Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B8HmY5wYupwpVSSeoxtBTm-pcl8.roa
File: B8HmY5wYupwpVSSeoxtBTm-pcl8.roa (raw, json)
Hash identifier: Ky07bhE2GMnZ2cF0ZT2TCPUjbLH9COu4UROe2dRrv5s=
Subject key identifier: 07:C1:E6:63:9C:18:BA:9C:29:55:24:9E:A3:1B:41:4E:6F:A9:72:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28E1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B8HmY5wYupwpVSSeoxtBTm-pcl8.roa
Signing time: Fri 01 Sep 2023 10:05:51 +0000
ROA not before: Fri 01 Sep 2023 10:05:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.126.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10465 (0x28e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=07C1E6639C18BA9C2955249EA31B414E6FA9725F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:97:a3:bc:98:97:e4:80:6c:c1:92:7c:39:
b3:7c:62:1b:95:e0:e4:20:cd:da:21:c4:ce:12:71:
ad:cb:8b:b8:2a:01:a0:27:e3:4d:c7:ae:25:28:af:
c6:ef:a5:eb:50:86:0b:3c:2d:8d:d5:fe:12:ad:97:
f3:4d:11:49:15:fe:1b:2d:ba:2c:5f:28:15:98:21:
4f:ec:69:8c:7c:e6:70:52:ce:39:d8:39:80:08:b7:
d3:9f:68:3a:44:51:01:5a:7b:f6:cc:2f:de:ce:e7:
fa:4e:7d:fb:a3:b8:c5:66:9e:4b:30:00:9a:6e:ea:
11:7f:3c:86:2a:87:57:03:2b:3f:31:9b:b8:f0:09:
c1:d8:04:ce:20:d1:79:c7:3a:b3:59:7c:9f:03:6f:
c9:90:1e:29:3b:b7:49:43:b8:62:37:56:bb:be:a4:
5f:5f:b7:de:ec:6a:96:3b:b3:55:5a:40:ed:24:e0:
8c:a0:63:a0:4c:f1:43:c7:a2:30:29:db:b7:25:a0:
cb:d0:74:0d:22:40:0e:5e:df:1e:f4:ff:43:81:eb:
4f:b2:22:5f:25:38:ea:80:72:3e:b7:e2:c4:6d:d7:
c7:4d:4e:d1:25:c6:99:24:21:a9:85:34:92:30:f9:
74:14:66:d1:cd:22:f1:e1:87:5d:1c:2e:b7:a5:9b:
48:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C1:E6:63:9C:18:BA:9C:29:55:24:9E:A3:1B:41:4E:6F:A9:72:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/B8HmY5wYupwpVSSeoxtBTm-pcl8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.126.0/23
Signature Algorithm: sha256WithRSAEncryption
78:14:76:b1:4b:4a:ed:71:85:f3:1b:55:61:5c:cb:86:5c:a4:
90:de:bc:d4:6a:b4:3b:6d:b0:2e:a4:33:e3:45:e5:8f:14:17:
95:c6:12:09:0e:93:86:04:e0:78:5b:20:be:a5:60:e9:4e:d3:
e0:f3:ff:d1:66:9f:14:a5:d3:cb:ed:4e:4d:f3:2e:2a:d9:1f:
f3:c5:10:49:e9:86:19:bf:30:ca:46:34:4e:ec:f4:cf:4f:68:
59:5b:21:2b:9d:bb:06:ed:c5:cd:8e:be:40:9a:d5:80:26:37:
30:16:98:ab:69:0e:b9:c1:3d:a0:01:5a:af:06:6f:e5:86:bc:
db:0a:6f:b7:ed:7a:7d:64:d2:ba:67:a0:65:46:ee:1d:83:cc:
cb:ef:92:9c:52:0e:51:c4:54:90:4a:40:09:68:8f:c9:c7:8b:
e1:00:eb:63:74:5e:c1:1e:94:09:26:5f:81:92:e5:7a:ca:ec:
b4:76:3d:e2:e9:60:af:a1:1a:44:fe:aa:dc:d0:6e:e1:e4:7a:
f2:c3:3d:b4:ef:7a:4e:ca:7e:dc:fd:df:f5:d2:e8:7a:8d:39:
8f:61:93:52:72:3f:da:b2:0e:b6:88:c4:ff:3f:20:b0:e4:12:
26:d3:47:66:58:24:a2:bc:73:a8:93:68:e1:e7:7c:e0:3e:9c:
78:2c:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org