Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BgKp5ysQDRsCI_oaCtpWNykUw9E.roa
File: BgKp5ysQDRsCI_oaCtpWNykUw9E.roa (raw, json)
Hash identifier: thBHtijdLDPI8mzQK6p/SVyuhtgoEdUW0Ltf4351vmM=
Subject key identifier: 06:02:A9:E7:2B:10:0D:1B:02:23:FA:1A:0A:DA:56:37:29:14:C3:D1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BgKp5ysQDRsCI_oaCtpWNykUw9E.roa
Signing time: Fri 01 Sep 2023 10:07:03 +0000
ROA not before: Fri 01 Sep 2023 10:07:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10691 (0x29c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0602A9E72B100D1B0223FA1A0ADA56372914C3D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c5:c1:f7:49:2d:e2:d5:ce:d9:5c:65:4f:50:
e6:8a:b6:01:86:b4:d2:bf:13:d4:ad:ae:24:ce:95:
2f:24:cf:2e:b2:17:3f:39:f7:8a:f4:9a:7a:97:25:
01:de:ff:ca:96:75:aa:88:8b:78:1b:d6:f9:2b:c6:
a9:a4:e7:08:80:d8:01:24:ce:0a:8f:a1:a3:5a:82:
11:94:37:b4:54:59:6c:cd:7d:c9:92:a4:69:c1:f9:
0e:00:34:63:ff:b4:09:72:4a:38:ef:35:0c:c4:27:
91:4a:53:da:bf:f4:55:27:de:34:4a:17:b1:e4:87:
b0:98:14:ed:6d:8b:f5:e7:a7:fd:5e:9d:6f:e4:b9:
8d:53:b4:98:ed:04:aa:79:ef:d2:f3:e5:64:a4:4a:
48:6b:5c:d3:c4:b4:1e:fb:24:9f:8e:f8:cc:83:32:
6b:33:57:2e:8c:92:00:13:88:f0:e1:77:be:1c:1b:
6f:d4:e9:15:99:22:3a:8b:a3:29:17:aa:10:dc:ec:
a2:f6:96:75:7c:43:b4:88:6f:83:1f:ac:60:e7:a6:
a0:04:dd:cc:5d:de:64:68:d0:87:6f:0f:fe:8d:d5:
b6:ed:1e:e8:fc:a0:64:84:22:ae:fc:d9:57:86:6a:
d0:f4:8d:e5:a6:c2:b3:b6:0e:7d:1b:fc:98:83:bc:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:02:A9:E7:2B:10:0D:1B:02:23:FA:1A:0A:DA:56:37:29:14:C3:D1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BgKp5ysQDRsCI_oaCtpWNykUw9E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.144.0/22
Signature Algorithm: sha256WithRSAEncryption
57:b5:5a:b6:a6:12:c8:13:8c:59:f6:4c:78:12:40:63:d2:d6:
34:36:28:48:d0:13:71:fe:23:9a:a4:ff:34:a2:2d:d8:aa:43:
ba:1e:13:76:52:76:1e:cd:97:31:8e:47:1a:b2:db:26:25:c8:
fb:66:9d:a5:bd:9c:f7:54:0a:61:ca:d2:72:e0:2f:87:6d:0e:
15:ac:b1:61:68:2e:69:14:aa:9c:c5:a2:02:57:d1:de:b1:a9:
80:6c:de:82:be:4e:6a:bf:b5:44:81:b9:ae:90:0b:22:42:a4:
19:92:50:73:b2:c5:e9:9a:63:46:de:37:66:52:80:23:4d:4f:
5c:04:bd:a6:8e:0e:28:18:0a:9b:43:ac:2a:16:5b:ae:d3:57:
e5:60:d1:fe:4a:a6:b6:dd:45:4c:91:d8:bc:08:e5:19:c6:6c:
2f:20:18:b1:13:47:76:9d:6a:20:7c:da:89:3a:ae:02:6f:46:
7a:f0:90:9c:a9:eb:66:fe:ce:17:e6:3b:63:6b:20:c8:01:93:
22:d5:18:d6:5b:1c:93:8a:21:54:e1:3a:18:6b:ae:62:c2:14:
13:fc:13:ed:c2:41:82:31:d1:ab:f2:90:61:30:74:51:1e:1b:
ec:3c:dd:6a:23:31:0e:ef:f1:24:34:55:aa:b6:e6:9c:4f:8b:
24:ae:d3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org