Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFuTENVptaq_IRInkxweBlhyUy0.roa
File: OFuTENVptaq_IRInkxweBlhyUy0.roa (raw, json)
Hash identifier: SujLUAX/7cha/0Olt/GbhzpzrrY90oGxaXSpPGwKJko=
Subject key identifier: 38:5B:93:10:D5:69:B5:AA:BF:21:12:27:93:1C:1E:06:58:72:53:2D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2993
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFuTENVptaq_IRInkxweBlhyUy0.roa
Signing time: Fri 01 Sep 2023 10:06:47 +0000
ROA not before: Fri 01 Sep 2023 10:06:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10643 (0x2993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=385B9310D569B5AABF211227931C1E065872532D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d7:a8:b0:87:67:40:de:fe:69:33:77:91:43:
47:a8:80:23:78:29:8c:e4:e9:3e:13:98:f9:e8:11:
63:4b:65:09:0e:3b:0b:e3:fa:76:0f:4b:ee:95:d2:
46:1c:c2:9f:0f:61:7e:13:a4:7b:4f:1a:01:d7:24:
d6:78:bc:a0:83:47:a5:78:31:00:01:94:89:2f:da:
f5:82:c3:01:fd:d6:dd:10:32:c8:74:e5:20:4f:7e:
49:59:67:7c:60:9a:f0:77:4b:b3:58:2c:02:23:95:
50:7e:5c:29:63:cd:25:df:a5:a9:b1:24:9c:d6:33:
51:90:f0:b5:e4:e5:58:8f:f6:a4:db:d2:74:d6:19:
21:b9:b9:e3:bc:20:36:ea:4d:b8:9e:fe:5a:80:29:
e0:bd:fb:9e:52:01:2e:49:4a:c9:e0:24:58:64:f8:
e6:af:6d:b3:e4:15:ee:bb:ed:52:b2:fe:e5:cf:c3:
40:60:06:8c:3e:bb:96:4a:0d:59:6b:8f:03:de:5c:
b4:10:17:23:b5:ea:93:9a:bd:07:8e:e0:db:ae:63:
fd:70:cf:a1:6d:e0:ff:49:e7:ad:17:9a:05:41:8c:
f8:39:04:ee:dd:50:c2:5a:b3:28:5d:8b:09:60:b3:
af:b1:74:7e:f4:29:26:98:4e:87:34:61:d6:f1:e0:
f2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5B:93:10:D5:69:B5:AA:BF:21:12:27:93:1C:1E:06:58:72:53:2D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/OFuTENVptaq_IRInkxweBlhyUy0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:df:a2:2d:6e:e2:f6:5e:1c:24:04:a8:82:f8:1e:a2:c5:b0:
b7:58:e7:d2:ca:37:23:12:32:f6:ad:d3:2e:9a:15:62:bc:03:
89:aa:fb:1e:13:98:d0:bc:ef:5e:a6:32:e7:37:0c:a9:9b:0a:
4e:ca:78:a3:0d:d6:69:fa:5e:01:15:0c:e0:a9:c9:38:52:42:
a8:ba:94:80:26:f5:dc:15:f0:18:dc:87:2c:aa:01:e5:e8:11:
6a:2c:39:40:0d:23:73:bd:35:5e:62:ff:ef:71:99:2f:b6:5c:
22:61:d8:53:7e:94:39:2f:af:0c:72:29:22:ec:ad:ef:95:00:
ba:b0:c0:91:f9:51:9d:58:08:29:cf:41:f4:dc:08:0b:83:9b:
e9:48:61:8d:f2:6f:07:44:ce:64:f0:fc:3f:cc:fa:28:7e:ea:
94:29:7e:55:10:a1:3f:58:ec:0c:64:cc:a8:cb:92:2a:7c:51:
55:60:32:19:97:d7:1c:0a:6c:b6:07:66:ff:19:5b:8a:aa:6b:
32:9e:fd:99:00:63:59:da:cf:e1:7b:6b:19:89:bf:f7:41:1d:
ad:ab:e4:a8:38:04:53:87:9d:98:66:ee:d3:54:98:a0:c4:cb:
65:a4:5f:a3:c5:07:e2:40:82:78:cb:00:44:7a:b4:47:7c:f2:
4f:d8:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org