Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaqyQ_2QCK6qlhESaHAAp8WJdw.roa
File: RIaqyQ_2QCK6qlhESaHAAp8WJdw.roa (raw, json)
Hash identifier: hlC90jhOEHbjcsy3lBbt0ubnDhVR2zLdPKck0jIZL2Y=
Subject key identifier: 44:86:AA:C9:0F:F6:40:22:BA:AA:58:44:49:A1:C0:02:9F:16:25:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AF6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaqyQ_2QCK6qlhESaHAAp8WJdw.roa
Signing time: Fri 01 Sep 2023 10:08:29 +0000
ROA not before: Fri 01 Sep 2023 10:08:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10998 (0x2af6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4486AAC90FF64022BAAA584449A1C0029F1625DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:c6:14:ac:11:c9:60:95:c3:60:b3:fc:19:
76:1f:5e:0c:44:4d:98:95:d1:f6:c1:97:eb:f9:f1:
6f:10:2a:23:13:92:a2:5b:5d:6f:02:5b:26:41:e1:
3e:02:42:8a:55:7e:3a:9e:98:57:40:ad:fa:a8:46:
8b:5f:15:95:82:fc:bd:1e:5f:3a:44:d4:2b:b0:85:
e8:eb:27:1a:97:4f:61:38:ab:5e:8a:1f:eb:c2:46:
7a:17:3e:08:5d:02:d0:30:58:27:b0:99:0a:04:3d:
13:5e:ed:b4:47:b8:af:80:42:ab:27:f0:73:aa:06:
30:f3:ee:a5:56:37:d9:32:43:06:7a:65:e8:6c:21:
6b:4c:d6:bc:2b:17:5f:b3:00:9c:78:35:c2:5e:1e:
d4:c1:4e:ea:c2:f2:96:c7:9d:a9:28:d0:60:8a:9a:
d9:79:fb:67:7b:0f:ad:50:0d:99:e0:5c:34:8f:3a:
a4:c3:b1:9c:7d:48:59:3e:c9:a7:55:47:c9:a1:29:
1f:89:77:8d:f5:46:6f:04:51:eb:73:6b:59:5a:ba:
63:38:90:2c:b3:18:01:df:6d:bc:eb:72:19:83:9c:
f0:56:ee:8b:26:44:f9:01:53:0d:18:d7:bb:f8:6f:
b3:e5:d6:45:98:fd:78:ea:0a:8f:a9:5c:4c:19:8b:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:86:AA:C9:0F:F6:40:22:BA:AA:58:44:49:A1:C0:02:9F:16:25:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RIaqyQ_2QCK6qlhESaHAAp8WJdw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.122.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:05:f8:34:80:38:97:2e:d2:ca:52:65:d7:31:81:7f:cf:fe:
91:f7:ec:a0:ee:50:8e:e6:2e:18:d5:be:97:6d:bc:6e:8f:f7:
94:68:c9:18:ad:b0:02:57:13:e6:fd:90:b3:61:c8:8e:49:72:
8f:0b:17:07:04:10:ed:14:a6:35:97:ca:b4:f8:ac:8e:b2:dd:
ac:07:28:60:15:87:be:d4:47:27:a6:db:a4:b2:45:64:62:48:
b6:e5:a2:97:db:5f:34:20:f8:2c:3d:ea:78:cb:f3:72:d6:55:
e0:2c:77:e8:46:de:f8:40:f3:a4:99:9c:85:9d:a2:39:1e:70:
e0:3e:39:20:1c:8a:ea:b0:da:b1:a0:af:ba:b9:92:47:64:75:
3b:26:2f:81:9d:bb:64:1a:2b:92:6d:35:8f:ae:eb:df:b8:78:
8c:b3:02:9c:c3:57:e1:53:5a:3a:bd:b6:b1:07:82:20:c8:69:
a8:a4:15:61:da:b8:c0:f3:cc:70:90:d9:9b:10:41:91:be:e3:
b3:bc:1b:d5:8b:25:0f:31:78:6b:fc:85:a1:bb:38:9c:2e:ec:
bc:4f:d8:69:92:37:84:a7:ba:b0:2d:f8:ed:eb:db:c5:7b:15:
a1:1e:3d:c2:bb:c8:99:06:dc:e7:fa:64:31:c9:d2:a8:23:95:
3b:b7:5e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org