Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YT-mVVTcO6L_-xM-dxCuB7TjhZo.roa
File: YT-mVVTcO6L_-xM-dxCuB7TjhZo.roa (raw, json)
Hash identifier: XMrykKP0z32hSM9ItIsuwW/CLsKrDlKncornGFWM/ro=
Subject key identifier: 61:3F:A6:55:54:DC:3B:A2:FF:FB:13:3E:77:10:AE:07:B4:E3:85:9A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2957
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YT-mVVTcO6L_-xM-dxCuB7TjhZo.roa
Signing time: Fri 01 Sep 2023 10:06:24 +0000
ROA not before: Fri 01 Sep 2023 10:06:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10583 (0x2957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=613FA65554DC3BA2FFFB133E7710AE07B4E3859A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6b:07:ae:f2:d0:e0:a2:36:15:43:19:df:31:
38:dd:76:f1:26:e9:6a:66:60:dc:96:39:ee:b0:7c:
74:f0:0c:87:b2:4e:52:2a:e0:1f:dc:e1:c7:ac:fc:
9c:ef:1b:0c:5c:08:10:c3:34:67:26:f9:9c:4d:78:
b9:2d:7f:e3:bb:3c:e6:18:af:88:20:c9:68:ec:6a:
0b:7a:c4:26:db:ca:2b:7c:9c:4a:6a:9e:7b:1a:d1:
48:82:70:e0:f9:fa:d8:9d:9d:ad:62:2b:2f:83:53:
e4:94:58:f2:74:79:38:dc:37:81:b9:83:3a:9c:48:
17:83:7a:37:cd:a7:35:07:21:16:7f:c6:3b:13:d0:
71:a5:5d:42:63:24:04:8c:88:5b:61:9b:dc:f2:c5:
8c:db:8b:d5:8e:da:2a:e8:c6:8b:3f:20:3b:00:49:
20:ba:00:a8:f7:3c:3c:e8:5e:0f:99:9c:e1:2c:86:
1a:b3:6b:22:5a:1d:b8:6d:b9:52:7d:4d:92:6e:41:
82:c1:0d:3f:f1:d0:c3:54:8e:50:2a:b8:12:11:f1:
13:60:9d:2d:46:fd:ca:88:a1:25:f7:7a:12:75:1b:
83:64:84:7c:90:45:22:3f:5b:df:5a:5b:a6:46:81:
28:27:b5:6d:15:27:f1:29:14:d6:78:09:1f:85:8f:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3F:A6:55:54:DC:3B:A2:FF:FB:13:3E:77:10:AE:07:B4:E3:85:9A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YT-mVVTcO6L_-xM-dxCuB7TjhZo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:4c:89:84:a3:28:63:0f:d3:38:15:66:69:4e:65:b3:18:e7:
51:8c:49:db:f5:5c:bf:ed:f0:7d:4c:8e:4e:95:cb:d9:a6:38:
96:b6:65:f9:8e:64:8c:4e:6d:a7:b1:3a:1a:89:1a:b3:4f:21:
89:85:fb:67:22:02:6d:d2:04:e2:05:3a:92:b0:9f:7f:2a:7c:
20:74:bc:f1:7e:3c:b8:55:df:0f:5d:10:f7:82:a0:55:93:09:
32:68:03:dc:20:e0:ef:f9:d5:f8:59:8a:c6:1d:58:c3:b4:7f:
32:20:af:ea:77:eb:af:11:d2:5a:08:de:53:21:8d:57:07:09:
27:91:58:b5:bc:b3:7a:0a:de:86:37:c2:42:c7:95:d7:1e:c8:
17:ce:fd:25:58:12:c0:19:62:44:5b:97:22:7e:ad:6a:d5:85:
5c:68:74:0c:31:4f:a2:3c:49:4a:9d:fa:7d:d6:71:a0:50:90:
6b:d0:1a:b9:ac:7b:0f:38:fe:c9:19:0b:cb:09:b5:a9:a4:78:
ce:6a:21:c6:b9:ed:c4:4e:b7:bf:1d:93:4d:99:3d:eb:8c:61:
6d:42:45:3c:3d:4d:f8:1a:07:b6:f9:4a:14:4b:70:91:01:50:
06:60:e6:9a:be:63:e5:e2:ba:05:52:00:ad:02:fd:6e:c1:81:
6a:a4:f8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org