Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q-uePJQw0yD6Nr42WJFpps7z594.roa
File: Q-uePJQw0yD6Nr42WJFpps7z594.roa (raw, json)
Hash identifier: qgpJ5YCpvjkENX1FnLzjdJ9jIcyjJWW34wPioUBlydE=
Subject key identifier: 43:EB:9E:3C:94:30:D3:20:FA:36:BE:36:58:91:69:A6:CE:F3:E7:DE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28EE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q-uePJQw0yD6Nr42WJFpps7z594.roa
Signing time: Fri 01 Sep 2023 10:05:56 +0000
ROA not before: Fri 01 Sep 2023 10:05:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 211.76.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10478 (0x28ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=43EB9E3C9430D320FA36BE36589169A6CEF3E7DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:1b:ed:f6:a9:ad:50:e7:a7:38:65:71:7b:
16:c3:fc:cb:15:1a:9a:c0:43:0b:ac:13:5b:f5:e8:
2e:ed:76:9a:6d:da:25:8e:a6:8f:94:6a:bd:52:7d:
f0:11:08:15:2f:07:e7:ad:98:b3:e6:31:01:7c:99:
81:81:30:63:6a:1c:92:49:7c:4d:8b:2d:22:00:ab:
61:b7:c1:6d:19:83:ce:ed:ea:65:ae:e2:c5:1e:e3:
3b:c7:eb:d3:58:b0:c5:26:69:47:00:29:0a:83:a1:
be:ea:ef:c0:86:17:0e:5d:98:88:11:70:13:6e:6d:
22:f6:e2:cb:65:59:35:95:48:6c:b2:1a:00:b9:25:
f1:5f:d6:76:30:26:23:db:ae:3a:08:93:16:52:59:
d7:fa:e2:e0:24:d9:b1:dc:86:1b:37:a0:0a:0c:96:
19:91:22:be:33:2d:b3:ee:2f:41:d1:9e:7c:60:1f:
f1:a8:e5:22:e4:c5:3d:34:3d:a6:5a:8c:48:a5:a3:
7f:c7:22:80:55:e3:c2:21:90:23:f6:c5:59:22:36:
72:b5:de:c0:1f:41:04:21:4d:88:4b:56:af:c3:f7:
11:bc:af:15:82:35:7d:4b:df:1b:52:09:18:f6:6c:
c5:01:ef:0a:b2:81:ca:06:e5:85:59:80:aa:60:7a:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EB:9E:3C:94:30:D3:20:FA:36:BE:36:58:91:69:A6:CE:F3:E7:DE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Q-uePJQw0yD6Nr42WJFpps7z594.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:57:25:3a:5f:eb:d1:9f:65:01:a2:a8:f6:2a:57:5b:0b:eb:
ca:ef:16:a4:5d:4e:66:e1:b3:f2:cc:9e:da:ed:c6:7b:28:d7:
7b:1b:1e:24:f9:2d:f3:f5:5c:fa:21:20:87:0a:1b:89:2a:67:
f3:78:1b:9c:28:e1:ef:ac:9a:c8:1a:77:9d:7b:b9:b9:9f:05:
d2:cc:00:cf:2f:0e:7e:10:24:93:17:0f:c4:e0:fc:14:56:82:
7d:3d:bf:39:e2:00:98:10:6b:6f:c9:3d:46:4d:6a:09:f2:8e:
2d:69:51:df:7a:91:e8:63:e2:fe:86:df:44:6c:91:2f:a8:87:
a1:4d:da:ac:39:72:9b:b8:ee:57:ce:53:f8:72:70:df:3b:f2:
6b:d3:72:80:a3:3f:80:31:97:a9:a0:5a:c3:e1:86:8b:7c:e2:
57:46:e2:29:cb:2f:53:72:32:c8:98:60:bd:c7:19:45:b3:16:
4d:2a:4a:c7:fa:3a:61:8a:f2:6d:59:4b:75:e3:ca:1c:b6:6a:
09:63:75:87:72:84:69:ee:1b:a8:ea:f0:55:8a:a0:5c:08:a5:
53:d2:84:6c:a8:c0:37:53:37:90:5d:c1:7c:e4:12:38:ce:e2:
61:22:34:7a:b3:f4:a9:e6:1b:85:90:0c:d1:e8:28:a0:4e:ed:
3f:66:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org