Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ImdwitFgIWNODV5c_nioGVrQbNU.roa
File: ImdwitFgIWNODV5c_nioGVrQbNU.roa (raw, json)
Hash identifier: bDbKtn6UikFkazFSWROYXiMs8fTwbIUo5aCxM6QPEAI=
Subject key identifier: 22:67:70:8A:D1:60:21:63:4E:0D:5E:5C:FE:78:A8:19:5A:D0:6C:D5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2829
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ImdwitFgIWNODV5c_nioGVrQbNU.roa
Signing time: Fri 01 Sep 2023 10:05:01 +0000
ROA not before: Fri 01 Sep 2023 10:05:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 2407:4d00:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10281 (0x2829)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2267708AD16021634E0D5E5CFE78A8195AD06CD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:70:99:f3:87:5b:8b:9a:84:07:3f:d5:32:f1:
4a:63:53:e8:c1:63:5d:d2:92:5f:95:6d:7d:ad:88:
c6:b9:d4:42:12:0d:95:87:1b:c1:a6:30:77:a5:e3:
62:c7:35:a5:d7:c4:17:9a:05:7f:aa:e6:92:33:f3:
ec:41:d8:da:0b:01:4f:a6:91:68:49:ab:a2:01:11:
cf:22:07:3f:1f:81:4a:99:ac:05:2c:d4:f8:00:8b:
75:f8:a2:cd:5d:fc:92:c0:fb:8e:b6:60:b4:5e:20:
ff:c1:f0:ce:ed:0f:8b:4d:f5:a9:a9:0d:24:e6:09:
86:ce:18:a3:8a:75:ba:a2:5b:76:8f:fd:54:70:1d:
b9:0a:4b:11:05:58:bc:49:82:8f:66:84:29:67:15:
5e:6a:d0:55:3b:de:b5:48:91:3d:81:e4:91:c6:80:
44:4b:fa:a7:f7:63:dc:96:86:97:5b:66:ba:30:a9:
e9:4c:39:d7:fc:9e:14:fc:50:df:dc:2f:8f:e4:0a:
37:fb:7c:22:a3:34:3f:cf:03:4b:9b:c5:77:1b:d4:
17:db:af:ab:9d:c2:9a:43:9a:e9:f8:93:f0:59:71:
0e:92:6a:9b:47:56:82:e3:08:bc:ac:81:b1:70:54:
97:d7:8d:8d:75:d6:f4:5b:32:e7:64:d7:2b:2d:3b:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:67:70:8A:D1:60:21:63:4E:0D:5E:5C:FE:78:A8:19:5A:D0:6C:D5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ImdwitFgIWNODV5c_nioGVrQbNU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:2000::/36
Signature Algorithm: sha256WithRSAEncryption
12:a2:bd:34:8c:74:44:78:1c:1f:74:44:00:70:db:de:4f:d0:
00:f9:de:bc:69:aa:c7:cd:2b:1d:ac:3d:e9:85:f5:62:b9:1e:
f4:e4:5b:2d:81:f7:0c:2b:f4:c3:55:1d:59:f0:cc:0b:4e:2c:
e3:fa:7a:36:1f:eb:df:e5:cc:81:0a:f4:1f:3d:f4:da:bd:7c:
45:9b:92:ad:f5:29:95:b9:f1:9e:85:1a:93:67:85:6e:20:7f:
61:14:2c:b8:99:39:05:5e:b0:c0:cc:7b:66:53:a4:74:e3:31:
28:2b:3a:80:23:1c:d0:ab:ea:aa:0b:c0:f7:44:ea:a5:dd:89:
49:43:21:6f:d1:1e:a4:db:1f:80:38:f1:74:e4:85:14:16:f3:
2e:83:48:a2:5d:e2:82:32:8e:f9:0d:8a:f7:95:52:55:99:5a:
28:7a:66:82:43:e8:f1:7b:84:80:bb:3f:5a:1f:e6:d8:af:41:
8d:6e:ad:ab:a6:f4:a7:85:98:f3:a9:65:4f:c8:26:47:ee:0f:
2d:40:b5:28:5d:06:a0:b8:32:f8:ec:35:25:4b:cc:44:c2:66:
dd:f0:bd:e1:46:cc:1b:7e:b7:aa:d3:5a:54:dd:aa:60:fc:d4:
17:ed:da:b9:48:d2:72:aa:06:2b:95:ef:7f:3e:ed:10:8f:67:
a1:f3:a3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org