Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TyBQT-wo1QGUaHRqpQBlyTthgxw.roa
File: TyBQT-wo1QGUaHRqpQBlyTthgxw.roa (raw, json)
Hash identifier: TjlBHzvQVHjBG4h7YYgc+08JCZDRLNlQfoChp/jVfoc=
Subject key identifier: 4F:20:50:4F:EC:28:D5:01:94:68:74:6A:A5:00:65:C9:3B:61:83:1C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 289C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TyBQT-wo1QGUaHRqpQBlyTthgxw.roa
Signing time: Fri 01 Sep 2023 10:05:34 +0000
ROA not before: Fri 01 Sep 2023 10:05:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10396 (0x289c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4F20504FEC28D5019468746AA50065C93B61831C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:89:34:f4:24:2a:d2:db:c3:65:58:2f:cb:
3a:4a:2b:3e:5a:d2:51:b8:47:13:ae:c0:08:cc:a6:
36:f1:bb:e5:4f:b3:61:0a:ea:cc:5e:42:52:64:91:
fe:2c:a9:cd:4d:1c:51:37:23:2d:5e:81:44:a2:67:
57:17:99:b9:b7:ef:10:9c:ee:8a:55:a3:17:53:67:
06:de:4b:b2:f5:d5:23:29:3d:1e:51:e8:61:1d:69:
fe:dc:5c:02:45:2c:3c:fc:a4:7d:2a:4c:59:3f:35:
29:4d:27:56:08:78:33:2c:dc:0b:0e:84:c9:d7:ae:
bd:8d:8e:bd:07:01:6b:80:4e:1d:e5:08:8b:1d:ef:
d2:b7:f1:8e:a0:ce:87:0b:53:d4:18:42:fe:06:96:
79:91:a2:1a:7b:23:a0:94:36:a8:dc:78:d7:b0:ce:
c6:d1:c3:3b:9d:46:5e:e6:2f:47:66:02:9d:22:44:
aa:01:4f:24:fb:64:ac:be:99:9f:36:ca:d2:f0:33:
16:89:54:cb:6a:9e:15:7e:84:65:ec:79:22:b4:89:
43:66:e2:b9:e3:eb:df:d0:00:2c:0b:f1:b4:ca:14:
57:34:70:07:0f:25:a7:ef:db:c2:b1:ec:69:00:37:
6b:96:63:21:d2:03:87:92:f6:9d:de:8e:c9:2e:a7:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:20:50:4F:EC:28:D5:01:94:68:74:6A:A5:00:65:C9:3B:61:83:1C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TyBQT-wo1QGUaHRqpQBlyTthgxw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:1d:42:9a:b4:09:02:76:a5:66:79:18:71:51:6a:01:89:8c:
c0:93:df:34:d3:62:fc:2d:e6:5d:e4:83:1e:83:dd:1d:36:40:
21:cb:8a:7b:c6:ab:2d:7e:1c:8e:67:9c:b5:d8:a3:ae:15:fa:
7b:98:42:c4:26:18:b2:86:b2:66:a1:f5:bc:54:67:75:de:cb:
d2:24:52:85:32:92:15:a3:5d:f4:e4:11:10:68:c1:ca:c7:f9:
d3:d0:ea:45:88:af:67:f0:3b:15:c1:3a:b2:64:4b:30:10:88:
77:41:2f:e3:6e:4c:f7:0e:fa:1a:d3:30:84:bb:28:0b:1e:74:
f4:03:83:6b:ed:f2:61:bb:85:3a:31:da:2f:2b:90:7b:9f:a5:
8f:6a:21:3a:af:8f:06:bb:4c:40:eb:0c:86:03:61:aa:81:cc:
22:5d:53:c5:60:99:23:a4:4a:01:f2:30:37:43:63:9e:78:43:
bf:cf:9b:89:be:e2:11:aa:6d:e0:4f:7f:d1:f1:4f:b3:b8:0d:
92:42:64:fc:d5:6c:05:20:d3:5d:06:6f:4a:ec:7b:bf:fe:17:
30:01:08:9f:0a:51:b6:b8:fe:73:3b:fb:3d:e2:a4:69:39:7d:
b0:eb:55:23:7e:e7:f3:4e:37:53:c3:f6:39:d0:a6:53:f3:f9:
01:10:29:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org