Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JehXWTuqHT9kqoB-vmo05Q-H_Is.roa
File: JehXWTuqHT9kqoB-vmo05Q-H_Is.roa (raw, json)
Hash identifier: Jn1UEh+ttRM1A2HP6sPsXP804X7L2cWwGqULLC4OCR4=
Subject key identifier: 25:E8:57:59:3B:AA:1D:3F:64:AA:80:7E:BE:6A:34:E5:0F:87:FC:8B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2880
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JehXWTuqHT9kqoB-vmo05Q-H_Is.roa
Signing time: Fri 01 Sep 2023 10:05:24 +0000
ROA not before: Fri 01 Sep 2023 10:05:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.201.64/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10368 (0x2880)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=25E857593BAA1D3F64AA807EBE6A34E50F87FC8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:94:e5:f5:a2:88:9c:0d:20:b9:d5:df:48:8b:
1f:52:9a:d0:f8:e3:7a:19:9b:d6:d3:f6:c9:71:d4:
19:b2:ed:45:57:29:ae:bd:1b:85:b2:07:0e:79:6d:
4f:e8:5d:91:36:55:06:79:b0:ea:0f:08:84:a3:6e:
d0:da:46:07:f3:21:b4:52:e1:b4:77:10:6c:66:d3:
eb:34:d7:0c:c0:9e:9f:99:b4:9c:69:23:72:07:a5:
d8:40:2d:ab:af:fe:d1:e3:61:c0:79:10:48:91:8a:
55:2e:72:00:85:12:03:b9:ed:3b:f5:eb:31:8b:86:
7d:5a:02:93:8d:96:96:f1:36:7e:2d:e2:1f:05:70:
5b:fb:89:59:23:ac:e1:63:2a:27:f0:be:1d:0e:2b:
58:93:b6:d8:f4:b1:de:8b:fe:20:f7:30:1e:89:66:
35:4a:d5:c1:30:37:e6:1e:5f:bf:05:de:15:23:6f:
ce:33:df:a8:34:d6:08:0f:00:48:ce:15:76:43:fa:
11:52:c3:1f:c0:99:e6:c3:8c:b2:76:a6:90:ce:28:
5c:56:61:84:96:c5:16:1c:62:bc:87:bd:67:3e:72:
0c:63:53:04:65:88:b5:60:0d:15:7b:3a:bf:c2:94:
f8:97:be:50:5f:a7:57:5c:34:e5:cf:39:4e:6e:e5:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E8:57:59:3B:AA:1D:3F:64:AA:80:7E:BE:6A:34:E5:0F:87:FC:8B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JehXWTuqHT9kqoB-vmo05Q-H_Is.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.201.64/26
Signature Algorithm: sha256WithRSAEncryption
72:1b:18:dd:63:7d:ec:c0:b4:4f:3f:a7:12:7b:0c:8b:b3:4c:
e1:c1:3a:3d:dc:39:8a:25:1c:2b:b4:5d:18:52:75:34:20:fd:
0c:1c:b5:ab:d3:ee:9f:de:39:52:dd:bf:fb:30:f7:b0:4d:34:
4a:5f:f9:c2:4b:42:38:25:87:b7:fe:48:bc:69:18:7f:c2:81:
ee:4f:01:93:59:2d:cc:d9:69:24:9a:74:23:fb:6f:89:8a:dc:
58:3b:8b:22:87:ee:de:4b:67:3d:7e:50:4e:cd:8d:72:9c:9f:
45:df:c1:e9:fb:b3:1b:ce:33:f4:1b:33:82:b6:f8:e2:a5:22:
15:15:a5:b4:d2:2c:4e:18:f0:b0:69:c4:c9:29:04:52:3b:db:
f6:b2:5d:7f:11:58:a1:46:91:43:13:cd:f0:30:45:20:4e:11:
85:4a:16:e7:c3:57:d8:54:f4:aa:ad:b8:28:46:f4:b1:39:f7:
47:56:5c:3d:a4:55:12:c9:10:88:8d:f5:c3:33:0a:42:03:25:
27:7a:de:05:6d:9e:c5:fe:f4:9b:c5:f5:17:98:7f:ff:72:5f:
8d:f8:7e:93:8b:17:ee:f7:6f:be:ac:ac:37:f4:7a:31:64:9c:
39:b9:2f:08:5e:f0:e5:01:4f:76:14:03:ba:70:8f:86:5e:83:
b5:82:e1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org