Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HUK35eg7IhWh--4bGUB_f5e-IqA.roa
File: HUK35eg7IhWh--4bGUB_f5e-IqA.roa (raw, json)
Hash identifier: mZPgj4hHkz9hR9NktQg+qu8INhXWMiEDZI08VByCNUU=
Subject key identifier: 1D:42:B7:E5:E8:3B:22:15:A1:FB:EE:1B:19:40:7F:7F:97:BE:22:A0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2852
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HUK35eg7IhWh--4bGUB_f5e-IqA.roa
Signing time: Fri 01 Sep 2023 10:05:12 +0000
ROA not before: Fri 01 Sep 2023 10:05:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10322 (0x2852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1D42B7E5E83B2215A1FBEE1B19407F7F97BE22A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:07:d9:57:48:a3:75:56:72:04:05:fe:01:cc:
86:37:de:02:41:05:f9:1c:37:48:ed:7a:90:2c:23:
c8:16:de:36:c6:db:0d:16:d4:9d:55:ef:e1:a0:71:
a7:fe:ea:66:bf:89:e3:2c:89:f0:69:d4:69:54:66:
84:a5:df:ae:ad:d9:c3:85:65:66:4d:0f:14:f0:11:
21:de:be:c2:5f:f9:4d:b3:2a:00:a8:dc:41:8d:2b:
e3:7f:dd:10:29:34:62:78:f6:4c:c1:f4:63:2b:4d:
79:b6:ca:2b:c1:7f:fe:72:96:05:f4:67:88:61:45:
3c:1c:c2:58:9a:d3:de:f9:c4:b5:88:8f:bc:a1:68:
79:80:07:27:b8:d6:44:13:f3:16:19:f3:bc:46:ac:
1e:25:45:b6:57:06:ae:c2:e6:4f:2e:8d:c5:f9:e3:
5a:d2:67:a9:fc:2e:a9:25:0b:ed:a9:c2:0f:00:af:
f4:f5:b9:29:0e:a4:2e:2b:6e:0c:69:74:f9:f3:70:
83:ad:f9:64:34:fe:6b:f0:7d:7f:71:c5:60:9f:01:
0d:8a:79:7c:1f:fb:79:6b:65:74:6a:39:ce:59:5b:
73:63:2c:df:8d:c2:25:9a:fe:1e:7a:dc:4c:dd:58:
e7:39:a8:a0:aa:70:07:e8:76:c7:38:93:08:b5:f7:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:B7:E5:E8:3B:22:15:A1:FB:EE:1B:19:40:7F:7F:97:BE:22:A0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HUK35eg7IhWh--4bGUB_f5e-IqA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.80.0/21
Signature Algorithm: sha256WithRSAEncryption
14:b4:b3:16:14:be:83:30:e1:ed:1c:dd:69:79:f5:5f:c8:60:
0f:59:2d:d6:35:12:a8:23:72:22:cb:5c:ac:f9:8e:d2:ad:d6:
51:35:b5:c4:ef:38:77:d5:67:12:f1:16:de:21:55:86:5d:2c:
c7:a4:60:02:ec:12:57:35:5f:0b:07:a3:28:59:8e:e2:e4:1b:
92:9a:5c:41:c0:ce:b6:2c:42:72:fc:4e:a2:32:b7:d0:9b:33:
52:15:a1:0b:73:f2:a1:01:5e:ee:22:e5:56:e2:c4:17:ca:29:
f0:8c:7d:2c:ac:81:cb:85:e7:e3:df:38:b6:02:d5:29:d6:af:
47:e3:88:8e:9f:0e:c9:31:e2:fa:7b:94:08:ac:87:ed:d7:53:
49:fc:7e:11:81:be:ba:85:5c:4b:a9:8a:f1:55:95:5b:10:89:
4e:f8:53:c9:0f:4f:28:fa:92:0c:aa:c1:a6:84:43:1b:ec:88:
b6:87:65:e9:2f:14:14:cb:43:93:66:16:da:09:ad:fc:50:13:
37:17:f2:f7:f1:0d:4f:3d:7a:1a:22:f3:72:cb:a7:7a:a7:b9:
0e:6a:c2:fa:b8:90:5f:a0:08:fa:d8:5f:b2:1f:96:3a:7a:60:
88:54:0d:25:8d:16:27:d5:03:e4:a0:53:51:2e:ea:ec:6b:77:
6e:5e:5f:f8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKFIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFENDJCN0U1RTgzQjIy
MTVBMUZCRUUxQjE5NDA3RjdGOTdCRTIyQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+B9lXSKN1VnIEBf4BzIY33gJBBfkcN0jtepAsI8gW3jbG2w0W
1J1V7+Ggcaf+6ma/ieMsifBp1GlUZoSl366t2cOFZWZNDxTwESHevsJf+U2zKgCo
3EGNK+N/3RApNGJ49kzB9GMrTXm2yivBf/5ylgX0Z4hhRTwcwlia0975xLWIj7yh
aHmABye41kQT8xYZ87xGrB4lRbZXBq7C5k8ujcX541rSZ6n8LqklC+2pwg8Ar/T1
uSkOpC4rbgxpdPnzcIOt+WQ0/mvwfX9xxWCfAQ2KeXwf+3lrZXRqOc5ZW3NjLN+N
wiWa/h563EzdWOc5qKCqcAfodsc4kwi19xgnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHUK35eg7IhWh++4bGUB/f5e+IqAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hVSzM1ZWc3SWhXaC0tNGJH
VUJfZjVlLUlxQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6FAwDQYJKoZIhvcNAQELBQADggEBABS0sxYUvoMw4e0c3Wl59V/IYA9ZLdY1Eqgj
ciLLXKz5jtKt1lE1tcTvOHfVZxLxFt4hVYZdLMekYALsElc1XwsHoyhZjuLkG5Ka
XEHAzrYsQnL8TqIyt9CbM1IVoQtz8qEBXu4i5VbixBfKKfCMfSysgcuF5+PfOLYC
1SnWr0fjiI6fDskx4vp7lAish+3XU0n8fhGBvrqFXEupivFVlVsQiU74U8kPTyj6
kgyqwaaEQxvsiLaHZekvFBTLQ5NmFtoJrfxQEzcX8vfxDU89ehoi83LLp3qnuQ5q
wvq4kF+gCPrYX7Ifljp6YIhUDSWNFifVA+SgU1Eu6uxrd25eX/g=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org