Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AJqRS6oIieYU1Rr81aIgveE0Cto.roa
File: AJqRS6oIieYU1Rr81aIgveE0Cto.roa (raw, json)
Hash identifier: 7DNd88smGQ1bpasURTLFCYdiL3rER93m6RIJZyKJYLY=
Subject key identifier: 00:9A:91:4B:AA:08:89:E6:14:D5:1A:FC:D5:A2:20:BD:E1:34:0A:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A42
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AJqRS6oIieYU1Rr81aIgveE0Cto.roa
Signing time: Fri 01 Sep 2023 10:07:41 +0000
ROA not before: Fri 01 Sep 2023 10:07:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10818 (0x2a42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=009A914BAA0889E614D51AFCD5A220BDE1340ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:4c:1a:08:45:5e:8f:72:70:86:59:77:14:
49:03:2f:44:70:bc:26:eb:30:04:73:4d:72:7f:54:
96:92:3c:df:93:4c:2d:53:76:dd:1c:69:a6:7e:2c:
cc:ad:62:00:49:b4:7c:df:90:12:11:56:c2:e9:9e:
32:9c:99:b0:c1:b7:08:8b:60:b8:90:af:ff:c9:96:
8b:58:9c:2f:2c:a9:77:0c:14:49:81:dc:0e:c4:89:
73:86:d4:93:ac:bf:9c:56:e1:4a:01:d6:73:1a:39:
d8:76:02:57:58:f5:6d:28:36:2d:af:52:06:71:43:
19:01:59:9e:77:45:eb:a7:76:bc:f7:ec:94:33:87:
2b:88:b6:6f:61:ed:57:3c:10:9c:80:46:1e:8e:19:
1f:0d:f8:87:84:e8:60:ab:f5:3c:1b:11:c5:cc:e0:
db:ab:d5:fc:80:68:a1:df:24:2f:20:ac:18:cf:5e:
39:d5:aa:f1:62:0a:c0:4f:5d:1b:ff:84:a1:f7:2d:
f6:74:31:5f:41:f1:22:75:b8:8d:62:d8:9b:e9:5a:
41:55:0b:3e:78:9c:b7:b1:09:db:f5:f9:81:36:8e:
db:06:a4:fc:c7:a7:7f:47:94:ae:76:8c:c6:53:13:
9b:f9:c3:27:67:a3:1f:88:07:93:c0:18:71:cd:f7:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9A:91:4B:AA:08:89:E6:14:D5:1A:FC:D5:A2:20:BD:E1:34:0A:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AJqRS6oIieYU1Rr81aIgveE0Cto.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.220.0/23
Signature Algorithm: sha256WithRSAEncryption
90:42:9d:8e:bf:7b:38:35:87:ea:b3:9d:50:96:65:d6:a4:5e:
65:00:b7:54:44:dd:26:4c:31:8b:08:bd:0a:5e:1a:6d:bf:b5:
d6:a2:1f:50:4a:44:f2:af:81:2c:df:2f:fc:b6:6a:04:b6:07:
03:e3:a9:0d:76:05:95:c7:c0:9d:aa:5f:c5:7e:04:37:f6:36:
9a:dc:84:ec:21:8f:8c:6e:a2:ed:6f:80:78:80:8a:da:f7:c4:
66:d9:4d:f6:b7:74:0d:da:ca:24:0b:ee:29:ad:33:ba:9e:ac:
a7:91:59:88:bf:01:b2:d3:21:64:8f:07:b4:8e:3e:d3:37:4d:
15:e2:8d:bd:f2:17:13:d9:7c:07:0e:18:4f:d0:92:a6:45:5d:
99:40:3a:8e:d4:f1:7d:1f:4b:59:13:ff:c9:b4:1b:7d:07:8a:
15:30:2c:bc:e6:00:6d:60:0c:00:ac:27:b7:b1:d1:c6:02:55:
c3:55:53:fb:01:cc:2e:ca:43:65:82:0e:8e:fb:50:49:4c:d0:
a9:c2:72:28:44:7f:6b:ad:c2:9e:45:08:55:d8:90:6e:76:35:
d6:3a:37:2a:03:69:4f:21:02:cb:a0:13:b1:e7:73:2e:7f:aa:
fd:cd:20:6f:5c:62:72:42:19:41:7b:09:cc:28:18:69:fe:7e:
71:1a:81:58
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKkIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NDFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAwOUE5MTRCQUEwODg5
RTYxNEQ1MUFGQ0Q1QTIyMEJERTEzNDBBREEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHMUwaCEVej3Jwhll3FEkDL0RwvCbrMARzTXJ/VJaSPN+TTC1T
dt0caaZ+LMytYgBJtHzfkBIRVsLpnjKcmbDBtwiLYLiQr//JlotYnC8sqXcMFEmB
3A7EiXOG1JOsv5xW4UoB1nMaOdh2AldY9W0oNi2vUgZxQxkBWZ53Reundrz37JQz
hyuItm9h7Vc8EJyARh6OGR8N+IeE6GCr9TwbEcXM4Nur1fyAaKHfJC8grBjPXjnV
qvFiCsBPXRv/hKH3LfZ0MV9B8SJ1uI1i2JvpWkFVCz54nLexCdv1+YE2jtsGpPzH
p39HlK52jMZTE5v5wydnox+IB5PAGHHN99XHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAJqRS6oIieYU1Rr81aIgveE0CtowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FKcVJTNm9JaWVZVTFScjgx
YUlndmVFMEN0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
sdwwDQYJKoZIhvcNAQELBQADggEBAJBCnY6/ezg1h+qznVCWZdakXmUAt1RE3SZM
MYsIvQpeGm2/tdaiH1BKRPKvgSzfL/y2agS2BwPjqQ12BZXHwJ2qX8V+BDf2Nprc
hOwhj4xuou1vgHiAitr3xGbZTfa3dA3ayiQL7imtM7qerKeRWYi/AbLTIWSPB7SO
PtM3TRXijb3yFxPZfAcOGE/QkqZFXZlAOo7U8X0fS1kT/8m0G30HihUwLLzmAG1g
DACsJ7ex0cYCVcNVU/sBzC7KQ2WCDo77UElM0KnCcihEf2utwp5FCFXYkG52NdY6
NyoDaU8hAsugE7Hncy5/qv3NIG9cYnJCGUF7CcwoGGn+fnEagVg=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org