Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9PyZsANJsVJYqZeBzFaV7tMXHwY.roa
File: 9PyZsANJsVJYqZeBzFaV7tMXHwY.roa (raw, json)
Hash identifier: Nriuf1ywOT1Xd3G/QEzJJqAnx+tCoB9zoqa9yJ6dO40=
Subject key identifier: F4:FC:99:B0:03:49:B1:52:58:A9:97:81:CC:56:95:EE:D3:17:1F:06
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A38
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9PyZsANJsVJYqZeBzFaV7tMXHwY.roa
Signing time: Fri 01 Sep 2023 10:07:38 +0000
ROA not before: Fri 01 Sep 2023 10:07:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10808 (0x2a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F4FC99B00349B15258A99781CC5695EED3171F06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:bc:fe:58:61:60:ed:ce:7e:c6:0a:ab:89:
76:59:9b:b3:d1:b9:be:98:01:94:6e:24:f3:16:67:
13:d6:b0:09:93:a5:73:4b:72:00:a8:bb:12:fa:ec:
d8:64:8b:96:56:0f:72:63:59:5c:5c:37:17:7a:b0:
8d:ea:45:37:d9:21:e6:9c:01:ce:25:31:45:e8:be:
08:4b:38:90:8a:71:85:26:58:dc:b4:b3:2a:49:27:
2d:cf:16:c4:5e:cd:42:3c:20:fc:07:eb:91:bc:c7:
bd:36:26:3e:17:10:16:f0:1f:56:43:13:3f:02:28:
bb:ca:83:1c:22:b1:f0:44:6f:2e:9b:fc:29:50:d0:
e5:63:11:f7:e1:e9:36:88:61:ba:7a:13:8e:50:42:
8a:77:8e:9d:5a:c4:90:f1:d2:10:9e:79:89:04:75:
5b:82:23:88:28:2b:b1:d5:6f:e6:3f:93:4f:97:54:
23:f8:17:c8:0d:15:f3:f4:e0:b4:fb:48:e4:24:9c:
6d:55:6a:5e:0b:79:98:1c:ab:45:fd:a3:51:c4:37:
bf:c5:13:25:1e:f1:f2:9a:91:89:5f:f2:a2:68:80:
a4:41:8b:bb:d5:29:aa:2a:6d:c7:56:c0:b3:a2:5d:
c3:0a:1c:ba:b6:5e:10:e5:50:16:6c:96:d8:87:cb:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FC:99:B0:03:49:B1:52:58:A9:97:81:CC:56:95:EE:D3:17:1F:06
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9PyZsANJsVJYqZeBzFaV7tMXHwY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.122.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bd:bb:3c:53:98:f0:9f:bf:a4:e5:39:d7:94:36:1f:3b:d0:
a6:f3:f9:71:81:c7:9b:9c:cd:ca:8c:12:c7:77:05:19:44:b2:
50:cc:fc:7a:8d:df:54:fb:8c:7a:37:3a:31:90:0b:75:be:b5:
8f:58:04:a2:31:68:11:2a:c4:71:fa:08:51:d5:df:62:56:3d:
c4:a3:c7:27:f5:8c:e5:6f:ff:ad:f2:4a:72:a3:83:15:01:a7:
74:96:32:c4:9e:f8:ee:4a:78:8f:47:67:5e:ba:d3:ca:bb:6d:
bb:a6:4e:bc:7d:d4:55:06:48:9b:42:41:0b:16:f8:20:99:68:
91:ef:e7:8d:0a:00:ad:b8:09:97:7d:ab:15:87:49:91:60:83:
bc:a0:09:a4:91:14:8b:9e:5e:a3:81:14:d1:76:c3:e5:fc:21:
92:dc:86:a2:1d:56:11:47:59:68:aa:02:61:a2:5c:18:cd:d2:
4c:37:a3:72:2c:96:cf:aa:12:7e:6f:c0:5c:1e:2c:52:5d:79:
f2:2f:08:e3:85:bf:05:9f:7e:58:e3:2b:70:1c:45:cd:56:e6:
5a:62:42:18:fa:aa:4e:97:a7:43:24:8e:3b:11:17:b6:b1:3f:
b3:f5:fa:36:0b:1a:97:ac:cd:fb:35:50:29:35:5f:e9:76:3b:
b7:d9:96:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org