Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BmxESxYvZB0fCbuMuUq9LjelkO4.roa
File: BmxESxYvZB0fCbuMuUq9LjelkO4.roa (raw, json)
Hash identifier: J77WMjmSny5gEbwaqlb8ab5xlFRpIBKuRgi3cAqOBS8=
Subject key identifier: 06:6C:44:4B:16:2F:64:1D:1F:09:BB:8C:B9:4A:BD:2E:37:A5:90:EE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AE0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BmxESxYvZB0fCbuMuUq9LjelkO4.roa
Signing time: Fri 01 Sep 2023 10:08:23 +0000
ROA not before: Fri 01 Sep 2023 10:08:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10976 (0x2ae0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=066C444B162F641D1F09BB8CB94ABD2E37A590EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:12:8c:36:1e:0f:d6:34:3b:1e:41:28:7f:86:
59:2b:73:37:fe:a1:50:a6:ae:dc:90:88:5c:a8:37:
90:6b:8e:8e:d5:a7:98:65:f2:c9:34:52:48:42:53:
f9:d2:a6:fb:70:38:b3:4c:56:25:50:a4:dc:23:db:
a0:f8:2b:6d:71:d0:0f:6c:9c:79:1f:62:7e:25:0f:
c6:bd:10:25:e3:e7:28:95:8f:cc:96:37:89:d1:cd:
f7:54:8c:6d:6c:97:dd:7f:2d:6d:75:a4:af:e3:8f:
71:2a:d5:fc:a4:65:34:5e:3b:a7:16:06:3d:d9:2f:
f6:b2:8e:7b:15:50:4b:6d:bc:12:7a:68:f2:97:35:
b6:5b:0d:b9:bd:eb:34:f2:4c:38:f2:a3:99:a7:ce:
f0:16:65:b9:63:2c:d6:8d:6e:fb:51:a6:80:db:53:
3f:7d:2e:86:5e:fa:d1:70:15:83:b8:27:d5:28:12:
1f:4e:8a:d5:4d:22:eb:fd:fc:00:b3:bb:6c:fa:2e:
96:e4:27:cb:e9:a8:9a:82:09:36:86:5e:92:f6:78:
e5:90:59:1f:34:a4:b3:16:56:95:46:81:12:b9:27:
c2:92:7d:02:40:6f:42:cf:15:4b:35:fd:41:93:11:
a5:bb:f6:51:e0:2f:76:06:30:8c:d0:f7:8b:0f:d2:
2d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6C:44:4B:16:2F:64:1D:1F:09:BB:8C:B9:4A:BD:2E:37:A5:90:EE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BmxESxYvZB0fCbuMuUq9LjelkO4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.244.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:c4:32:da:ae:ee:8e:bb:65:89:9e:48:22:9d:7b:dd:b0:33:
2d:46:53:55:42:8b:ef:e0:0f:fe:8d:f7:cf:be:f7:e7:78:af:
da:89:84:6d:b6:e3:c4:73:73:75:59:12:c4:49:6b:d5:4d:cf:
2c:94:54:fc:f1:8c:9a:5a:9e:47:b4:2e:d6:76:c4:5d:41:c7:
89:ae:79:9c:d7:4b:1c:8a:0d:c7:7a:75:6f:a4:96:62:80:80:
84:b9:13:c4:95:92:54:6c:94:d4:98:66:bf:be:9e:c2:4f:f0:
10:37:9d:fb:5a:cb:c6:d0:14:5d:9c:81:8f:eb:2a:e8:88:a7:
dc:12:13:50:50:58:88:25:98:b9:92:30:2f:39:f8:4c:e2:f2:
78:66:34:ed:17:b1:cf:1e:e4:d9:c5:96:18:09:3f:6e:3e:6b:
cc:6c:33:e5:de:95:dc:fc:f8:79:01:7b:ff:97:49:dc:99:c0:
b7:ba:83:f5:8c:c0:c3:b6:01:d8:95:80:fc:21:78:60:22:13:
9b:79:5d:5f:dc:5d:b8:07:87:f9:f8:06:f9:d6:d3:49:78:fb:
0a:5d:17:47:2b:b6:99:64:89:3a:8c:91:15:72:47:ad:88:3a:
ea:b0:8f:77:5a:90:25:d6:14:e0:25:6c:ea:d1:a7:d7:bd:b5:
4a:c3:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org