Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XElJ1AL4bz9setxA1LGcgHIoVXk.roa
File: XElJ1AL4bz9setxA1LGcgHIoVXk.roa (raw, json)
Hash identifier: f8XjPseUlXHB6XSIgi8X3KkLodaNkte9z/8cY4Tbp0Q=
Subject key identifier: 5C:49:49:D4:02:F8:6F:3F:6C:7A:DC:40:D4:B1:9C:80:72:28:55:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 283F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XElJ1AL4bz9setxA1LGcgHIoVXk.roa
Signing time: Fri 01 Sep 2023 10:05:07 +0000
ROA not before: Fri 01 Sep 2023 10:05:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10303 (0x283f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5C4949D402F86F3F6C7ADC40D4B19C8072285579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a1:fd:6e:81:b5:60:94:00:a6:2f:e6:fc:29:
f6:aa:32:00:17:06:ac:b8:01:c7:28:de:fa:1c:93:
5e:93:7e:83:fd:21:8b:04:b1:9f:0c:a5:4b:47:3a:
fc:e2:86:bb:3c:a9:20:e9:a1:32:81:98:18:dd:b8:
d1:cd:45:69:21:10:7e:98:a8:04:08:4e:f7:70:09:
58:11:8d:7b:00:3e:b8:0a:63:bc:f7:d9:b0:40:6f:
6e:4a:3e:45:99:ff:55:6a:90:e1:aa:92:ab:47:2e:
31:df:e7:f3:3f:de:ad:b9:48:3d:0f:64:e7:e9:76:
ca:36:11:01:5c:31:7c:99:5a:d3:0e:e4:ee:9c:e6:
cf:f5:02:91:b8:1c:e6:e0:14:52:f1:6e:ae:76:0e:
0e:3c:2d:f8:30:54:54:75:0f:62:d8:01:c6:b6:8e:
6d:aa:a8:28:0f:8e:02:af:d3:09:57:1c:79:73:14:
3c:aa:91:f1:b4:17:07:a0:c4:51:65:19:2c:85:ea:
ba:89:6f:b4:42:7e:59:fc:5e:ba:66:dd:71:b9:3c:
28:2c:5c:7f:bd:5f:e9:33:58:4f:28:16:e4:e9:15:
9f:d9:42:7c:b2:5a:d4:76:cf:fd:90:7e:f2:35:de:
e6:55:08:ec:02:3f:f7:13:52:27:57:6b:c0:a5:88:
56:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:49:49:D4:02:F8:6F:3F:6C:7A:DC:40:D4:B1:9C:80:72:28:55:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XElJ1AL4bz9setxA1LGcgHIoVXk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.8.0/21
Signature Algorithm: sha256WithRSAEncryption
76:7f:9d:fe:0e:80:54:19:fe:be:a8:f7:9c:6b:06:6f:75:e0:
14:c1:c7:5e:44:6e:61:58:a1:db:07:7e:5c:06:5d:c0:c3:54:
40:db:78:73:45:ad:af:03:ae:3c:e8:c6:70:98:3d:67:35:6e:
c4:c2:9a:f3:0a:26:84:20:67:cf:f9:76:32:30:c5:0d:62:9d:
37:a7:8e:6a:4c:a8:77:b0:2e:b5:f7:d7:7f:92:7c:ed:ea:81:
de:b0:9f:a2:38:36:44:46:a1:72:e1:66:bf:b5:68:d6:f4:2d:
2d:41:85:b0:85:db:2f:74:74:9d:90:a4:c0:0f:5b:e8:59:f8:
dd:8d:38:4d:14:e0:4a:69:b2:95:0e:25:ec:69:39:c4:d6:8c:
76:14:dd:e3:02:64:e4:b3:13:48:e7:0d:88:c4:14:12:78:00:
fe:88:82:52:df:c8:bc:52:f5:f6:5c:49:4a:58:b7:05:be:34:
27:f7:03:91:d0:9e:0c:87:13:11:7b:0d:fd:45:55:41:8b:c2:
2a:45:8d:19:08:fc:bf:33:0d:6c:60:e2:2f:06:54:02:73:4c:
ba:d9:c4:c1:25:b8:39:fb:22:81:2b:a6:0d:96:fb:d1:ba:95:
f9:9b:1d:61:69:6a:84:b9:6d:c7:aa:60:44:ef:8a:f9:9a:2d:
7d:24:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org