Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RqNoD-iVmC70sB1TaUx16OSZY4g.roa
File: RqNoD-iVmC70sB1TaUx16OSZY4g.roa (raw, json)
Hash identifier: A4jZAD9M4eXL3b1W+baTNb3OukYZ6qzVgieWwedV5V8=
Subject key identifier: 46:A3:68:0F:E8:95:98:2E:F4:B0:1D:53:69:4C:75:E8:E4:99:63:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2836
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RqNoD-iVmC70sB1TaUx16OSZY4g.roa
Signing time: Fri 01 Sep 2023 10:05:05 +0000
ROA not before: Fri 01 Sep 2023 10:05:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10294 (0x2836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=46A3680FE895982EF4B01D53694C75E8E4996388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d5:23:9a:56:b8:74:88:e8:66:8b:e0:0f:74:
8a:52:c1:36:62:09:6e:78:d4:50:dc:d4:62:24:87:
56:dd:b7:39:1f:78:00:3e:87:2f:33:83:2d:8b:dd:
be:fb:45:8c:a6:f8:f8:5e:16:2f:45:ff:b1:ea:6b:
61:18:42:68:c7:d6:21:99:bd:24:bc:7a:73:56:d8:
31:be:21:85:1d:22:de:e9:aa:e0:46:ea:c8:51:56:
50:04:ea:44:46:57:1c:95:0d:2b:c4:f6:67:57:e6:
c9:76:0a:87:80:95:5a:bf:c1:ac:0c:e8:ac:7f:f8:
aa:e3:89:57:98:48:0b:14:39:4c:aa:b0:90:34:9b:
a2:01:a4:7f:cd:f3:83:02:cd:94:cc:82:8f:a2:1a:
86:15:e2:20:05:41:70:13:ee:4d:5f:08:a4:96:c4:
24:dd:82:fc:f6:9c:45:86:a1:26:df:42:9a:d9:a1:
1d:5e:cd:d2:94:d9:65:6b:05:a0:bb:26:0b:ec:f8:
e3:51:b4:65:65:e1:12:9e:9a:1c:f9:b0:37:9f:e8:
a5:2f:77:a1:b0:65:ad:33:3b:40:b2:e2:48:d0:2f:
b9:cb:49:69:a8:10:99:89:aa:05:60:cb:4e:4e:32:
96:46:c4:7b:1d:2b:70:08:3c:4b:6c:86:f9:f5:3c:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:68:0F:E8:95:98:2E:F4:B0:1D:53:69:4C:75:E8:E4:99:63:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RqNoD-iVmC70sB1TaUx16OSZY4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.211.0/24
Signature Algorithm: sha256WithRSAEncryption
34:9d:53:d2:35:3e:65:1b:4a:48:01:8e:f7:74:85:1c:96:25:
38:f7:1c:f1:c6:a6:54:f5:fe:c0:1e:9b:06:8f:e2:ee:fe:8f:
2f:d9:58:79:6d:74:1d:95:74:58:7a:0d:6e:3d:a2:4e:36:64:
00:8b:6b:6c:31:6c:21:08:aa:c2:70:18:8a:8c:bd:f1:08:8c:
43:f6:67:ae:eb:09:ec:4c:fe:5a:78:ab:b5:57:a5:9d:8e:06:
c2:17:49:d3:70:7d:b1:c6:4d:9d:a2:80:4b:ac:fe:72:b9:71:
ba:7b:87:29:da:56:35:cd:43:e8:0f:03:ae:3b:bf:aa:b6:27:
bb:9b:b4:d7:4f:f4:1b:f4:2d:9c:7d:f6:f1:38:d4:be:fc:8b:
49:10:e0:5c:32:aa:ea:54:e2:81:26:33:1f:2c:d0:13:ba:0a:
a2:bc:c0:1e:c4:80:d1:37:18:46:c0:88:0f:be:45:92:0c:50:
3c:18:d2:67:61:9a:6d:29:29:81:b8:ed:af:2b:ce:f2:03:24:
76:71:09:a5:52:79:6d:ea:19:2e:7a:ad:fd:96:36:d9:b4:4f:
32:10:3c:d6:29:63:f9:98:f3:b6:43:e6:80:1b:db:66:67:6c:
19:8f:41:94:e1:40:d2:df:5a:17:dd:ca:21:b4:50:9e:a8:a4:
17:09:c7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org