Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IDZ7uVBXGJrpzdqWLfjN7fErYvs.roa
File: IDZ7uVBXGJrpzdqWLfjN7fErYvs.roa (raw, json)
Hash identifier: NfGqX6xO9Sy06u12BrFJqEKtNSfZL98HRKMOxIyfcfA=
Subject key identifier: 20:36:7B:B9:50:57:18:9A:E9:CD:DA:96:2D:F8:CD:ED:F1:2B:62:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27F2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IDZ7uVBXGJrpzdqWLfjN7fErYvs.roa
Signing time: Fri 01 Sep 2023 10:04:45 +0000
ROA not before: Fri 01 Sep 2023 10:04:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.113.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10226 (0x27f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=20367BB95057189AE9CDDA962DF8CDEDF12B62FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6d:5a:46:13:d3:eb:d4:d9:f4:ef:d1:1c:af:
1e:3f:af:a2:e4:84:eb:75:39:81:be:e2:f9:ed:3e:
b2:a2:fa:e7:71:09:3a:78:de:e7:b0:8e:44:d8:d4:
45:b2:4b:f6:ba:b2:b2:09:f2:d9:5c:86:c1:44:1a:
f7:42:0b:80:d1:8a:c1:2e:2f:81:0c:a7:e6:8d:fa:
18:cb:19:32:c1:7a:16:35:50:e7:87:b8:57:95:a2:
3b:90:60:19:a5:fc:be:29:f0:5d:b8:91:ce:d7:e5:
6c:5f:d0:7e:76:a9:07:83:48:c0:65:60:5e:11:a7:
42:2b:65:38:b4:f7:40:9c:b5:d4:8c:08:27:51:ce:
4c:f8:1b:b6:fa:96:65:83:cf:67:b2:fc:84:41:cb:
af:3f:50:b9:59:4d:c0:48:64:85:c1:c9:e7:f5:63:
c8:68:6b:3c:e5:a8:0a:e8:87:d8:32:fc:c0:2a:60:
ee:65:47:50:e5:2d:c1:38:61:b8:ee:51:92:02:a4:
66:fe:62:97:62:ea:22:17:bf:d7:af:cb:44:53:bf:
f2:d9:48:a9:d1:01:93:17:92:2b:0c:a9:41:01:6f:
c7:c7:95:5f:76:68:e9:0f:79:ca:9e:c3:9e:80:5a:
15:be:d4:18:95:ed:f7:5f:d4:59:46:e1:77:1f:d4:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:7B:B9:50:57:18:9A:E9:CD:DA:96:2D:F8:CD:ED:F1:2B:62:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IDZ7uVBXGJrpzdqWLfjN7fErYvs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.113.0/25
Signature Algorithm: sha256WithRSAEncryption
ab:9b:c0:65:c8:7f:b7:f7:fc:01:17:3e:3d:0d:32:fa:1a:ed:
99:87:4a:cc:15:01:07:15:61:2d:65:7d:32:e3:36:58:2d:e9:
10:39:7a:52:0f:6e:48:fe:0d:aa:f0:ee:b5:cf:19:e2:ea:b3:
e5:15:78:00:34:c6:e7:57:b6:b4:be:f7:b4:06:ba:fb:1c:c2:
dd:d1:94:be:61:40:d5:54:8e:c0:4a:25:91:5c:8a:ba:b9:ce:
38:a2:61:96:2d:ad:69:b0:46:86:9c:1d:67:de:60:3c:6e:ff:
2f:fe:4b:24:d1:fc:73:ad:76:bb:4e:46:df:49:c7:72:bb:c3:
06:36:95:8e:0a:92:be:0c:ec:f9:60:cf:26:a8:43:b5:6c:5d:
4d:e3:b8:76:c9:ee:2b:32:d7:72:ae:24:f2:43:5f:f2:93:01:
80:08:8e:9f:44:38:43:e7:d5:f0:54:4b:e6:62:86:05:d9:2f:
78:fb:65:54:c0:4a:50:59:6a:d7:60:a0:07:83:39:2b:75:cc:
01:f8:c3:d6:0b:66:97:ca:a7:71:dd:50:34:64:31:e5:13:da:
cb:e4:39:45:22:b6:79:5f:99:c9:86:e0:51:9b:ae:e2:5e:f2:
ce:fb:27:e6:f1:82:4c:e3:0e:d4:a3:41:70:ec:9e:d8:41:45:
fe:62:46:44
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICJ/IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA0NDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIwMzY3QkI5NTA1NzE4
OUFFOUNEREE5NjJERjhDREVERjEyQjYyRkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD6bVpGE9Pr1Nn079Ecrx4/r6LkhOt1OYG+4vntPrKi+udxCTp4
3uewjkTY1EWyS/a6srIJ8tlchsFEGvdCC4DRisEuL4EMp+aN+hjLGTLBehY1UOeH
uFeVojuQYBml/L4p8F24kc7X5Wxf0H52qQeDSMBlYF4Rp0IrZTi090CctdSMCCdR
zkz4G7b6lmWDz2ey/IRBy68/ULlZTcBIZIXByef1Y8hoazzlqAroh9gy/MAqYO5l
R1DlLcE4YbjuUZICpGb+Ypdi6iIXv9evy0RTv/LZSKnRAZMXkisMqUEBb8fHlV92
aOkPecqew56AWhW+1BiV7fdf1FlG4Xcf1Ex9AgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUIDZ7uVBXGJrpzdqWLfjN7fErYvswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lEWjd1VkJYR0pycHpkcVdM
ZmpON2ZFcll2cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THEAMA0GCSqGSIb3DQEBCwUAA4IBAQCrm8BlyH+39/wBFz49DTL6Gu2Zh0rMFQEH
FWEtZX0y4zZYLekQOXpSD25I/g2q8O61zxni6rPlFXgANMbnV7a0vve0Brr7HMLd
0ZS+YUDVVI7ASiWRXIq6uc44omGWLa1psEaGnB1n3mA8bv8v/ksk0fxzrXa7Tkbf
Scdyu8MGNpWOCpK+DOz5YM8mqEO1bF1N47h2ye4rMtdyriTyQ1/ykwGACI6fRDhD
59XwVEvmYoYF2S94+2VUwEpQWWrXYKAHgzkrdcwB+MPWC2aXyqdx3VA0ZDHlE9rL
5DlFIrZ5X5nJhuBRm67iXvLO+yfm8YJM4w7Uo0Fw7J7YQUX+YkZE
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org