Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dqbkh6C2ebXFbvib9akSkqh2GDQ.roa
File: Dqbkh6C2ebXFbvib9akSkqh2GDQ.roa (raw, json)
Hash identifier: QcKRSoOifwC/7GagnlsR54hifHXmuXqtgZf5Sv9TisU=
Subject key identifier: 0E:A6:E4:87:A0:B6:79:B5:C5:6E:F8:9B:F5:A9:12:92:A8:76:18:34
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 284C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dqbkh6C2ebXFbvib9akSkqh2GDQ.roa
Signing time: Fri 01 Sep 2023 10:05:10 +0000
ROA not before: Fri 01 Sep 2023 10:05:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10316 (0x284c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0EA6E487A0B679B5C56EF89BF5A91292A8761834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:ba:84:5d:a8:8d:b6:11:84:b1:60:85:c1:
ff:a4:a6:c8:d8:5b:fe:c5:1e:83:3e:cb:c0:d0:af:
ad:d3:40:68:87:c9:0b:c0:92:4d:3c:6a:c8:3b:fb:
96:47:2c:1b:74:50:e1:1c:ef:18:32:e3:45:48:34:
12:7e:5c:a0:24:be:ce:b9:94:3a:94:82:47:10:14:
f5:84:c0:92:b1:48:b4:98:0a:6a:08:ed:d5:fa:05:
ad:3c:a6:b3:c4:f4:d6:e8:9e:9a:3a:d4:b7:87:c8:
2a:e0:64:12:87:ee:38:05:21:a5:8b:15:39:a3:9b:
c2:94:c2:ec:e9:65:e4:36:25:4f:9b:ff:63:89:0e:
01:88:f3:e5:72:03:9c:74:b7:0f:07:da:cc:80:10:
89:b4:41:d0:8d:c5:c6:b8:26:22:64:38:a0:36:60:
9c:85:cc:d6:ff:df:e6:60:3f:e3:9b:bd:69:0c:50:
df:e1:7c:7a:c5:9e:37:ce:ca:1f:fe:c2:fb:9b:00:
06:41:4b:14:25:c8:39:34:15:cc:dd:13:61:1e:2a:
8c:e8:6e:09:c1:b3:b8:cb:14:0c:0a:ad:c7:74:87:
48:c9:6b:07:6f:90:50:72:72:fe:7b:a0:c1:38:fb:
28:a0:c3:8c:7f:df:1f:3f:1a:2e:98:91:06:f3:84:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A6:E4:87:A0:B6:79:B5:C5:6E:F8:9B:F5:A9:12:92:A8:76:18:34
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dqbkh6C2ebXFbvib9akSkqh2GDQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.172.0/22
Signature Algorithm: sha256WithRSAEncryption
07:b0:1a:84:a3:16:bc:78:7c:c3:d4:27:33:f8:c4:80:03:7e:
19:7f:1a:8b:8c:97:f7:53:f3:a0:2f:d3:2e:c2:49:65:3b:ac:
b1:e1:a3:46:95:ba:3e:a5:11:66:17:89:9a:54:5c:16:ca:fb:
d4:0b:98:c2:33:ba:1c:4a:36:37:c2:ca:ec:90:4e:eb:0b:2b:
69:9a:dc:87:90:5f:2d:a9:4c:2e:30:ab:c0:5e:02:25:fe:38:
c2:b7:5a:cd:75:f4:c4:9b:31:34:91:0b:e4:4f:a9:ac:33:b3:
76:7a:60:cc:1a:2a:d2:9f:3b:a8:2d:bb:9f:e4:96:4e:fe:54:
98:77:d8:84:ea:cf:32:34:24:c0:5d:49:6b:c4:ea:f1:70:84:
bb:22:e4:e5:3d:ed:2b:7b:09:95:f1:ef:51:4f:5d:ef:6d:61:
8a:a1:b8:94:7c:82:07:0c:dc:f6:e7:d9:ff:5a:22:5a:dc:33:
4c:25:c8:72:3a:54:2a:5b:21:38:1d:97:32:42:f6:99:e3:a4:
9d:79:ce:26:82:ac:d6:aa:c2:cd:f5:ab:1e:a2:6b:31:7e:b2:
9e:35:71:99:ad:2f:70:f8:c9:09:29:43:28:b8:71:7b:05:0f:
f0:1e:95:18:80:15:c5:90:ee:41:7a:c4:c6:cf:93:0f:9a:df:
21:56:ca:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org