Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O6tIU20aYVGnW_aDSi5lfVFAIX8.roa
File: O6tIU20aYVGnW_aDSi5lfVFAIX8.roa (raw, json)
Hash identifier: 1SRyM+LRqWtg5nc11AhSJsFNAnhp4IicngjgwXNNOWM=
Subject key identifier: 3B:AB:48:53:6D:1A:61:51:A7:5B:F6:83:4A:2E:65:7D:51:40:21:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28FE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O6tIU20aYVGnW_aDSi5lfVFAIX8.roa
Signing time: Fri 01 Sep 2023 10:06:01 +0000
ROA not before: Fri 01 Sep 2023 10:06:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10494 (0x28fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3BAB48536D1A6151A75BF6834A2E657D5140217F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dd:ac:9c:36:51:80:ac:a9:d7:f6:b9:32:36:
e3:04:2c:dd:94:5d:ae:bd:6a:35:1a:08:b5:80:fd:
c6:d2:d9:69:b3:68:2d:90:1b:45:c8:71:8d:2b:16:
f1:8e:5c:1b:30:a1:d9:32:87:94:96:ef:06:e8:b3:
32:f0:31:62:6f:ec:a5:c2:d7:57:a0:ae:df:90:77:
9b:4b:98:d8:14:17:67:07:1f:28:11:c5:3f:0e:87:
23:22:c8:60:92:f3:2d:dc:33:cb:d5:72:ba:01:41:
0e:12:e2:8c:65:da:7b:7c:41:2e:bd:30:04:94:7f:
72:1f:3c:93:a2:6f:78:37:a2:6e:f3:d1:9e:d2:e0:
b1:4a:e9:29:a2:c8:c7:cf:e6:79:a0:f9:ba:f6:95:
e1:a7:99:2d:d6:03:77:9a:b8:69:8d:04:9d:f4:1d:
84:a2:f7:81:f0:94:51:70:e4:41:94:f4:ff:99:5e:
d4:bd:3f:49:e4:20:fd:55:d1:ad:72:ef:59:d6:8f:
25:2c:47:c6:3d:e0:38:14:28:0d:7e:bd:32:b0:b5:
8e:89:b1:08:ad:30:82:9f:72:46:3c:d4:9b:2e:a9:
4a:bd:8e:a7:d3:3f:6c:98:f7:e0:4b:52:29:c6:9f:
16:48:21:66:41:5a:2d:55:90:e8:e5:fb:fe:22:cb:
e5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:48:53:6D:1A:61:51:A7:5B:F6:83:4A:2E:65:7D:51:40:21:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/O6tIU20aYVGnW_aDSi5lfVFAIX8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.76.0/24
Signature Algorithm: sha256WithRSAEncryption
97:44:94:c7:15:2d:70:78:f6:71:66:08:48:3c:a3:29:be:c9:
a2:cc:e0:a2:f4:95:03:b9:a5:bd:e0:ad:ae:19:41:9b:cb:d1:
f1:c1:92:0d:98:e3:43:08:7a:16:79:f7:f9:70:8c:5b:a7:2c:
ca:47:b9:05:5e:96:99:4b:6c:60:5b:53:6d:bf:a5:b8:99:18:
b9:d1:9c:a4:31:6c:50:bf:4c:6c:e5:f7:75:de:6b:fc:20:06:
56:da:0f:3a:61:8c:d4:38:46:24:f7:df:9c:81:38:df:06:f8:
5d:80:ff:11:c5:53:c7:72:aa:31:1c:e0:ec:ad:ea:8d:cb:61:
6c:6c:1a:9a:13:3d:9a:38:e5:a4:48:aa:c6:06:81:c8:d8:b6:
b0:a0:be:b5:92:15:c0:bd:5f:cc:31:48:4c:04:4d:f6:c5:a8:
33:66:39:a4:c9:ad:9c:87:ec:5e:b5:bf:66:a4:85:79:2f:aa:
e1:38:a2:d3:27:2e:60:90:a6:27:db:59:06:d1:f2:7a:3c:2e:
d0:14:a2:f3:f8:75:9d:20:59:86:34:71:2b:e8:cb:77:63:f8:
17:04:e2:ad:dc:af:f4:a8:79:ab:26:7e:b7:53:a9:58:f8:f3:
81:e1:07:7b:22:60:83:15:fa:f0:f4:e2:53:bd:aa:f0:50:60:
b3:20:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org