Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9h6HkYuuzXVL7bGAnW4YVSoF3OI.roa
File: 9h6HkYuuzXVL7bGAnW4YVSoF3OI.roa (raw, json)
Hash identifier: IkYueGCLc+bS+3ry4Ki6g1xYhECRE95JoUYC89j8lIQ=
Subject key identifier: F6:1E:87:91:8B:AE:CD:75:4B:ED:B1:80:9D:6E:18:55:2A:05:DC:E2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2809
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9h6HkYuuzXVL7bGAnW4YVSoF3OI.roa
Signing time: Fri 01 Sep 2023 10:04:52 +0000
ROA not before: Fri 01 Sep 2023 10:04:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10249 (0x2809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F61E87918BAECD754BEDB1809D6E18552A05DCE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:53:92:3e:dd:15:11:f0:89:7b:88:a7:fc:
bc:e2:95:e5:54:f6:de:d7:16:0d:d2:79:67:4c:b9:
3c:bc:4a:94:96:4b:ff:06:59:50:3c:25:52:4d:d7:
fc:7b:46:63:93:30:5b:f3:4e:49:9c:24:55:ff:86:
98:48:03:c2:fe:49:12:d5:a2:37:f1:34:c2:3b:40:
68:63:2d:25:e4:17:e4:d0:b0:61:eb:1b:ff:4b:f7:
73:f4:47:46:d9:04:ef:97:d5:e2:ff:b3:22:1a:4a:
5e:46:28:ef:8e:8f:7c:e3:57:76:7b:35:50:0a:dd:
22:54:6c:c6:d4:ed:22:a3:8a:81:30:46:d0:31:77:
16:63:d6:54:b8:c0:b0:f3:de:d7:c3:7e:c9:52:b3:
95:23:33:a2:bc:56:a1:11:b9:12:10:de:4c:71:18:
09:a2:dd:87:08:d3:24:8b:a9:ab:49:4d:c8:a0:5d:
81:05:22:42:68:ba:10:bd:46:77:6f:9e:ad:9c:25:
d8:d6:b2:9d:fb:55:1f:c5:87:15:62:89:4c:e7:5d:
3a:15:87:ca:80:16:f0:49:5b:20:3c:0f:83:d4:40:
cf:33:f0:6e:09:c3:3d:24:c5:d9:bf:35:28:97:98:
8e:69:f9:d7:d8:f2:bb:19:05:79:a1:7d:2c:ef:d5:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1E:87:91:8B:AE:CD:75:4B:ED:B1:80:9D:6E:18:55:2A:05:DC:E2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9h6HkYuuzXVL7bGAnW4YVSoF3OI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.160.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:97:15:10:3f:9c:e1:c2:e9:b5:05:73:3f:da:e2:80:74:5e:
21:46:36:22:b0:ed:3e:e3:86:67:72:be:18:93:aa:f0:6a:53:
65:11:3f:10:99:61:d3:3b:09:de:ae:8f:66:8d:8e:c8:93:ba:
b1:c3:e2:e2:79:4f:b8:2e:59:d2:66:29:e2:49:55:e3:01:14:
2d:0f:f0:90:1f:ff:b9:b4:6c:1d:ae:72:13:a8:0c:45:a4:5d:
8f:3f:87:91:76:e2:7c:44:88:6b:40:f8:e2:d8:37:47:93:cd:
29:1f:2c:10:14:5a:18:af:3a:77:03:a5:44:d4:53:78:a3:9e:
79:db:5b:03:1d:e9:88:87:28:0a:9b:36:eb:aa:97:e5:b5:5f:
88:d3:ad:c6:c5:18:0d:4e:f1:c1:87:83:21:63:0c:6e:06:8d:
80:d6:6d:b5:1b:e4:ea:12:e9:70:50:2c:03:cb:b4:71:68:c8:
18:cd:98:91:f6:8f:27:91:15:e5:13:30:cc:12:43:8e:b7:c8:
a1:a1:37:ee:2e:b2:6b:f6:42:8f:7f:10:a1:3c:b7:52:1d:5b:
84:40:f2:0a:38:0d:fa:b8:c4:97:58:34:b3:12:e3:fa:2d:0b:
66:66:8a:dc:a7:65:06:d8:28:46:84:f6:89:c5:e5:7e:14:4e:
66:88:35:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org