Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XgVpdlh_Pb2KNAifuxTy3YrRJ3c.roa
File: XgVpdlh_Pb2KNAifuxTy3YrRJ3c.roa (raw, json)
Hash identifier: Jp9WdM3N6wZxp6JvjbE4KRutUc2GYajh4E2NIob54jg=
Subject key identifier: 5E:05:69:76:58:7F:3D:BD:8A:34:08:9F:BB:14:F2:DD:8A:D1:27:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 292C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XgVpdlh_Pb2KNAifuxTy3YrRJ3c.roa
Signing time: Fri 01 Sep 2023 10:06:14 +0000
ROA not before: Fri 01 Sep 2023 10:06:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.0.0/15 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10540 (0x292c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5E056976587F3DBD8A34089FBB14F2DD8AD12777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:f8:9e:7f:5c:f5:c1:1b:f2:9f:94:8f:93:
fe:fa:5b:f1:c1:54:3f:e2:1f:0b:ac:37:47:46:8c:
e5:7a:87:ab:c7:35:be:9a:cd:77:95:5a:0d:0a:43:
93:14:e0:82:f3:21:2e:cb:20:15:e2:b5:8e:53:d5:
23:67:cf:ea:ae:7c:fa:31:03:f6:c0:4a:dd:37:70:
be:b8:07:f3:60:20:99:b5:a8:93:90:89:33:05:6f:
14:05:0f:1d:1a:91:65:25:8a:24:09:27:9f:45:9b:
7e:ec:ee:79:b2:e7:19:1e:18:e8:3e:b9:7e:3a:e1:
9f:f1:47:9c:da:de:f3:49:6f:d6:af:5b:69:c3:aa:
b4:59:a1:d7:8b:62:f8:9b:36:20:52:82:5a:2d:fd:
de:0e:2c:89:0a:ee:26:7d:0a:75:cf:25:a2:0f:03:
a6:02:0c:76:48:23:fb:a4:fb:33:d6:90:51:19:19:
12:f2:3f:3a:e7:97:18:25:74:e2:b4:f1:8a:b3:fd:
26:87:a4:9a:98:44:ed:ff:04:46:e2:31:c9:1b:2d:
ce:02:89:b1:3b:29:6f:08:83:71:2a:f6:59:e1:d3:
45:97:54:50:4e:2c:f9:84:ed:3f:50:59:90:78:cb:
c7:ac:3f:2d:9e:f3:61:86:84:cf:f5:f7:15:fd:01:
46:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:05:69:76:58:7F:3D:BD:8A:34:08:9F:BB:14:F2:DD:8A:D1:27:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XgVpdlh_Pb2KNAifuxTy3YrRJ3c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
08:0b:7a:ba:85:a9:83:00:70:31:75:4e:75:53:d7:91:f1:26:
66:80:8a:fc:4a:9e:c0:13:fd:14:32:49:ed:86:5f:36:b1:b3:
84:29:9f:66:b0:5b:50:cf:f9:47:a8:52:22:75:62:55:30:98:
00:51:37:9a:f3:99:28:35:7a:9a:a2:39:f5:c8:7a:a5:ba:bc:
62:5c:70:da:1f:f0:9b:e0:22:92:55:d3:cd:3e:4e:80:b8:23:
7a:78:94:97:dc:34:59:b9:e4:40:4d:5e:a4:8a:ae:4c:bf:74:
c9:9e:8e:ab:a4:68:52:3b:85:5f:f1:a7:61:7a:6d:44:b1:7e:
2d:85:c1:65:ee:fe:a9:2f:34:32:2c:77:82:79:78:02:1b:c8:
c0:51:8b:32:10:2c:82:59:02:b2:3c:eb:18:75:da:db:60:d7:
d5:4b:91:10:8e:7b:2d:ab:73:67:3c:0d:18:d1:ca:64:0f:7c:
44:11:b9:34:be:8c:5b:56:b9:33:0e:6a:06:db:f1:e2:bf:f3:
56:b1:2e:4a:cb:ea:ae:0a:5b:be:f2:5a:08:c2:49:60:bf:cf:
06:9f:a2:f1:f1:12:69:91:3b:b4:ae:4f:35:66:60:a7:ce:19:
7c:8b:4f:e0:07:8f:e4:fe:1c:db:a7:54:4d:e7:83:b2:99:31:
d1:08:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org