Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wua4VjYEkPAIF2OfLuO4Iucvypk.roa
File: Wua4VjYEkPAIF2OfLuO4Iucvypk.roa (raw, json)
Hash identifier: KifhUZ0Qzdj0fFF3sjtNL4lUCp4N5eGnfrT2M3LzKvI=
Subject key identifier: 5A:E6:B8:56:36:04:90:F0:08:17:63:9F:2E:E3:B8:22:E7:2F:CA:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27CC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wua4VjYEkPAIF2OfLuO4Iucvypk.roa
Signing time: Fri 01 Sep 2023 10:04:33 +0000
ROA not before: Fri 01 Sep 2023 10:04:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10188 (0x27cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5AE6B856360490F00817639F2EE3B822E72FCA99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:fc:73:f0:4a:3a:67:a3:d0:2b:51:21:26:
02:bc:f0:94:cf:dd:a2:59:bf:bd:cb:d1:1f:d3:51:
8a:03:d2:e9:fe:c7:a7:8d:ac:e6:32:56:86:d7:16:
86:a4:b4:75:d4:98:8e:81:ea:bd:72:c8:1c:18:34:
12:68:8a:fa:db:e9:73:68:5d:66:04:4b:fc:93:b1:
31:d2:f6:fa:69:00:06:93:bd:c1:da:72:2e:89:54:
5c:68:0b:8c:33:3b:d8:ed:ae:48:ed:e4:99:d7:74:
9b:7b:9e:78:c9:a0:9d:bc:47:3b:53:bd:09:3d:93:
cf:f7:8e:e3:36:df:c9:f4:2c:9f:0c:91:c7:0c:5c:
1b:e4:f5:0b:ca:9d:d9:fa:5a:ae:a5:3d:21:85:4a:
8e:b4:2f:c7:66:32:86:25:90:0e:22:87:46:f0:1a:
2b:f4:fa:32:d9:59:d6:00:50:6d:97:a6:44:6f:7a:
3f:4f:4f:e2:4f:19:c7:2c:1f:bb:59:44:ba:18:63:
0c:a3:1e:8e:60:a4:78:e3:9d:57:62:43:3f:3d:ee:
57:08:68:21:d1:38:22:05:f0:af:57:57:23:63:fd:
e3:cd:5f:cf:9a:08:92:5d:dc:cd:e8:9b:8b:35:6b:
2f:e0:8c:48:b3:82:61:d8:5e:aa:f0:06:02:1c:b9:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E6:B8:56:36:04:90:F0:08:17:63:9F:2E:E3:B8:22:E7:2F:CA:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Wua4VjYEkPAIF2OfLuO4Iucvypk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.88.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:12:c1:5d:78:16:dc:0d:39:56:5b:55:23:bf:41:3e:16:31:
0d:92:48:c9:f6:86:fd:9a:78:1f:db:3d:56:f6:7b:87:29:bf:
66:f9:36:5a:e2:42:87:90:a5:71:b3:5a:b8:28:33:11:3e:1d:
59:5b:08:0e:bf:1a:f2:5d:9c:a5:97:67:a6:15:f4:be:2f:76:
97:3f:5e:7a:49:3a:88:2d:ae:0c:0c:b7:89:83:4b:6b:9a:8a:
1e:51:7f:4b:17:0e:24:7a:89:0e:cc:91:e0:51:77:49:04:4d:
c1:4f:f1:69:86:69:9a:28:d7:56:f2:31:65:43:c6:e1:fe:07:
80:4b:90:21:c5:61:16:25:11:44:b3:7c:83:8a:6d:b5:38:bb:
a9:4e:3c:ef:0f:f5:d0:52:54:53:33:89:f5:24:bd:9f:04:af:
4e:ae:93:32:8e:7e:1f:13:e0:33:25:e2:11:c1:7f:47:e3:4c:
9b:65:50:64:d9:e6:18:d8:d2:b4:58:da:e8:b4:ea:f0:1c:bc:
9d:57:1e:a0:96:2d:87:5e:69:0e:3d:f3:5a:87:b0:e9:73:69:
51:7a:d5:5d:2c:ee:d5:4e:c6:79:af:26:ad:a0:a6:18:09:24:
1a:f7:b6:91:a7:32:de:dc:1c:84:03:53:95:5c:f8:c3:d9:bd:
8e:ef:4b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org