Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GrrhUBZ6KRY_XhrMCosoiBICEVo.roa
File: GrrhUBZ6KRY_XhrMCosoiBICEVo.roa (raw, json)
Hash identifier: Ziht+ytMlcZT1oTtq6PTbOAbNsq8FWL6b7wmR8HU0+c=
Subject key identifier: 1A:BA:E1:50:16:7A:29:16:3F:5E:1A:CC:0A:8B:28:88:12:02:11:5A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29DC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GrrhUBZ6KRY_XhrMCosoiBICEVo.roa
Signing time: Fri 01 Sep 2023 10:07:11 +0000
ROA not before: Fri 01 Sep 2023 10:07:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 118.232.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10716 (0x29dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1ABAE150167A29163F5E1ACC0A8B28881202115A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:c8:da:cc:87:16:a6:86:fc:99:99:4f:a1:
eb:98:1d:d8:f7:dd:07:8c:45:f6:80:ad:01:d1:8c:
5b:35:a3:05:c6:78:a9:b5:0a:1b:08:25:92:b3:54:
53:25:47:2f:74:6e:f0:af:30:fc:9e:cd:e0:cc:ce:
03:13:94:d3:ad:45:9c:33:4b:03:e3:2e:61:c4:c0:
d4:61:e0:4d:77:0c:28:41:a1:c2:e6:84:bd:27:41:
5f:8b:57:27:d2:8d:c1:f4:73:24:f3:d0:36:23:0e:
ba:5b:54:24:7b:c6:0b:df:dc:fe:f0:fb:2b:2b:01:
9c:7e:10:ac:7f:a2:a0:c0:32:03:d5:19:91:8c:c5:
26:8a:83:87:eb:85:70:89:83:75:36:5b:a0:5d:40:
ff:f3:89:ad:8a:1b:0c:f6:79:cd:61:9a:f5:b3:07:
45:55:a3:37:a5:e0:f5:05:7c:70:90:65:3a:e2:fe:
ae:79:68:a6:83:c6:d0:4b:55:50:9c:02:9f:81:51:
54:1b:31:bb:5b:48:85:bb:e4:65:3e:e6:eb:9e:e1:
ac:99:3f:14:f4:09:56:94:8c:88:0a:b2:57:ee:89:
4f:49:05:9d:8c:9d:cc:47:35:8a:8b:08:65:d5:59:
22:c3:70:90:67:ac:5b:9f:2e:5f:cd:08:5e:2a:b2:
97:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BA:E1:50:16:7A:29:16:3F:5E:1A:CC:0A:8B:28:88:12:02:11:5A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GrrhUBZ6KRY_XhrMCosoiBICEVo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:01:a3:ea:16:1a:65:61:32:ab:ca:43:bb:62:49:b4:43:95:
a4:2c:75:64:14:28:fa:0d:d8:b5:c0:7f:3c:13:53:8e:23:67:
6a:91:87:40:fe:58:c0:3b:08:42:85:d0:27:e7:aa:dc:8e:32:
8a:bf:47:b2:a4:7d:75:a7:c4:99:24:60:ec:fd:d8:4e:02:1a:
08:4e:d8:6b:01:4d:fb:c1:5d:f8:b6:c4:d4:02:ac:85:e0:91:
ad:20:c3:62:88:00:aa:46:5b:18:a3:22:29:a9:9a:22:b8:9a:
e0:a7:1b:d6:86:69:b0:ba:78:c6:fb:42:88:ea:4f:44:64:32:
d5:94:a6:72:8b:27:43:63:3e:79:4d:67:8d:32:cb:aa:4d:ed:
36:45:b3:26:a0:31:06:71:f8:d3:11:ef:c7:d8:5a:a8:a2:a8:
51:01:4d:d6:8d:80:24:7c:22:7a:9f:08:8a:28:6c:b3:c0:df:
09:3b:42:dc:1d:c2:f2:27:31:71:c3:c6:4a:7f:b1:1b:76:43:
f5:cb:b7:f0:00:46:22:d5:5a:e7:0a:d3:d0:9c:7f:cf:1e:fd:
67:11:5b:a6:f2:cb:af:46:5b:70:a5:22:9f:8c:9a:70:ec:70:
c1:a7:aa:5d:1c:fa:ad:7c:58:33:4a:24:66:68:d0:e1:ec:d7:
af:10:7e:b7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKdwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFBQkFFMTUwMTY3QTI5
MTYzRjVFMUFDQzBBOEIyODg4MTIwMjExNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5IsjazIcWpob8mZlPoeuYHdj33QeMRfaArQHRjFs1owXGeKm1
ChsIJZKzVFMlRy90bvCvMPyezeDMzgMTlNOtRZwzSwPjLmHEwNRh4E13DChBocLm
hL0nQV+LVyfSjcH0cyTz0DYjDrpbVCR7xgvf3P7w+ysrAZx+EKx/oqDAMgPVGZGM
xSaKg4frhXCJg3U2W6BdQP/zia2KGwz2ec1hmvWzB0VVozel4PUFfHCQZTri/q55
aKaDxtBLVVCcAp+BUVQbMbtbSIW75GU+5uue4ayZPxT0CVaUjIgKslfuiU9JBZ2M
ncxHNYqLCGXVWSLDcJBnrFufLl/NCF4qspdPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUGrrhUBZ6KRY/XhrMCosoiBICEVowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0dycmhVQlo2S1JZX1hock1D
b3NvaUJJQ0VWby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ2
6MAwDQYJKoZIhvcNAQELBQADggEBAA0Bo+oWGmVhMqvKQ7tiSbRDlaQsdWQUKPoN
2LXAfzwTU44jZ2qRh0D+WMA7CEKF0CfnqtyOMoq/R7KkfXWnxJkkYOz92E4CGghO
2GsBTfvBXfi2xNQCrIXgka0gw2KIAKpGWxijIimpmiK4muCnG9aGabC6eMb7Qojq
T0RkMtWUpnKLJ0NjPnlNZ40yy6pN7TZFsyagMQZx+NMR78fYWqiiqFEBTdaNgCR8
InqfCIoobLPA3wk7QtwdwvInMXHDxkp/sRt2Q/XLt/AARiLVWucK09Ccf88e/WcR
W6byy69GW3ClIp+MmnDscMGnql0c+q18WDNKJGZo0OHs168Qfrc=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org