Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cn9k9O0kW1uk8r11FmQ8u66QcEA.roa
File: Cn9k9O0kW1uk8r11FmQ8u66QcEA.roa (raw, json)
Hash identifier: 07xnX2g3EkSJJQSfykF9v+uBnQObB75PERu76y2wxzc=
Subject key identifier: 0A:7F:64:F4:ED:24:5B:5B:A4:F2:BD:75:16:64:3C:BB:AE:90:70:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2835
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cn9k9O0kW1uk8r11FmQ8u66QcEA.roa
Signing time: Fri 01 Sep 2023 10:05:04 +0000
ROA not before: Fri 01 Sep 2023 10:05:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.118.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10293 (0x2835)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0A7F64F4ED245B5BA4F2BD7516643CBBAE907040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:96:cf:0b:e2:ae:9c:78:ac:b0:ca:31:24:d9:
c4:b7:45:c7:f8:fb:a5:a1:ba:a4:51:dd:55:84:a8:
95:0c:07:3e:c0:1a:af:8b:23:ea:fa:e0:c4:09:b3:
f7:a8:b8:0a:e2:d7:bf:95:2e:f4:c2:ee:0a:13:8a:
fe:9e:1a:7c:4b:4c:af:e0:b5:c7:2b:8e:da:fa:3d:
d4:90:e3:7c:e1:89:f3:ce:7f:e2:41:2b:60:e1:5f:
2a:8f:13:bd:f9:c8:fb:10:62:9d:ff:a5:50:75:f3:
76:cd:dc:1e:d6:76:70:d1:f5:ee:bb:d6:df:5d:e3:
51:07:f6:55:86:b7:3f:41:49:d7:54:87:7a:16:95:
93:3e:ff:77:05:5a:92:27:2d:09:fa:ac:1e:fd:fa:
30:ee:ce:d9:24:d7:5c:39:06:17:24:0e:97:1d:dd:
a4:da:fc:2b:96:8e:e7:ae:90:c2:b3:21:98:69:6d:
d4:6b:87:4a:41:cf:23:e1:d8:ea:43:20:45:84:0d:
07:2a:b4:3f:90:64:e5:d7:9e:20:8b:59:53:a9:06:
84:45:f1:01:f0:ae:00:a2:ce:b0:02:27:30:5e:ab:
6e:c6:5c:54:24:45:5f:9a:45:a9:ce:0b:fe:35:43:
48:25:1e:59:4f:2c:84:f7:23:a6:c3:52:b2:21:42:
01:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:64:F4:ED:24:5B:5B:A4:F2:BD:75:16:64:3C:BB:AE:90:70:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Cn9k9O0kW1uk8r11FmQ8u66QcEA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.118.0/23
Signature Algorithm: sha256WithRSAEncryption
94:ba:e2:5b:a8:a9:30:b7:83:80:f6:23:0b:56:d5:c4:37:fb:
ad:15:99:fd:a4:92:35:7b:9a:a8:e2:fd:86:35:0f:d6:22:b7:
2e:b8:22:46:23:37:b8:43:4f:93:0f:48:35:be:42:7d:00:8b:
d8:ec:e6:f0:6f:9d:c5:38:f2:2b:65:ac:15:eb:ef:c5:1b:ec:
7a:6c:2c:ef:22:c5:3e:40:34:16:ad:d3:a7:c6:bd:a8:ef:91:
1a:7b:97:9f:44:e6:e0:2d:5d:42:3c:e6:d8:8d:e3:68:1a:28:
5c:f3:e6:42:71:1b:a2:bb:98:20:08:36:dc:11:9c:79:d9:7e:
14:f5:84:ee:33:ea:97:7b:3a:55:50:32:4c:79:5d:85:cd:43:
8a:e2:4a:66:98:58:66:73:da:15:c6:ad:e8:00:16:02:8b:c1:
21:2a:3a:79:44:e4:68:77:d1:6b:cf:ea:73:d9:67:3c:3e:be:
9a:59:77:1c:82:9a:b9:1d:e2:aa:e8:a4:f8:85:1a:95:c9:38:
5e:1b:8b:ac:10:28:d1:dc:61:cf:ec:b9:35:50:93:94:ac:f5:
9c:a7:5d:16:b2:cb:2a:6c:f9:67:17:5b:b5:46:34:ae:d5:68:
45:1e:74:4b:1e:70:4d:69:b0:3b:38:54:14:24:ad:99:e9:76:
c0:c5:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org