Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CvFUkXSbnlqgofN-Hyax6oUHXzA.roa
File: CvFUkXSbnlqgofN-Hyax6oUHXzA.roa (raw, json)
Hash identifier: Yz6+w17Oai+pJb0+Z34obgd8M1CwbEDRn02mdW9ziTk=
Subject key identifier: 0A:F1:54:91:74:9B:9E:5A:A0:A1:F3:7E:1F:26:B1:EA:85:07:5F:30
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2850
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CvFUkXSbnlqgofN-Hyax6oUHXzA.roa
Signing time: Fri 01 Sep 2023 10:05:12 +0000
ROA not before: Fri 01 Sep 2023 10:05:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.120.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10320 (0x2850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0AF15491749B9E5AA0A1F37E1F26B1EA85075F30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c9:68:f8:ee:07:81:45:41:9f:23:68:d4:41:
29:21:1a:17:63:e1:dc:ad:97:df:a3:c5:89:96:5d:
bb:4a:58:15:89:8d:7e:b7:ff:2c:0a:ff:38:f9:d4:
ab:9e:19:d8:4c:62:6c:3d:42:30:33:19:da:69:29:
d4:3c:54:62:ee:0a:ae:27:a4:d3:97:ac:e3:e3:10:
d2:85:f3:4b:6f:53:87:7f:3d:7f:28:85:e0:40:40:
df:56:b1:4f:d2:d5:81:9d:05:e0:a5:67:b4:38:46:
82:4d:45:ee:60:95:e4:0e:0e:b6:24:fd:c8:79:f7:
b2:54:9e:bd:51:58:00:3c:4c:1c:ca:ba:8e:b7:40:
ff:e3:b1:1e:e6:9e:dc:da:52:f1:68:34:be:15:c5:
fa:db:1a:c6:67:ef:47:01:3b:80:56:27:b3:be:55:
f3:87:fa:3b:db:50:23:b1:8f:00:19:80:25:3d:2e:
32:f8:06:c7:69:ca:8d:df:08:c9:05:ea:e3:d8:fb:
9a:66:6b:ae:a4:2a:af:25:f9:7d:cf:a2:f1:7b:2c:
f3:2b:c4:36:12:b4:c6:5a:0b:48:06:e8:56:b0:ab:
f3:72:11:d6:57:4c:9d:19:06:60:74:d4:a3:22:64:
f6:6a:5c:cf:6b:5f:ab:83:a1:2c:e1:94:fe:1e:cb:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F1:54:91:74:9B:9E:5A:A0:A1:F3:7E:1F:26:B1:EA:85:07:5F:30
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CvFUkXSbnlqgofN-Hyax6oUHXzA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.120.128/25
Signature Algorithm: sha256WithRSAEncryption
6a:91:b5:c3:28:81:dd:6e:27:b0:75:44:84:e4:01:a1:c1:45:
06:17:8d:8d:af:0c:1e:c8:ea:e2:8e:b5:41:6c:37:02:29:75:
1c:7f:66:86:14:2a:36:7d:82:69:4b:18:b3:d5:dd:fb:d1:0a:
9f:91:6b:5d:3e:a3:b4:10:2c:6d:3e:7a:52:f2:c1:dc:5a:4e:
27:1c:c3:c0:35:bd:27:44:4a:bd:0a:93:09:70:7c:b0:7d:6d:
bc:79:ad:4c:c0:d6:a0:84:7d:96:ba:c5:76:65:44:76:2f:41:
2d:ed:83:83:9e:4e:99:05:74:51:fe:87:4e:fd:01:72:df:b0:
f0:71:66:fb:67:ea:23:7b:35:d5:d9:6e:2b:c9:cc:6e:33:15:
6c:6a:d5:04:69:61:6e:62:8d:b5:23:e2:0a:7d:8b:7c:33:8b:
02:16:36:0d:4d:a2:ea:99:1c:d8:2c:65:ab:45:6e:68:7c:43:
ee:ac:06:fd:17:6c:15:8d:12:cd:89:b9:5a:f8:23:25:f4:59:
1b:eb:09:1c:1f:08:53:35:51:6d:84:da:30:1f:e9:f1:d5:51:
d0:f6:b7:9a:92:a0:46:f7:d0:04:44:d9:7d:99:98:d2:26:b8:
7f:fa:17:94:59:87:4b:1b:4b:a6:f4:57:ad:74:43:0c:00:4e:
0a:65:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org