Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YlobySQ0MWXO5Q1w1lEfxPoTtS0.roa
File: YlobySQ0MWXO5Q1w1lEfxPoTtS0.roa (raw, json)
Hash identifier: Uur8BQhDSe1Ox0H6iOWRH9bTncfEu2m1gmEvLtVl+5E=
Subject key identifier: 62:5A:1B:C9:24:34:31:65:CE:E5:0D:70:D6:51:1F:C4:FA:13:B5:2D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2978
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YlobySQ0MWXO5Q1w1lEfxPoTtS0.roa
Signing time: Fri 01 Sep 2023 10:06:39 +0000
ROA not before: Fri 01 Sep 2023 10:06:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10616 (0x2978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=625A1BC924343165CEE50D70D6511FC4FA13B52D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2a:3d:e8:6d:e0:f7:7a:c7:59:63:67:0f:e5:
b5:3d:6b:08:f7:59:20:f4:90:33:04:15:36:34:84:
4c:1d:96:4b:38:a7:19:8f:43:f2:fc:b4:9f:41:1d:
26:ac:ef:cb:64:bb:ac:52:e3:db:ff:8d:74:49:64:
04:6b:17:bf:cd:bd:9b:a2:37:da:a8:46:ba:e0:4b:
40:fd:46:4e:f0:0b:a0:a9:0f:96:b3:3b:96:e1:5b:
99:e4:63:a1:4c:55:11:7b:d9:ac:34:57:fc:0f:f5:
cb:90:ff:2f:30:ba:24:d7:5b:e6:1c:a9:f6:17:e0:
22:58:66:b0:8c:d3:8a:5f:cb:ef:59:d6:02:da:71:
44:71:70:56:75:69:14:ff:27:75:bc:74:a9:74:47:
b9:e6:db:c2:44:6e:57:d0:98:29:63:2f:ef:73:cc:
4b:f3:56:7a:24:d7:68:09:6f:12:83:f0:40:91:e2:
c1:99:06:68:89:d7:b1:2e:a4:51:10:5b:1f:1e:aa:
bd:73:81:10:e0:b2:55:1c:66:9e:0b:df:7e:09:d6:
47:6c:ce:54:ef:7c:6c:db:7f:59:dd:b0:c4:14:4f:
4c:6c:88:52:c6:31:d8:1d:58:b6:ac:09:fd:91:d8:
c9:4b:9c:a6:71:f4:25:75:af:fc:e9:b5:74:8c:24:
b2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5A:1B:C9:24:34:31:65:CE:E5:0D:70:D6:51:1F:C4:FA:13:B5:2D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YlobySQ0MWXO5Q1w1lEfxPoTtS0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.148.0/22
Signature Algorithm: sha256WithRSAEncryption
36:a4:3e:7f:ae:fe:29:eb:e9:7e:d6:f9:d3:01:c6:b8:47:ca:
90:01:5e:e9:9f:8a:a0:e6:6e:f8:f9:b0:7d:47:8e:cd:94:d4:
70:b3:98:11:f7:11:f2:91:38:7e:4f:ff:b1:3e:b3:bd:21:99:
82:0b:1d:a8:15:ec:bc:6b:f7:7e:a7:78:10:db:56:b7:c5:6e:
a8:7b:b7:bc:c8:c0:5d:a4:b1:9b:9c:fa:a2:50:5b:5b:1b:12:
ba:40:e1:32:02:bf:c1:03:45:85:ab:f4:e1:18:93:f7:1d:dd:
64:f7:a0:47:da:96:aa:08:91:32:6c:44:63:d1:79:0c:cd:81:
ff:b5:31:44:1a:f0:d9:df:a6:b2:39:0d:f4:a8:45:72:e4:19:
65:8f:25:a0:35:37:5a:eb:39:19:46:b3:ba:a0:6c:20:2a:4b:
3b:ef:b6:99:9b:57:9a:a8:fb:67:fe:f2:a4:8a:c8:01:a4:c8:
65:61:55:5d:e5:23:2b:98:31:ec:50:1d:76:11:f4:e2:6c:de:
07:35:e8:ae:20:8c:1e:b5:89:85:3f:ee:3c:06:18:12:17:2c:
5c:72:e5:6b:aa:05:7f:c1:04:43:fb:df:3c:1a:99:ea:b6:c5:
f0:2d:f1:eb:7b:b4:65:9b:30:dd:a8:58:7e:af:c5:1d:6c:7d:
f1:c6:c6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org