Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FEVjCWWwY5lTiW3Lge0iVHkKZ6o.roa
File: FEVjCWWwY5lTiW3Lge0iVHkKZ6o.roa (raw, json)
Hash identifier: gH5TserYCnDTU3QAoKxEq6DoxIuXt8I3gcXDRKzfO08=
Subject key identifier: 14:45:63:09:65:B0:63:99:53:89:6D:CB:81:ED:22:54:79:0A:67:AA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A9F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FEVjCWWwY5lTiW3Lge0iVHkKZ6o.roa
Signing time: Fri 01 Sep 2023 10:08:06 +0000
ROA not before: Fri 01 Sep 2023 10:08:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10911 (0x2a9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1445630965B0639953896DCB81ED2254790A67AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:0e:e8:2a:02:c8:21:63:d3:4c:7b:67:ad:
ba:89:90:cf:91:c9:48:fa:b8:00:86:dc:0b:96:21:
e8:89:be:93:00:00:20:c7:ce:ff:03:18:5f:ef:f9:
eb:72:de:d2:40:73:59:a7:35:00:37:90:fe:df:9b:
b8:67:df:ea:cf:b9:9b:80:c4:d9:85:6d:6f:19:99:
e7:0c:0c:12:e6:9f:cc:c9:83:97:83:ee:ff:48:b5:
dd:2d:54:cf:3d:1f:3c:f9:f1:aa:9c:97:e4:6d:8e:
2d:6a:f5:ec:fd:69:6d:7d:b8:82:81:3b:c4:9e:ba:
23:83:7c:3f:75:ac:3a:c3:a3:16:bf:22:c0:0c:58:
61:66:8c:13:a1:b3:dc:3f:4b:b9:ef:02:cd:4a:5f:
5a:19:aa:59:49:45:42:98:6e:48:23:bb:c2:8d:7b:
03:bd:26:f4:29:9b:4a:c4:70:4a:bb:f2:97:64:07:
1c:4d:df:6e:ce:ac:a0:d6:ad:4a:9f:2e:75:12:9d:
a8:11:5f:52:5d:25:bd:ca:c8:7a:53:b6:3f:ad:bd:
79:88:66:4e:61:54:06:fd:42:77:55:5a:15:f0:b4:
6a:fb:08:86:e6:8f:ca:52:9e:f0:8c:aa:00:49:9e:
9c:e9:53:cd:97:bb:8e:62:b0:16:a2:68:0a:d8:1c:
25:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:63:09:65:B0:63:99:53:89:6D:CB:81:ED:22:54:79:0A:67:AA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/FEVjCWWwY5lTiW3Lge0iVHkKZ6o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.252.0/22
Signature Algorithm: sha256WithRSAEncryption
95:c4:a8:8b:22:93:2b:96:b0:f3:18:62:2e:98:56:a3:6a:94:
05:c7:d9:fd:21:cc:da:4f:ab:9a:6a:c0:33:dd:b4:65:41:e5:
8f:e3:33:00:18:d8:50:a1:91:38:57:20:aa:3b:90:50:fb:cf:
34:b3:69:98:bc:7d:d8:24:90:27:f6:df:bf:f0:24:53:53:bf:
a0:8a:7b:b0:d7:f2:8e:60:8d:8f:9f:a0:e6:9c:45:28:b7:1c:
5b:e8:09:09:7a:45:8f:34:90:a3:2a:71:ab:0b:84:48:51:11:
e5:61:5b:05:ff:bc:b1:95:54:18:91:cf:9b:d6:3b:f3:c6:88:
25:d8:49:7e:af:8c:8f:5e:a0:ed:ad:c6:47:3b:f3:b4:ae:75:
a5:45:a0:a8:34:23:07:e0:f2:f6:ff:91:e3:a4:ca:90:7f:76:
2b:16:36:fa:20:c1:86:67:e4:43:10:8b:bd:a8:e4:d7:de:5f:
9f:2c:8b:87:6f:43:f6:55:ab:62:27:a8:7b:aa:71:2e:cf:76:
b6:6c:d2:46:f0:45:67:71:7f:0b:ec:a7:39:84:2b:1d:b1:62:
65:62:66:ea:5b:1a:9f:c7:c3:b6:58:f7:80:84:51:49:2c:e4:
88:14:a7:72:fb:2d:95:4d:c0:29:09:3b:c4:d5:aa:a4:65:70:
20:25:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org