Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DzTAJEir9vlbuWQs193yez7d5-c.roa
File: DzTAJEir9vlbuWQs193yez7d5-c.roa (raw, json)
Hash identifier: 9z/KiaOrq74i8kH/ABsxlo/SBJHcOCl/Xj7O7dw2O0I=
Subject key identifier: 0F:34:C0:24:48:AB:F6:F9:5B:B9:64:2C:D7:DD:F2:7B:3E:DD:E7:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2ADE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DzTAJEir9vlbuWQs193yez7d5-c.roa
Signing time: Fri 01 Sep 2023 10:08:23 +0000
ROA not before: Fri 01 Sep 2023 10:08:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10974 (0x2ade)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0F34C02448ABF6F95BB9642CD7DDF27B3EDDE7E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:65:1b:02:43:df:a1:ec:6a:9c:48:73:d3:99:
2a:39:f6:2c:75:db:73:ec:33:a8:87:96:bb:f8:02:
d7:9c:fa:48:fa:42:6a:89:45:d6:1b:de:1c:c0:93:
a1:c5:82:97:89:ab:ef:d0:14:7b:ba:7f:1a:54:d9:
b4:de:ef:80:95:5f:18:58:f1:6e:b8:a2:39:54:a7:
d0:2a:77:d1:36:9b:ac:6a:2e:ab:31:63:0e:7d:f6:
a9:6a:58:19:b9:3d:42:42:4f:b3:03:7d:d6:8e:84:
e4:0f:e3:7f:40:c9:c6:09:26:d8:80:19:8d:a2:de:
63:f7:f5:a6:bf:45:c0:7e:90:59:05:c9:c3:45:77:
b8:68:d3:a1:bf:5b:2b:16:08:73:ef:c5:b9:50:17:
86:7b:10:8c:5a:c4:10:12:14:e0:88:c2:c5:95:97:
63:e3:64:fd:2d:f2:fc:4b:1c:4f:0e:c6:41:4b:15:
f5:81:e1:e7:c6:c8:27:e1:f3:10:30:bc:cf:d0:3a:
f5:1f:00:10:92:36:94:4e:b0:c0:63:9c:0b:da:25:
62:ae:1a:92:af:f0:6f:31:47:d6:b6:45:97:96:a2:
2c:15:86:a5:28:ac:13:bb:fe:c7:f8:2f:a8:fe:39:
c1:ec:4d:c8:dc:8a:f2:d6:40:8f:27:d8:d8:3a:4f:
13:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:34:C0:24:48:AB:F6:F9:5B:B9:64:2C:D7:DD:F2:7B:3E:DD:E7:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DzTAJEir9vlbuWQs193yez7d5-c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.152.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:0b:4d:68:a4:ef:69:b9:ba:2d:d7:b3:d5:0a:df:c9:df:b4:
a8:0e:29:17:8b:ec:5b:32:28:27:70:ac:49:c4:da:24:89:fc:
4f:56:03:5e:67:fc:a9:69:a2:3d:50:7b:1a:8a:a0:f5:02:8f:
29:b3:8e:8f:48:99:9a:4c:33:b2:6d:99:9f:b6:41:8e:76:49:
5b:88:31:57:2e:a1:95:df:c3:23:8b:01:64:2d:8d:d3:b8:26:
79:36:59:e3:f8:97:66:fc:69:e2:e6:fe:4f:52:28:6e:16:03:
c1:76:b8:35:df:d9:ba:ae:35:50:29:d7:ca:de:77:65:ca:e0:
cf:c4:f0:08:ee:56:e0:ad:8d:d4:8f:b7:5f:c0:50:8f:48:02:
9e:db:82:7f:38:c1:83:88:20:fc:12:05:97:5f:ea:8f:7a:5a:
e6:7c:86:6c:e6:63:0a:f2:33:ac:ee:f5:0b:65:18:66:d2:87:
f4:12:13:3c:61:84:02:54:d2:13:92:25:00:66:cc:fe:db:6e:
24:e2:21:31:ab:70:f9:b6:4c:f9:33:1d:de:c2:97:c1:ab:30:
2b:ac:ba:5c:33:af:ff:c5:44:87:3c:54:f5:f8:e3:68:2e:9c:
d3:a2:d1:bb:2e:52:69:d1:15:ec:48:09:90:b1:c0:f3:de:d3:
0f:eb:0e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org