Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YcqipzfhDroJpdpwApBw8DUWsus.roa
File: YcqipzfhDroJpdpwApBw8DUWsus.roa (raw, json)
Hash identifier: osZfijW64vO6zfPFF/vQmGkdO7RUjZoSPwnjmK2h098=
Subject key identifier: 61:CA:A2:A7:37:E1:0E:BA:09:A5:DA:70:02:90:70:F0:35:16:B2:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29FD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YcqipzfhDroJpdpwApBw8DUWsus.roa
Signing time: Fri 01 Sep 2023 10:07:21 +0000
ROA not before: Fri 01 Sep 2023 10:07:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10749 (0x29fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=61CAA2A737E10EBA09A5DA70029070F03516B2EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:fc:80:82:bf:8f:2d:85:6a:cc:ee:2e:9b:f5:
24:6c:14:69:8a:ef:0f:6e:84:6e:3f:77:86:29:25:
6a:b3:1e:51:52:f0:6b:25:e3:e9:7a:4d:c3:d9:68:
b9:c9:4a:e8:4c:83:3e:9e:6d:fd:d9:ea:d3:25:cb:
73:2c:e4:f2:55:e2:63:71:77:75:59:8f:a0:0e:31:
54:37:a2:da:56:6e:55:d4:f3:c2:8f:0f:f4:ab:ff:
7c:67:b1:93:fd:56:4a:38:c9:70:0f:c5:d7:23:0e:
41:a8:ea:a5:ee:0c:9c:57:7a:f2:7a:4f:91:70:81:
06:17:77:df:7b:da:0c:e9:c1:36:a9:e5:d4:33:d4:
6b:81:96:cf:a9:f9:2c:e3:c1:f4:52:c0:e8:51:5f:
55:81:95:3d:1b:9d:46:7f:71:76:32:be:d8:da:08:
ea:30:90:26:ac:6d:de:b7:e3:7b:e4:0b:d6:70:21:
af:c1:bf:0c:b3:0e:3b:cc:78:83:0a:1d:6e:ee:f9:
83:27:7f:9f:e0:f5:02:98:76:b8:04:1a:fd:81:8e:
0e:74:21:74:33:be:c5:e6:a3:e3:be:f8:65:2e:b9:
ae:ac:2a:07:dd:96:30:9c:54:d7:ee:82:cd:3a:1c:
57:bf:71:ed:40:90:c2:be:78:ad:cf:ca:98:c2:d9:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:A2:A7:37:E1:0E:BA:09:A5:DA:70:02:90:70:F0:35:16:B2:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YcqipzfhDroJpdpwApBw8DUWsus.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.216.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:d1:03:bc:ea:4e:65:c6:49:2e:7f:71:18:8d:17:24:06:8f:
de:c8:6e:c0:1a:bc:c8:18:1e:2f:7c:de:f6:93:e7:35:de:c9:
12:7d:07:3e:db:2a:fe:4f:7b:c7:cb:dd:70:59:27:99:a9:17:
ac:ef:b9:2a:e4:80:55:93:de:d0:c7:9b:b4:41:8a:cc:08:6d:
34:0d:4a:28:47:97:fa:d5:bb:8c:bc:f8:3d:fe:cf:20:15:02:
9f:5a:6a:25:e2:cf:10:30:b5:b9:d0:ea:dd:bc:23:39:c0:4d:
f5:b9:66:92:1f:38:4c:c8:a7:20:16:ee:44:7a:bf:dd:ae:cd:
d3:70:80:14:3c:03:c4:a4:d3:2e:b7:f0:75:86:3b:b3:fd:6d:
8a:2b:a0:ac:f9:6a:5f:20:63:73:54:70:19:eb:d1:ba:20:bf:
0b:4e:5c:dc:e6:cf:b6:ec:db:0f:fb:4c:e6:26:d6:1b:5e:0f:
8e:ba:82:76:01:1f:5d:ce:55:bf:a7:83:70:d3:c1:24:12:df:
d0:b4:e7:e2:23:20:70:58:18:ad:b9:0b:e1:f1:32:8a:22:82:
d3:fe:0c:b6:59:21:0c:c3:df:f8:4c:b4:26:f8:06:4c:dc:16:
8d:65:e4:bd:52:e8:f6:3e:57:1b:2a:e1:ae:ab:e6:6d:f0:79:
2e:f6:9d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org