Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8v7kKgPOLFjkyTDuuCG0D68khec.roa
File: 8v7kKgPOLFjkyTDuuCG0D68khec.roa (raw, json)
Hash identifier: TLcQ2fofAih3Rbc4tWTzmbDcjZIfIb0wzMMyYG7RCxw=
Subject key identifier: F2:FE:E4:2A:03:CE:2C:58:E4:C9:30:EE:B8:21:B4:0F:AF:24:85:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A6F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8v7kKgPOLFjkyTDuuCG0D68khec.roa
Signing time: Fri 01 Sep 2023 10:07:53 +0000
ROA not before: Fri 01 Sep 2023 10:07:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10863 (0x2a6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F2FEE42A03CE2C58E4C930EEB821B40FAF2485E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cb:37:a3:3d:ea:29:64:aa:2f:e8:77:9e:98:
e4:73:2e:30:19:12:6d:47:91:af:b3:6b:1c:1a:ee:
4c:e5:b6:8c:b9:da:01:a3:59:72:9c:d5:62:64:59:
90:7f:2b:c9:72:e4:9e:ed:f4:e3:00:9e:44:1d:ab:
e2:c9:77:48:fd:ec:fe:96:86:6d:0a:23:8b:bb:a3:
0f:f9:8d:77:fa:32:9f:b5:0b:c5:49:e2:28:1c:eb:
e2:cb:4d:77:d7:e3:96:79:c0:08:67:ed:ec:23:5a:
f5:84:03:36:ab:cb:09:d2:cd:83:e5:b0:05:3c:bc:
1d:7e:f9:ab:80:2c:2c:fb:ff:78:2e:04:b5:e4:19:
29:50:9c:da:1c:97:ca:53:de:50:36:12:70:6c:04:
ee:b1:23:57:af:65:2a:96:e7:c0:8d:7d:2f:80:89:
b9:85:e0:38:80:47:61:b2:11:7b:eb:15:4d:23:a6:
ab:84:91:23:63:65:c1:4a:18:a7:d6:63:e3:6a:05:
cd:1b:79:d5:70:db:46:b3:c6:c3:01:30:e0:fd:64:
d5:ea:d3:6b:96:f0:ea:7f:47:95:4f:c6:8a:0c:eb:
92:67:53:c8:cf:90:4e:26:58:66:41:9b:11:c0:e0:
e3:0e:6c:43:b0:5a:86:70:0f:09:8b:a5:0d:ec:e6:
b5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:E4:2A:03:CE:2C:58:E4:C9:30:EE:B8:21:B4:0F:AF:24:85:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8v7kKgPOLFjkyTDuuCG0D68khec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.244.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:ed:aa:de:79:e1:3c:45:14:da:01:0e:c6:ed:1a:02:e7:ff:
89:d3:d8:f8:10:09:b9:1a:8d:3e:33:aa:dc:77:7a:9b:1f:98:
f2:23:16:d1:e5:1d:77:3f:00:94:b0:3d:b0:7a:65:48:d7:97:
34:b8:ab:27:0f:eb:0b:ba:4f:0c:b3:4f:85:84:92:f9:6f:91:
9a:97:a2:c4:1e:ce:a7:47:d3:63:04:a5:eb:f6:2a:7c:d0:1f:
47:f4:c4:32:0f:f6:ee:66:a0:0a:60:df:c6:79:ec:88:2b:98:
72:a7:ba:28:68:26:c9:ea:23:c1:89:f3:27:c2:dc:c8:2d:48:
bf:6f:05:a9:3c:2e:5a:22:14:2f:90:77:11:14:74:93:61:7a:
ec:d3:d5:9a:92:de:0f:31:18:7a:53:f1:1f:c0:ad:b1:2e:07:
08:ce:e5:b2:12:a8:bd:cb:31:f2:7f:78:04:8a:db:5c:f7:7e:
c3:b4:94:d5:fb:2b:be:d1:bb:0b:81:04:08:1d:a7:7a:9e:67:
d2:06:f6:33:66:a0:0f:f3:18:28:2c:11:ff:6c:af:29:96:97:
01:71:1e:b0:9f:4b:94:17:aa:d8:9f:a9:54:dd:b6:44:0c:9a:
e5:2c:8e:49:bc:c8:91:a9:57:be:04:3f:14:e1:51:9e:fe:d9:
51:47:f6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org