Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Hr1UbsJqCxUvAEq1UPR8P54bg8k.roa
File: Hr1UbsJqCxUvAEq1UPR8P54bg8k.roa (raw, json)
Hash identifier: vOCepRedooYeKJYMpXkEF11dfxmqMM/3hOJYB/Ndxys=
Subject key identifier: 1E:BD:54:6E:C2:6A:0B:15:2F:00:4A:B5:50:F4:7C:3F:9E:1B:83:C9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2929
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Hr1UbsJqCxUvAEq1UPR8P54bg8k.roa
Signing time: Fri 01 Sep 2023 10:06:13 +0000
ROA not before: Fri 01 Sep 2023 10:06:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10537 (0x2929)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1EBD546EC26A0B152F004AB550F47C3F9E1B83C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:86:54:3c:78:64:30:29:b9:63:37:ce:9e:f5:
3f:4d:ad:94:98:ae:64:e1:23:07:ee:dd:65:70:b5:
ae:eb:45:c3:ba:b9:f8:f6:6c:3d:47:e1:c7:88:25:
95:6e:97:77:ef:75:14:48:49:37:27:51:56:cf:12:
1c:75:01:54:bd:46:f6:77:36:49:43:2e:ce:06:af:
41:70:7d:59:5b:48:7f:c1:de:8b:22:88:98:e2:4f:
6f:29:0e:91:41:32:c5:9f:a3:be:87:fc:8b:47:f3:
28:ce:fa:4f:bd:a5:73:ac:0c:db:11:87:41:ab:44:
09:26:56:54:3e:5a:f6:4f:39:33:22:26:b9:5f:de:
ba:87:10:d3:fd:86:aa:60:33:c8:22:35:0f:f6:dc:
7f:ba:7a:17:2b:56:1f:d9:a8:93:f9:9a:64:36:25:
25:aa:b9:a1:e9:fd:a2:f5:81:84:06:a8:2c:bb:46:
e7:2a:a8:f2:bd:fa:43:7c:a6:46:0d:3e:df:35:56:
61:4e:96:37:7c:71:81:7d:ea:24:19:43:4c:aa:9c:
68:72:46:92:f1:50:cb:02:07:b1:5b:f5:c7:9f:ad:
a7:92:b4:47:ca:89:f7:e4:05:1e:7c:89:46:f7:11:
35:9e:ae:c2:b6:2d:bc:ec:5c:5e:ed:4c:bd:a1:92:
73:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BD:54:6E:C2:6A:0B:15:2F:00:4A:B5:50:F4:7C:3F:9E:1B:83:C9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Hr1UbsJqCxUvAEq1UPR8P54bg8k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.224.0/21
Signature Algorithm: sha256WithRSAEncryption
26:ea:96:d0:0b:0d:13:f0:69:6d:b0:f0:99:e6:60:fe:37:6f:
94:ff:9a:a5:12:5a:53:d2:12:ac:28:f8:77:6b:9d:d2:4c:f8:
40:ae:0f:2c:1d:36:05:79:cd:78:f1:13:40:68:30:dc:17:f3:
70:69:29:1c:07:d1:61:14:6d:72:98:97:ff:69:c3:24:e8:2d:
b0:2f:93:80:a8:62:24:51:1f:af:e8:25:87:cc:7a:64:c9:f6:
ca:f9:ba:27:85:c2:36:98:da:ff:d3:0b:18:c9:aa:95:04:a3:
ad:17:5f:5b:16:c5:87:24:43:75:56:61:e4:b7:7d:34:86:36:
39:42:d3:4d:9c:cf:58:9c:4b:78:a6:ce:36:8f:1c:e8:8e:7e:
9c:16:33:ae:4b:45:2f:95:b9:bb:2a:4e:50:08:4f:57:6f:cc:
d5:f9:c8:ea:d6:db:3d:df:bb:47:ca:24:08:4e:b4:20:71:ca:
8c:09:c1:46:a5:ff:cc:9b:76:f7:7b:26:9d:c1:af:e6:9d:f4:
13:ed:67:75:90:37:5e:3b:44:c7:f0:0e:00:97:0e:fb:7a:46:
5c:f2:71:2a:c9:6e:bf:a1:c7:25:c2:3c:85:00:6f:46:7f:67:
66:fd:00:58:fc:e1:86:b4:e2:30:9a:27:f4:6c:5e:d3:9e:c5:
eb:8d:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org