Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z0UvrLtJ-y-LeVnbcdWMwPyx81w.roa
File: Z0UvrLtJ-y-LeVnbcdWMwPyx81w.roa (raw, json)
Hash identifier: lCIBJzhn03gJbpP7r8LnuIWwIe9CSzs7RIGZlNexsfo=
Subject key identifier: 67:45:2F:AC:BB:49:FB:2F:8B:79:59:DB:71:D5:8C:C0:FC:B1:F3:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28BB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z0UvrLtJ-y-LeVnbcdWMwPyx81w.roa
Signing time: Fri 01 Sep 2023 10:05:42 +0000
ROA not before: Fri 01 Sep 2023 10:05:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10427 (0x28bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=67452FACBB49FB2F8B7959DB71D58CC0FCB1F35C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:38:7b:80:a6:8d:2d:23:1e:04:0d:54:99:
44:d6:e8:de:65:aa:11:11:c4:1e:cb:a2:b9:d1:c1:
d1:d3:50:d5:91:81:f1:56:37:3b:4a:9f:57:ab:72:
c5:9a:28:9c:50:36:96:10:72:27:0f:b7:42:2a:95:
ce:de:18:a2:e3:a7:8d:91:07:e4:d4:43:22:9b:6a:
5e:7d:17:b9:88:f7:ce:dd:9d:10:3c:64:25:f3:21:
90:49:5c:90:7f:14:ed:1e:84:5c:79:2f:5e:db:17:
a3:f3:83:8c:33:fc:9b:05:16:b5:ba:c1:fc:7a:7e:
68:85:7a:32:79:9c:47:d8:b2:d5:54:68:31:14:e6:
16:32:10:a7:5b:67:ed:20:2d:e0:ec:29:06:f8:e8:
1d:20:c8:5b:ad:88:ce:8e:17:4e:7b:50:05:09:26:
16:3a:92:d5:99:52:10:6b:7a:07:02:cb:88:42:6f:
1c:0c:4d:7f:13:48:ef:65:d2:29:74:7c:6d:22:65:
3a:bc:ba:e8:db:68:e7:30:ce:b6:0d:13:4f:c0:9b:
40:51:27:b7:a2:17:29:c9:bc:58:3d:ac:5f:86:2b:
d5:e0:0c:3d:ad:02:14:91:e1:cc:56:9a:f5:f8:a4:
80:1a:cb:37:41:9d:aa:48:e3:c6:88:86:9e:8d:e7:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:2F:AC:BB:49:FB:2F:8B:79:59:DB:71:D5:8C:C0:FC:B1:F3:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z0UvrLtJ-y-LeVnbcdWMwPyx81w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
20:2c:4c:73:ca:7c:f7:5a:1e:f0:c2:41:9f:f4:1d:eb:3d:1e:
d4:f7:29:e2:64:2d:e4:85:5e:07:5b:fc:27:80:9c:44:33:52:
29:67:d5:93:a7:0d:22:75:fa:71:8a:f9:23:86:5a:e8:a6:a6:
b7:35:f6:11:1d:91:59:76:f4:ec:b7:ac:42:30:77:e2:a5:f9:
93:ed:ce:e1:b5:71:a7:43:98:28:6c:24:0f:9f:7a:cc:54:ed:
b6:d6:82:2a:bd:f7:15:4a:1e:3a:e3:70:8f:44:b2:aa:52:38:
3e:b3:8f:db:14:6d:e7:ee:af:02:04:c3:4c:f0:40:c8:f0:b5:
1c:9e:d8:7c:48:7e:f6:c7:0e:5e:6d:9a:83:f0:32:81:c6:be:
d7:ee:5f:e4:5c:49:4b:25:8b:a9:bb:b8:8b:3f:16:75:31:2e:
d4:06:96:26:54:0e:dc:08:68:c8:b1:12:dd:82:30:e0:6c:f2:
38:cc:98:9b:06:87:67:53:98:f3:bf:7c:63:f8:74:93:0a:81:
7f:da:fd:35:c2:e1:0a:bd:75:6c:bd:53:f0:88:2d:d3:cc:cb:
44:77:f9:b1:6e:2d:0a:48:f5:8e:f9:e4:21:03:be:c1:6c:15:
f3:fc:d7:e6:a2:4a:1f:20:cf:9b:09:cf:6b:e6:91:f9:fe:5c:
77:64:8d:db
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKLswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY3NDUyRkFDQkI0OUZC
MkY4Qjc5NTlEQjcxRDU4Q0MwRkNCMUYzNUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDmzjh7gKaNLSMeBA1UmUTW6N5lqhERxB7LornRwdHTUNWRgfFW
NztKn1ercsWaKJxQNpYQcicPt0Iqlc7eGKLjp42RB+TUQyKbal59F7mI987dnRA8
ZCXzIZBJXJB/FO0ehFx5L17bF6Pzg4wz/JsFFrW6wfx6fmiFejJ5nEfYstVUaDEU
5hYyEKdbZ+0gLeDsKQb46B0gyFutiM6OF057UAUJJhY6ktWZUhBregcCy4hCbxwM
TX8TSO9l0il0fG0iZTq8uujbaOcwzrYNE0/Am0BRJ7eiFynJvFg9rF+GK9XgDD2t
AhSR4cxWmvX4pIAayzdBnapI48aIhp6N5wQzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZ0UvrLtJ+y+LeVnbcdWMwPyx81wwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1owVXZyTHRKLXktTGVWbmJj
ZFdNd1B5eDgxdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6HgwDQYJKoZIhvcNAQELBQADggEBACAsTHPKfPdaHvDCQZ/0Hes9HtT3KeJkLeSF
Xgdb/CeAnEQzUiln1ZOnDSJ1+nGK+SOGWuimprc19hEdkVl29Oy3rEIwd+Kl+ZPt
zuG1cadDmChsJA+fesxU7bbWgiq99xVKHjrjcI9EsqpSOD6zj9sUbefurwIEw0zw
QMjwtRye2HxIfvbHDl5tmoPwMoHGvtfuX+RcSUsli6m7uIs/FnUxLtQGliZUDtwI
aMixEt2CMOBs8jjMmJsGh2dTmPO/fGP4dJMKgX/a/TXC4Qq9dWy9U/CILdPMy0R3
+bFuLQpI9Y755CEDvsFsFfP81+aiSh8gz5sJz2vmkfn+XHdkjds=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org