Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KnRXA-k08Xou9q_1ZCxKEPTE7CI.roa
File: KnRXA-k08Xou9q_1ZCxKEPTE7CI.roa (raw, json)
Hash identifier: UPu43irllhz2vcqJco1yW5wqMFZ9iWB5oKWvZy3zYNw=
Subject key identifier: 2A:74:57:03:E9:34:F1:7A:2E:F6:AF:F5:64:2C:4A:10:F4:C4:EC:22
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A3D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KnRXA-k08Xou9q_1ZCxKEPTE7CI.roa
Signing time: Fri 01 Sep 2023 10:07:39 +0000
ROA not before: Fri 01 Sep 2023 10:07:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10813 (0x2a3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2A745703E934F17A2EF6AFF5642C4A10F4C4EC22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:d6:9a:b9:51:b4:1d:ce:ca:b5:53:94:18:
9e:8d:01:3d:af:a5:24:5e:26:8f:32:2e:18:61:55:
eb:47:dc:57:88:51:87:20:96:1d:0c:2f:bb:3d:5e:
fb:16:b4:1b:5b:8b:cb:1a:35:66:0d:a9:4c:a9:a0:
13:f0:e4:ad:f5:d4:8a:fc:2c:af:85:c5:1e:cd:8e:
aa:d1:a8:69:d9:a4:da:bb:93:e5:b5:76:36:98:2a:
42:31:04:22:10:d2:06:31:6a:f9:40:0c:ab:38:59:
29:88:18:dd:8e:53:ea:d6:5b:a7:fd:29:d9:2b:ae:
d9:fd:22:ba:04:13:3b:6c:10:d2:64:16:dd:68:2a:
c7:b4:07:51:39:16:d1:67:8e:89:e9:f9:fa:32:3d:
85:dc:30:90:4f:87:63:d0:ce:57:ab:05:c4:b7:8d:
70:12:b7:b6:73:ff:9b:ec:e4:48:c6:e4:a4:2f:43:
01:1d:89:4d:50:db:68:49:67:56:12:ec:d8:14:4c:
91:92:39:b0:44:9c:d1:44:2c:ff:66:50:dc:e2:98:
e0:8e:10:64:f5:c3:dc:18:62:c2:4f:b5:a5:74:ca:
1e:fd:9b:1b:dd:09:41:2e:4f:40:16:79:66:7d:dd:
d0:07:10:ed:58:18:ca:ef:a1:87:11:a6:9d:92:6a:
a6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:57:03:E9:34:F1:7A:2E:F6:AF:F5:64:2C:4A:10:F4:C4:EC:22
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KnRXA-k08Xou9q_1ZCxKEPTE7CI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
25:e6:ee:44:e7:48:21:07:a7:3a:52:04:54:09:fb:5f:f6:d6:
17:5a:ca:3d:cc:05:e5:17:ca:1c:8a:ee:db:5d:3f:de:ad:dc:
8f:02:37:c0:22:d0:05:98:7a:cb:8f:cf:3c:f1:23:fc:1f:31:
da:66:85:06:0a:be:8c:03:8f:75:f3:fe:36:41:ff:68:44:d5:
5f:88:6a:f9:f0:a1:b3:f7:e1:8d:6a:84:d1:89:a1:f3:53:df:
3c:d4:b5:6d:8e:49:c3:2d:94:3b:99:93:bc:0d:54:cf:30:a3:
08:bf:dd:da:9b:81:fd:3a:a0:cb:23:61:7f:a3:28:e0:5a:bb:
e8:6b:c6:b9:79:e3:93:f0:5d:ea:21:51:68:56:55:29:5f:31:
1b:38:56:12:81:da:2a:cd:e7:97:0b:49:57:28:14:58:d4:e4:
90:81:e4:68:86:18:d5:b1:40:f8:27:ce:57:5d:3b:7b:d8:c4:
5c:50:48:8a:3d:0b:f8:03:95:2a:9f:c2:61:f5:57:83:85:f0:
c4:de:c5:62:05:4c:91:e7:cc:17:34:b9:53:e2:d9:6e:08:10:
a9:33:6a:78:a7:43:3e:97:81:4a:40:cc:11:f8:7c:ce:a5:f1:
7c:6b:a0:c7:d7:62:1a:8a:a1:5a:53:87:ed:b6:86:05:eb:ff:
07:2c:2a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org