Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QCJvkcG_g3R029GdfUqOO3pIGwg.roa
File: QCJvkcG_g3R029GdfUqOO3pIGwg.roa (raw, json)
Hash identifier: hiGI6J5pFzCshIvSeX9YN/0p5tpvCzYTmsuWOyhokW8=
Subject key identifier: 40:22:6F:91:C1:BF:83:74:74:DB:D1:9D:7D:4A:8E:3B:7A:48:1B:08
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 280F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QCJvkcG_g3R029GdfUqOO3pIGwg.roa
Signing time: Fri 01 Sep 2023 10:04:53 +0000
ROA not before: Fri 01 Sep 2023 10:04:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10255 (0x280f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=40226F91C1BF837474DBD19D7D4A8E3B7A481B08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0c:02:48:2f:18:1d:d7:21:ed:d8:1e:ba:bd:
c4:72:19:cf:4e:42:90:aa:98:46:34:34:b4:b1:68:
6a:c5:39:50:05:6e:e2:69:01:ea:8e:2d:30:02:17:
70:32:49:1d:04:34:69:46:e0:c7:bf:1b:df:91:37:
73:12:eb:a0:2f:f2:2a:a3:59:e1:fb:f0:bc:e9:25:
69:f5:c7:3b:14:73:21:f6:fb:d3:d4:17:36:6e:1d:
b9:bd:22:63:2e:3d:55:4c:20:1e:f0:5d:fa:16:89:
4d:2e:31:bb:b0:5b:78:93:d3:99:d5:49:68:c6:bb:
be:c1:ec:be:25:ec:b8:78:3f:65:cc:c1:2c:0e:67:
ba:17:d0:5b:22:b5:b0:63:ca:46:6b:d8:19:27:9b:
77:aa:f7:10:63:c6:5b:46:d6:72:24:88:6e:73:62:
16:ce:0b:37:12:52:d7:17:0f:24:97:34:97:7b:68:
33:7e:ae:8f:ca:cb:95:30:b2:43:a7:b6:9e:39:b2:
e4:f7:82:55:7b:b3:c7:53:9f:1f:41:59:ff:6c:75:
e1:a4:d8:ce:41:8d:02:d0:5b:60:d4:1a:ed:33:5c:
90:26:39:58:6f:e9:a8:36:7c:19:9c:33:f3:a9:bb:
43:6a:e2:fe:b4:02:d4:3f:0c:fc:be:39:99:56:fa:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:6F:91:C1:BF:83:74:74:DB:D1:9D:7D:4A:8E:3B:7A:48:1B:08
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QCJvkcG_g3R029GdfUqOO3pIGwg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.32.0/21
Signature Algorithm: sha256WithRSAEncryption
70:45:20:06:52:39:04:bc:3c:90:86:ad:75:71:dc:a6:53:07:
86:35:32:d8:a5:78:c1:28:39:c2:63:af:5e:52:15:40:3d:0c:
cc:7f:0f:bf:98:ee:bb:d4:3e:f1:df:d5:d4:85:bc:8c:dc:60:
a6:3f:b1:85:c4:31:7b:70:95:00:3c:db:9e:d9:6b:fb:f1:c3:
e9:26:4a:36:d9:ff:93:ea:e5:c4:24:3e:c4:ab:cf:4b:d1:d7:
02:aa:4d:d9:3c:02:76:20:5f:09:00:45:b4:be:9c:65:64:91:
cc:d3:0e:66:e8:c2:0e:27:5d:b4:44:e9:87:21:7e:be:c5:56:
65:43:32:a1:69:ef:76:c2:46:07:21:78:12:81:03:87:e2:63:
db:9c:8c:22:58:c0:a8:52:23:93:fc:40:ba:23:39:c1:4c:b9:
49:d3:72:37:dd:0f:9b:ef:2b:3a:3f:fc:dc:a8:a8:13:7f:99:
08:78:07:13:60:20:5a:7d:2f:6a:51:3f:1c:b5:7d:83:6a:71:
77:e8:9e:9c:15:e4:a4:7d:f8:3c:54:3e:50:6e:f3:b4:33:78:
82:50:96:bb:fe:b7:b2:e4:bc:c0:2e:a2:81:ab:fc:56:d3:8b:
bf:2e:c0:bb:1c:dc:e2:38:9e:32:fe:de:49:f6:84:bc:6e:00:
ad:4e:f6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org