:7c:1d:73:e4:17:2c:
a9:53:a8:22:ce:6e:fa:eb:43:0f:c4:83:2d:de:f3:
49:e9:44:92:c3:33:06:da:b8:14:7c:a5:d2:8c:11:
3d:69:c7:21:66:80:01:d3:02:ae:af:24:4e:ab:46:
b1:08:22:fd:c9:4b:98:24:94:75:81:5b:0c:26:94:
15:27:4a:e3:ba:2f:03:51:14:9a:66:30:ef:5c:bb:
34:37:e7:64:9f:3f:8a:0d:a5:34:66:8f:dd:53:1d:
cb:41:fb:4a:71:92:e3:8e:13:6d:2a:16:65:5f:d7:
db:db:2c:38:00:3f:fe:e9:ce:34:8c:d3:42:53:b2:
8d:ba:b1:5e:b5:6b:fc:a6:26:a2:ac:b0:ec:cc:3e:
30:17:93:8f:ba:7a:5f:6d:74:c0:fa:99:03:4a:c6:
98:71:05:a7:71:2b:9e:f4:a7:b6:eb:05:6e:7c:72:
14:e7:c4:92:f7:d6:d6:4e:ec:0e:e5:3a:ff:a2:a0:
bb:4b:fa:cc:09:e7:1d:3b:3a:a4:9f:2a:39:bf:7a:
0f:5c:a3:77:ea:12:9d:62:a3:62:f7:47:85:ee:d9:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:36:78:21:3D:DB:27:2E:F8:A1:9F:B0:AD:E6:3B:88:E2:0E:C5:30
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8TZ4IT3bJy74oZ-wreY7iOIOxTA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.24.0/21
Signature Algorithm: sha256WithRSAEncryption
11:3b:26:5f:40:c8:3c:be:37:e9:dd:ee:e0:8f:99:93:ad:18:
19:47:09:26:3d:6c:76:9f:6e:41:73:de:15:48:0f:09:e2:de:
9d:1b:3d:68:e0:7f:1a:d3:b2:e5:83:de:8f:89:f8:e0:78:f3:
0a:2f:05:10:34:f6:1d:9f:58:bf:54:f0:df:2c:c2:2f:7b:31:
c1:9d:43:f4:ba:6a:13:69:0f:f7:a4:68:5f:47:b2:0e:70:0b:
ea:22:57:97:7b:9e:d5:d5:87:a0:b8:f8:e3:37:98:8f:a6:f7:
b1:9a:09:a0:9f:15:4a:41:35:84:f4:53:2c:f6:25:c1:77:92:
87:45:0a:f3:85:00:ce:91:ad:e4:f5:d2:70:96:45:9a:25:92:
a5:c9:b1:e7:cf:08:9a:75:40:92:20:14:8a:12:8e:d2:4e:88:
02:36:18:aa:b8:00:16:59:c1:66:87:ce:31:93:71:ad:5f:e6:
c8:73:c6:61:08:3e:e0:a8:40:c5:a5:3b:ea:79:0e:c2:f8:7e:
03:e2:3e:62:47:ab:a7:e3:5d:c5:bc:1e:8c:36:a1:2d:49:34:
23:ff:10:0e:65:66:7a:bd:cc:eb:24:57:17:41:3a:9c:27:3e:
32:5c:f8:d3:88:19:bb:94:c4:96:de:a5:c9:ae:61:d9:53:96:
b6:b8:25:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org