Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WdTMBf_r_zPtfRv0OFnhptJRi1k.roa
File: WdTMBf_r_zPtfRv0OFnhptJRi1k.roa (raw, json)
Hash identifier: DmcEyKRdoKXktegavGGOywSPTquKEAkLdqsAHeSmaYo=
Subject key identifier: 59:D4:CC:05:FF:EB:FF:33:ED:7D:1B:F4:38:59:E1:A6:D2:51:8B:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2866
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WdTMBf_r_zPtfRv0OFnhptJRi1k.roa
Signing time: Fri 01 Sep 2023 10:05:17 +0000
ROA not before: Fri 01 Sep 2023 10:05:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.113.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10342 (0x2866)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=59D4CC05FFEBFF33ED7D1BF43859E1A6D2518B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:99:4b:6c:b1:e3:22:5c:00:73:78:e8:06:
92:3b:78:2a:64:33:71:a5:f5:8c:86:cf:ee:aa:aa:
11:00:bc:40:1f:a0:4a:33:d1:a7:dd:d6:df:5b:b4:
89:99:8d:d5:9d:11:60:9e:b5:fc:0f:13:17:78:32:
39:46:09:69:a8:53:a5:e3:88:79:97:df:6c:94:97:
2a:b8:a9:de:53:66:ee:d4:ae:80:b5:83:1d:79:69:
da:23:eb:71:76:79:ba:4d:1e:dc:00:f9:00:a9:0c:
a5:30:28:cd:93:81:49:c5:0b:f7:92:f5:2e:20:55:
79:17:a0:a5:f0:ac:c8:25:54:52:9e:09:ea:f8:56:
5f:4a:b7:a7:1b:84:7a:41:50:8d:f6:2d:f7:5b:e2:
5e:7b:8f:d8:24:13:7e:b9:f4:2b:38:d0:26:3c:47:
73:9b:c1:7b:80:10:62:ef:9c:1d:7a:97:07:e6:a2:
24:02:b1:2f:f0:91:fc:79:50:14:66:89:ed:4c:a1:
1f:3b:24:7a:25:f0:28:cd:2f:f5:cf:aa:10:e7:76:
73:ba:57:e8:3e:63:3d:b5:1d:52:ca:48:b6:e5:ea:
5d:b1:bc:4d:bf:c7:76:55:d5:06:ba:7e:f5:73:5e:
4f:ba:0b:14:4a:21:07:65:27:cc:15:f9:0d:dd:cc:
cf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:CC:05:FF:EB:FF:33:ED:7D:1B:F4:38:59:E1:A6:D2:51:8B:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/WdTMBf_r_zPtfRv0OFnhptJRi1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.113.128/25
Signature Algorithm: sha256WithRSAEncryption
99:11:15:ef:61:c5:12:73:f0:e1:91:0d:a2:c5:be:c5:ff:98:
9b:62:64:de:f0:8d:57:ee:07:66:20:a6:2b:ef:08:b6:76:36:
46:3d:e0:0f:a9:20:c7:0c:06:bb:ac:7e:62:12:fc:1a:b6:21:
96:7a:37:c1:df:fb:56:de:95:80:ae:71:cd:97:89:dd:aa:7a:
4e:63:93:52:68:47:82:fa:43:23:a4:27:c2:f6:3d:96:95:28:
49:96:df:fc:e8:6c:04:44:4f:ed:c2:fc:2e:ea:0d:10:76:77:
75:28:88:50:f6:78:17:49:73:3c:8e:1d:3f:16:3d:a9:77:92:
52:90:72:5d:26:c0:e8:58:7b:4d:25:81:61:a3:5e:33:64:3a:
54:7f:43:30:9f:d0:d8:80:25:6b:05:6c:68:33:6f:b0:0b:c1:
17:6e:b5:d3:39:cf:68:df:b3:57:92:f3:5e:af:a8:69:78:ab:
33:97:e0:28:20:f3:69:43:0c:39:01:76:03:eb:24:d5:db:6b:
f5:9a:92:bd:60:5d:e1:b6:fb:04:e2:43:96:26:97:64:f2:d1:
ab:d9:0d:bc:14:c7:52:7f:e4:fe:8f:f2:df:ed:01:d6:ab:47:
e4:0a:a5:86:5e:62:ff:95:08:c4:76:02:f2:1e:20:9f:7d:36:
f5:bd:5a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org