Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rd4KLKber7AG83sR432HwsOxDOw.roa
File: Rd4KLKber7AG83sR432HwsOxDOw.roa (raw, json)
Hash identifier: PHH4pAU/UGgExniH96uj8y6jKC0w268Ru6bYKjLtEWU=
Subject key identifier: 45:DE:0A:2C:A6:DE:AF:B0:06:F3:7B:11:E3:7D:87:C2:C3:B1:0C:EC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29BE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rd4KLKber7AG83sR432HwsOxDOw.roa
Signing time: Fri 01 Sep 2023 10:07:01 +0000
ROA not before: Fri 01 Sep 2023 10:07:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10686 (0x29be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=45DE0A2CA6DEAFB006F37B11E37D87C2C3B10CEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:92:a7:50:a1:c0:40:ae:67:9f:99:3c:74:
7b:f7:d5:55:ae:58:6a:b6:d1:88:a0:c9:b4:9a:c9:
b3:14:bc:fe:eb:b4:22:a7:01:7d:f0:e9:ac:d2:dc:
0b:ec:49:4b:e3:88:95:c3:c6:de:8a:8c:03:29:48:
ac:e4:6b:3c:3b:8a:b0:7f:8d:ae:d7:ba:aa:98:aa:
61:ba:e8:48:23:49:25:38:14:8f:67:13:87:cd:88:
cd:73:22:b7:cf:35:b1:48:78:39:79:34:bc:b7:08:
e0:79:89:99:af:6e:c4:8b:87:9d:14:99:d3:86:24:
1b:68:cf:99:9a:59:4b:88:48:a4:77:6c:44:11:6b:
a9:e3:8b:7f:fd:1d:47:15:6d:4e:e5:a5:0c:0b:68:
3f:1f:d2:c1:2a:41:68:de:9f:5d:31:b1:c8:e0:97:
ef:88:6e:d4:93:21:f8:f2:c7:6b:6e:9b:41:3b:b9:
6b:e2:09:72:ca:f7:2d:5e:9b:65:f9:39:eb:56:16:
eb:98:69:7e:df:a0:bf:b6:fe:7e:8b:cd:87:9e:16:
f6:d9:4e:bb:6d:c1:b9:47:36:f4:4a:b0:3a:6e:55:
e9:af:97:37:fa:9f:25:0b:da:f6:fa:cd:79:a7:d5:
ce:cb:d4:16:6a:3e:69:8b:87:be:02:cb:82:31:4b:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DE:0A:2C:A6:DE:AF:B0:06:F3:7B:11:E3:7D:87:C2:C3:B1:0C:EC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Rd4KLKber7AG83sR432HwsOxDOw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.32.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:5e:ff:d2:2f:9d:3e:b6:fe:6d:a4:23:d8:40:91:3b:88:d2:
0b:69:1b:d4:ea:a6:fa:07:9c:2e:d2:0b:6d:75:19:73:31:19:
22:48:01:f9:81:d4:f3:76:41:a0:3d:ff:a2:cc:29:01:ec:55:
46:e1:13:ec:77:1f:c5:ca:a2:21:0f:7f:30:4a:b8:6a:7a:07:
9a:ec:fb:fc:d8:02:83:4a:a4:2f:38:c3:c6:c9:88:2e:92:e0:
f3:d5:32:30:8d:6a:97:53:27:91:f4:a4:d5:59:d3:c9:aa:be:
d1:77:52:6d:40:e7:25:38:85:50:49:72:88:f8:58:2d:9c:8d:
20:03:a9:5e:0b:b8:a9:42:0b:03:5a:93:0b:34:9e:59:46:b8:
dd:fd:0d:20:d9:ae:ae:30:3d:ca:29:b4:71:0b:15:8f:ac:cc:
43:8b:05:30:88:af:6f:d8:90:57:79:8b:26:88:f7:e9:1a:9e:
0e:e5:aa:6a:61:dd:8c:74:5f:6f:23:f3:36:c8:cf:d6:c0:6d:
e3:20:b4:d6:c3:e2:c7:fb:9a:4f:e8:cf:41:5c:b4:b1:cb:cb:
6f:78:73:2d:59:5b:04:c9:12:35:3a:bc:1f:9d:0a:1d:8a:a7:
0f:2d:7f:50:5b:a9:66:6f:55:e0:f5:fc:fd:32:4e:a5:55:cc:
4c:1c:5f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org