Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YiH5DNm0Yhmg60JH0HYQasIa_vE.roa
File: YiH5DNm0Yhmg60JH0HYQasIa_vE.roa (raw, json)
Hash identifier: FfuaXJfKgeT6RPxOEf1yQJ+2rLm8hx3UfmerpT/Jdj4=
Subject key identifier: 62:21:F9:0C:D9:B4:62:19:A0:EB:42:47:D0:76:10:6A:C2:1A:FE:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A3B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YiH5DNm0Yhmg60JH0HYQasIa_vE.roa
Signing time: Fri 01 Sep 2023 10:07:39 +0000
ROA not before: Fri 01 Sep 2023 10:07:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10811 (0x2a3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6221F90CD9B46219A0EB4247D076106AC21AFEF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a2:80:24:fc:0f:97:15:54:2a:9b:f0:be:89:
35:3b:b0:f1:99:8c:51:c4:7c:09:54:48:57:64:93:
7c:b1:2e:99:81:8f:76:c7:52:82:67:7b:e2:17:23:
b9:6c:53:92:80:78:ab:c4:a6:3a:49:1a:c7:f4:7b:
1e:c4:ea:d1:f7:d3:7e:db:c4:25:68:62:13:4b:d3:
80:0b:b7:78:5b:3c:55:75:cf:04:87:e5:05:dc:6a:
9e:6a:fc:46:3c:51:94:70:d9:90:a7:c5:19:9f:6e:
a0:e2:5b:de:2f:0f:cc:33:4a:f2:ef:14:d5:17:98:
f5:b2:36:7b:5f:05:40:8d:d4:e9:d2:19:c5:7b:37:
0a:80:6f:91:15:44:08:46:56:0d:dc:02:2f:f9:1e:
d5:9f:f7:2f:64:7d:e8:25:42:4e:0e:1a:0c:65:4b:
9c:91:6b:90:6b:2c:f6:0f:ed:70:51:aa:b4:40:8c:
5c:69:ac:60:7e:4f:c2:cf:53:57:51:87:40:9d:ef:
77:c4:90:38:ec:49:5a:ae:7e:42:6b:ec:28:f8:29:
d6:4c:06:00:c6:33:d7:02:a7:dd:75:a5:15:d0:63:
64:72:c7:c1:7a:8f:94:89:d7:11:c0:6d:a0:b6:08:
a3:f4:89:f5:78:8c:2b:ea:c2:4d:29:6f:e4:f6:7c:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:21:F9:0C:D9:B4:62:19:A0:EB:42:47:D0:76:10:6A:C2:1A:FE:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YiH5DNm0Yhmg60JH0HYQasIa_vE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
99:6c:3b:9d:98:e9:e6:48:71:17:cf:57:7f:9b:4c:b2:88:93:
25:c5:aa:81:70:84:2c:57:ad:5c:a5:8e:c9:50:ff:40:d2:80:
31:80:17:50:2f:4f:d3:cd:11:89:a4:9d:55:6b:f1:3b:b0:6e:
2c:f3:30:c4:d7:e3:cf:f5:f2:9c:f4:3d:32:b0:48:a5:e2:83:
3a:ff:20:44:b2:62:aa:f5:49:9d:5d:f0:2e:0a:39:5b:69:f9:
98:84:5d:83:18:22:5f:09:11:73:98:16:f8:b1:b4:e3:5e:fa:
c6:fe:75:c9:57:49:a5:7e:f1:ee:d0:9a:e4:0a:8e:88:12:e5:
5a:5b:46:9b:81:f0:4d:0d:78:82:28:aa:6f:0a:d4:0f:4a:a9:
a8:f7:7c:4f:c4:0b:2e:58:1e:e5:2c:5d:45:f8:8a:ac:a5:37:
97:44:a5:3a:02:30:27:22:5a:e8:f4:45:65:c4:2f:d6:c2:4e:
2b:5e:88:a9:2f:a4:72:98:74:5e:69:1e:e0:0b:13:11:ba:08:
68:be:c0:11:1a:6f:51:49:a6:b5:a2:55:f3:f4:f0:1d:07:81:
26:34:8e:a2:fe:bb:6c:ba:22:e7:92:38:04:cc:30:be:95:10:
0c:53:9d:96:ff:2c:69:72:ad:aa:b4:6e:43:5c:0f:31:d0:0b:
6b:e2:76:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org