Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sg7PuLMYf5HupnPGwIEPkJZNvrc.roa
File: Sg7PuLMYf5HupnPGwIEPkJZNvrc.roa (raw, json)
Hash identifier: nCbXdN2WnBgNw9hk1hGmC348u+mxwp2J1dVTG5/TWp4=
Subject key identifier: 4A:0E:CF:B8:B3:18:7F:91:EE:A6:73:C6:C0:81:0F:90:96:4D:BE:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2906
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sg7PuLMYf5HupnPGwIEPkJZNvrc.roa
Signing time: Fri 01 Sep 2023 10:06:04 +0000
ROA not before: Fri 01 Sep 2023 10:06:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10502 (0x2906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4A0ECFB8B3187F91EEA673C6C0810F90964DBEB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8a:0d:3a:5d:ec:5a:44:2c:81:b4:59:a6:a9:
9f:eb:2a:46:48:19:6d:9f:df:eb:db:c3:9d:1d:f0:
e7:35:bc:1f:e1:d8:61:d2:44:0b:04:08:b3:a8:57:
b8:8f:71:df:9b:26:6c:ef:8c:39:48:93:7f:98:52:
19:36:b0:a2:3e:b5:ec:b1:4e:e2:6b:27:59:14:23:
76:7e:61:bf:09:3e:97:04:79:8b:1c:bf:7a:cb:8a:
6f:e6:3c:35:e9:0f:47:8c:9e:e8:b6:d5:6d:36:54:
ad:cc:fb:33:16:0e:02:b0:2a:b8:29:90:27:ee:e7:
5b:52:6f:9f:e7:1f:f7:ff:bd:b2:b1:2d:7f:6f:2e:
f8:b9:fc:48:b4:cd:db:5c:5f:4a:40:25:4a:0c:74:
e2:1f:ac:b9:8d:b1:eb:e9:a2:1c:ab:60:05:da:0b:
19:d0:4e:87:fd:2e:5b:7f:80:69:8b:90:8e:23:bb:
8d:1b:30:6f:fa:e5:d4:52:21:c6:50:a7:12:36:bb:
ee:a4:5f:b2:37:45:d8:28:92:4a:3c:ee:86:52:62:
57:77:d4:05:db:b7:0d:a2:71:02:d6:aa:f8:4d:5b:
68:8f:9d:06:87:8f:fd:62:69:fc:39:0d:f8:60:f4:
b0:da:e8:2c:b0:7c:d3:2f:1e:fd:7a:02:05:e3:e3:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:CF:B8:B3:18:7F:91:EE:A6:73:C6:C0:81:0F:90:96:4D:BE:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sg7PuLMYf5HupnPGwIEPkJZNvrc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.119.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6b:ef:39:99:b6:99:68:0a:bf:89:22:17:a1:90:30:6e:73:
22:97:ca:2d:f4:ce:24:02:1c:f4:20:ff:7f:32:16:a0:78:b9:
85:3d:dd:58:4c:d4:54:12:5e:ca:6f:96:bb:69:73:e9:55:60:
f1:ba:d4:0e:76:51:bf:ab:ac:a3:1c:b7:6f:d9:6f:f6:5b:c4:
5f:8c:93:fb:29:11:95:71:0e:8b:13:7f:6e:78:2c:0c:52:0b:
b1:c2:70:4a:2e:ac:0d:d8:e2:49:a4:fd:ff:61:29:66:67:0d:
e4:c9:d3:33:3d:3a:51:24:27:f0:f5:fe:30:c0:0f:9a:01:37:
90:a8:d2:4c:ff:5b:02:ee:c3:32:52:a3:3d:46:bc:d3:cd:74:
ce:17:00:cf:83:45:89:9c:db:22:4e:52:42:a6:53:8a:60:ec:
df:86:ea:51:a6:d4:a4:77:ab:86:09:26:58:4d:c3:71:94:a1:
14:4b:d9:1b:cb:d1:37:cd:50:68:1d:41:42:08:93:20:46:a6:
01:dc:2d:16:be:2f:cf:08:30:51:4f:af:3f:de:15:4c:d0:43:
03:d5:6d:7d:a0:27:10:4a:7e:a1:df:cc:aa:5f:6a:73:dd:9b:
40:0f:96:63:c3:81:8f:00:20:ae:d9:4d:a3:dc:66:6f:29:78:
ca:f6:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org