Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AqvjEHZqh9Dqh_e5_IWeswfKnsk.roa
File: AqvjEHZqh9Dqh_e5_IWeswfKnsk.roa (raw, json)
Hash identifier: kIfDMQZGPneXx7JdoCYSGaVMxn//xieyBHzSYcL0eBM=
Subject key identifier: 02:AB:E3:10:76:6A:87:D0:EA:87:F7:B9:FC:85:9E:B3:07:CA:9E:C9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A84
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AqvjEHZqh9Dqh_e5_IWeswfKnsk.roa
Signing time: Fri 01 Sep 2023 10:08:00 +0000
ROA not before: Fri 01 Sep 2023 10:08:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10884 (0x2a84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=02ABE310766A87D0EA87F7B9FC859EB307CA9EC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:cd:b2:47:73:c6:61:da:0a:c6:58:42:5a:
62:a8:22:57:a6:b2:04:ef:cc:89:a0:bd:01:9f:f2:
8c:83:e1:c6:62:c9:cb:a1:a9:d8:55:7a:4a:b1:69:
c1:52:59:07:6a:4a:39:30:82:f9:38:47:81:a3:08:
ff:7e:26:50:2d:ab:60:0a:3c:ea:7b:4e:ae:f2:2d:
99:5d:03:7f:cf:b7:4f:0d:8a:f1:44:20:4b:33:bf:
fd:3e:21:96:be:6a:5d:e2:1c:62:4b:0a:13:a0:80:
ef:8f:48:3d:c8:ba:d7:2a:55:be:b4:7e:3c:3c:e8:
7d:c6:da:67:d8:67:aa:39:f9:39:80:93:dd:9f:a3:
fb:5d:22:90:55:10:af:9c:b9:2b:b9:a2:5f:94:f5:
62:86:d2:4f:32:95:f8:4f:1d:7c:17:e2:98:67:b7:
3b:f4:08:28:e3:0d:cb:28:d3:fd:cb:cf:88:9a:e5:
80:bb:95:6e:c1:ae:dd:be:30:43:a3:8f:35:33:4d:
02:88:53:b8:4f:89:83:18:89:fb:a7:c8:af:c6:2f:
5f:d3:f8:cb:26:51:74:e4:42:79:d9:69:0d:0c:c6:
c1:0f:21:b6:1b:e0:21:ef:02:89:85:47:e0:74:34:
2f:5a:86:f6:b6:81:80:41:6b:ed:1b:be:f1:be:c9:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:E3:10:76:6A:87:D0:EA:87:F7:B9:FC:85:9E:B3:07:CA:9E:C9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/AqvjEHZqh9Dqh_e5_IWeswfKnsk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:8f:12:6f:6d:2f:79:d3:2a:9c:80:67:44:85:5e:77:d4:ba:
a2:de:73:77:80:72:6c:4a:f7:ea:a7:5e:8e:cc:67:23:13:2e:
f5:27:07:14:71:52:07:14:0d:5e:79:79:ea:90:c8:36:2c:41:
36:24:c2:07:77:60:b5:81:e6:d2:c2:09:19:be:27:a6:85:f0:
d3:54:be:ad:b2:40:20:1b:3f:07:e0:86:ce:c4:38:54:42:2e:
f8:1b:35:36:64:a1:9b:a9:95:48:b6:01:99:43:f6:f5:8b:7d:
49:58:12:da:26:a5:e2:e7:48:41:91:12:3a:db:1c:c2:1e:9b:
89:0a:69:3a:3a:b9:d9:b1:91:58:60:b2:b3:39:dc:11:1f:ba:
bc:6a:b7:bf:71:82:b3:14:ac:15:5a:cb:70:d1:bb:44:e8:1f:
84:c8:83:01:f0:46:83:3a:5f:f8:85:b4:60:19:da:a0:0a:eb:
19:0b:21:c4:cd:09:91:bb:36:cb:43:03:4f:0c:77:b7:20:af:
b4:78:ea:c8:1b:20:c7:06:7f:5e:ea:ba:58:e2:f8:de:f9:f2:
da:5c:55:b4:26:18:77:78:22:c7:cf:cb:cd:49:e8:6e:e0:27:
d4:6c:95:2d:e5:d1:39:4b:fb:9d:cf:74:2d:26:d3:23:00:1b:
8e:d4:b6:b5
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKoQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAyQUJFMzEwNzY2QTg3
RDBFQTg3RjdCOUZDODU5RUIzMDdDQTlFQzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+vM2yR3PGYdoKxlhCWmKoIlemsgTvzImgvQGf8oyD4cZiycuh
qdhVekqxacFSWQdqSjkwgvk4R4GjCP9+JlAtq2AKPOp7Tq7yLZldA3/Pt08NivFE
IEszv/0+IZa+al3iHGJLChOggO+PSD3IutcqVb60fjw86H3G2mfYZ6o5+TmAk92f
o/tdIpBVEK+cuSu5ol+U9WKG0k8ylfhPHXwX4phntzv0CCjjDcso0/3Lz4ia5YC7
lW7Brt2+MEOjjzUzTQKIU7hPiYMYifunyK/GL1/T+MsmUXTkQnnZaQ0MxsEPIbYb
4CHvAomFR+B0NC9ahva2gYBBa+0bvvG+ybV5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAqvjEHZqh9Dqh/e5/IWeswfKnskwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FxdmpFSFpxaDlEcWhfZTVf
SVdlc3dmS25zay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6XAwDQYJKoZIhvcNAQELBQADggEBAIyPEm9tL3nTKpyAZ0SFXnfUuqLec3eAcmxK
9+qnXo7MZyMTLvUnBxRxUgcUDV55eeqQyDYsQTYkwgd3YLWB5tLCCRm+J6aF8NNU
vq2yQCAbPwfghs7EOFRCLvgbNTZkoZuplUi2AZlD9vWLfUlYEtompeLnSEGREjrb
HMIem4kKaTo6udmxkVhgsrM53BEfurxqt79xgrMUrBVay3DRu0ToH4TIgwHwRoM6
X/iFtGAZ2qAK6xkLIcTNCZG7NstDA08Md7cgr7R46sgbIMcGf17qulji+N758tpc
VbQmGHd4IsfPy81J6G7gJ9RslS3l0TlL+53PdC0m0yMAG47UtrU=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org