Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YhtKC1cZRlipCsYca5nwPQJRsLw.roa
File: YhtKC1cZRlipCsYca5nwPQJRsLw.roa (raw, json)
Hash identifier: +dIINzC5hj4S341iBvD30gm85X8U407xrZz6TwrQOJc=
Subject key identifier: 62:1B:4A:0B:57:19:46:58:A9:0A:C6:1C:6B:99:F0:3D:02:51:B0:BC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AC3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YhtKC1cZRlipCsYca5nwPQJRsLw.roa
Signing time: Fri 01 Sep 2023 10:08:16 +0000
ROA not before: Fri 01 Sep 2023 10:08:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10947 (0x2ac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=621B4A0B57194658A90AC61C6B99F03D0251B0BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:bd:a3:7e:ff:49:c0:24:4a:0a:be:75:a2:
e7:26:d9:3c:7f:b9:01:be:84:b1:39:9d:2b:6e:cc:
92:21:e1:1d:9c:0f:8c:6d:5e:dd:d6:4f:99:47:15:
b5:02:40:bf:2b:01:73:0b:ea:60:db:4c:90:75:80:
7d:72:f2:c3:4e:60:b0:45:a7:82:67:3f:49:3e:b0:
aa:29:ba:5a:65:0b:f2:f8:3c:5a:03:86:df:82:19:
dd:c7:ed:37:36:27:44:9d:c1:cb:8a:23:5b:0e:8d:
aa:e4:33:9a:d0:8b:e2:bb:a0:7e:6a:aa:8e:29:08:
86:72:83:d3:54:ea:1e:76:51:da:3a:4f:ec:f3:be:
03:f6:45:95:73:f9:58:fd:b9:02:97:c1:5b:c1:0b:
d9:59:d2:a5:2f:41:b8:d1:b4:29:12:cb:5f:35:83:
63:a2:c8:34:09:12:26:4f:24:87:22:b7:32:ee:a6:
25:45:4d:8a:b1:14:c9:83:fd:57:16:12:af:3d:47:
5d:12:d5:30:fd:28:77:83:f9:41:0d:3e:8e:df:b6:
8d:39:df:00:e0:e3:43:d6:f6:3a:65:09:48:fd:f5:
33:f8:06:47:e6:df:6d:ce:b3:f6:cd:35:e5:43:c5:
5a:33:77:f8:a7:86:33:1d:38:2f:7b:29:a6:2b:86:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1B:4A:0B:57:19:46:58:A9:0A:C6:1C:6B:99:F0:3D:02:51:B0:BC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YhtKC1cZRlipCsYca5nwPQJRsLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.242.0/23
Signature Algorithm: sha256WithRSAEncryption
66:b7:e4:43:36:5a:94:a3:d6:6c:f9:ce:ea:cb:8d:19:8a:a7:
dc:3c:af:0d:bd:d3:63:72:e4:b2:90:80:18:2e:b9:f5:61:b2:
38:9b:cf:d2:c9:44:6a:c9:26:0f:11:e2:8c:d6:e0:7a:cb:74:
0a:a8:60:92:52:41:37:3b:64:a9:5e:b3:b1:52:c9:20:5c:97:
11:b1:5b:c8:96:ff:af:80:f2:84:cd:26:59:f9:3c:c2:76:52:
a7:20:ba:3a:ce:1d:39:6a:44:ae:c2:25:0a:00:8f:72:e6:d4:
b7:99:e6:73:61:7f:84:b0:1a:5d:bf:d1:94:37:3e:4c:d7:c4:
c8:9b:b9:2d:23:67:5a:56:04:9c:78:40:89:58:4b:5d:10:ae:
cf:9b:ef:75:4d:4d:08:49:fb:31:a9:f9:6a:36:ed:ae:16:fb:
da:87:ef:70:b1:de:a0:b6:10:02:69:4a:1b:0f:9a:5e:b9:4d:
d5:2f:a8:eb:35:bc:b4:d7:d7:24:59:b3:73:5f:e2:2b:7a:43:
e0:9f:aa:dd:77:5e:71:ee:00:5c:3a:8a:25:fd:61:fc:b4:c7:
fe:b2:cb:ab:f0:25:e2:49:16:7a:c1:39:ce:c9:74:f5:7d:0d:
b1:2a:ce:f2:82:6c:1e:3d:94:6b:2e:09:5f:9f:6b:73:7c:1c:
e1:b7:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org