Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ABlotX5xvh-m_SrAanjuxPqcBjw.roa
File: ABlotX5xvh-m_SrAanjuxPqcBjw.roa (raw, json)
Hash identifier: EGW/CQN0MOfA1T/jx2wH+LS12hyEKS//ZQkh8/FoAz4=
Subject key identifier: 00:19:68:B5:7E:71:BE:1F:A6:FD:2A:C0:6A:78:EE:C4:FA:9C:06:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 296A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ABlotX5xvh-m_SrAanjuxPqcBjw.roa
Signing time: Fri 01 Sep 2023 10:06:35 +0000
ROA not before: Fri 01 Sep 2023 10:06:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10602 (0x296a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=001968B57E71BE1FA6FD2AC06A78EEC4FA9C063C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:fd:f6:0f:50:53:0d:85:04:64:af:a1:f8:
d7:f0:b1:12:cf:3d:b5:6e:44:f9:e6:4b:39:06:da:
ee:f4:c6:2d:e0:5b:a5:93:1a:c5:26:a4:e6:35:ff:
89:9b:a5:19:60:ef:c8:7a:ac:13:1f:dc:97:b0:11:
0d:35:39:04:ca:bc:09:b3:da:fd:9e:79:1a:c2:4b:
b0:e0:b6:f7:a0:7c:41:68:6c:0b:d2:aa:b8:62:f4:
5c:7a:b2:2d:21:2c:0f:d4:ff:30:54:0c:a5:11:98:
db:02:ad:c7:01:f1:a5:5e:6a:aa:4e:b3:bc:7b:b0:
14:80:dc:a0:fc:3a:8c:6e:83:72:ff:ec:8b:f1:0e:
cc:85:6a:9b:2e:5f:cb:5d:ba:6f:96:cf:d1:20:2d:
cb:36:0c:a3:00:22:b8:74:19:6f:cd:72:92:6c:89:
e8:53:b8:63:5f:04:93:aa:28:91:6e:ae:58:f2:fb:
15:6d:9d:43:d9:7b:69:43:7b:44:3f:b8:8d:d6:95:
b5:4a:84:25:a3:49:90:24:f7:b0:2f:8a:7e:c6:0f:
3c:aa:7f:c9:93:5c:a4:4f:33:dd:f0:66:e6:19:4a:
53:f5:44:27:bf:f4:c9:da:16:f9:79:52:8f:f3:f6:
90:38:b5:63:64:01:da:e4:34:67:e6:1e:4e:6a:48:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:19:68:B5:7E:71:BE:1F:A6:FD:2A:C0:6A:78:EE:C4:FA:9C:06:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ABlotX5xvh-m_SrAanjuxPqcBjw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.144.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:16:4c:d1:e8:8b:d5:40:86:03:9c:87:cf:1a:c7:73:f2:d5:
a3:b2:52:fb:1b:60:51:8d:41:7b:8b:19:a7:ea:24:4d:e4:37:
e5:b1:ff:a6:46:af:25:7b:e2:9c:d6:73:a8:cf:69:14:94:9d:
d7:d8:2d:89:f0:da:37:93:a4:cd:61:f1:f5:e0:dc:95:ac:35:
de:3a:9c:40:21:94:c9:7a:72:5c:3a:98:22:a0:d6:ff:aa:10:
aa:03:a4:56:76:fd:2b:8c:24:9b:eb:d3:c8:1b:37:cc:53:7e:
74:31:be:03:af:40:d5:cf:de:e9:b1:30:ae:0d:b7:04:20:9c:
f5:03:30:ee:4e:cd:f0:99:28:82:c3:aa:3d:40:95:f4:a8:10:
13:16:a0:f1:39:5d:10:d0:f7:52:06:04:58:33:51:3a:2b:b5:
24:2d:9e:22:f7:29:90:fb:09:f3:0e:d9:9a:76:ae:76:d7:e7:
88:c8:39:3d:9f:e2:83:37:ea:db:b2:e3:78:85:37:5e:fa:c1:
b2:0a:15:cf:3c:42:a1:8c:e0:3a:1c:18:c6:91:49:3c:8b:99:
15:0f:77:24:60:1b:5c:3a:12:64:f5:b2:7c:33:10:35:40:b4:
4b:30:3e:9b:24:16:5a:06:4f:ed:fc:6c:3b:ab:17:e0:eb:ca:
8f:6d:d4:d3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKWowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2MzVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwMTk2OEI1N0U3MUJF
MUZBNkZEMkFDMDZBNzhFRUM0RkE5QzA2M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeC/32D1BTDYUEZK+h+NfwsRLPPbVuRPnmSzkG2u70xi3gW6WT
GsUmpOY1/4mbpRlg78h6rBMf3JewEQ01OQTKvAmz2v2eeRrCS7DgtvegfEFobAvS
qrhi9Fx6si0hLA/U/zBUDKURmNsCrccB8aVeaqpOs7x7sBSA3KD8Ooxug3L/7Ivx
DsyFapsuX8tdum+Wz9EgLcs2DKMAIrh0GW/NcpJsiehTuGNfBJOqKJFurljy+xVt
nUPZe2lDe0Q/uI3WlbVKhCWjSZAk97Avin7GDzyqf8mTXKRPM93wZuYZSlP1RCe/
9MnaFvl5Uo/z9pA4tWNkAdrkNGfmHk5qSGsVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUABlotX5xvh+m/SrAanjuxPqcBjwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FCbG90WDV4dmgtbV9TckFh
bmp1eFBxY0Jqdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6JAwDQYJKoZIhvcNAQELBQADggEBABoWTNHoi9VAhgOch88ax3Py1aOyUvsbYFGN
QXuLGafqJE3kN+Wx/6ZGryV74pzWc6jPaRSUndfYLYnw2jeTpM1h8fXg3JWsNd46
nEAhlMl6clw6mCKg1v+qEKoDpFZ2/SuMJJvr08gbN8xTfnQxvgOvQNXP3umxMK4N
twQgnPUDMO5OzfCZKILDqj1AlfSoEBMWoPE5XRDQ91IGBFgzUTortSQtniL3KZD7
CfMO2Zp2rnbX54jIOT2f4oM36tuy43iFN176wbIKFc88QqGM4DocGMaRSTyLmRUP
dyRgG1w6EmT1snwzEDVAtEswPpskFloGT+38bDurF+Dryo9t1NM=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org