Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcqL7v3aOMRhTdFcBmUMS2Pu4VE.roa
File: ZcqL7v3aOMRhTdFcBmUMS2Pu4VE.roa (raw, json)
Hash identifier: 7NJLJGn/pSv6ZVN+fKnwx/83BMyhJiAwqP3CR4m/dcc=
Subject key identifier: 65:CA:8B:EE:FD:DA:38:C4:61:4D:D1:5C:06:65:0C:4B:63:EE:E1:51
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A16
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcqL7v3aOMRhTdFcBmUMS2Pu4VE.roa
Signing time: Fri 01 Sep 2023 10:07:29 +0000
ROA not before: Fri 01 Sep 2023 10:07:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 2407:4d00:ff02::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10774 (0x2a16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=65CA8BEEFDDA38C4614DD15C06650C4B63EEE151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9f:2b:b6:9c:80:08:fb:ce:a6:87:57:c4:51:
ed:b9:4b:56:f3:f4:c9:1f:a6:ca:ce:d6:9d:e8:b9:
db:49:96:dd:89:af:4a:15:5e:10:f0:bd:23:ce:8d:
ea:3c:85:1b:44:6f:e8:97:ab:ea:7e:85:4c:5f:4f:
bb:68:e0:0a:69:dc:d6:c5:6e:15:d1:13:20:53:49:
74:5b:0e:62:d8:02:df:90:7e:e7:d8:f8:10:ec:fa:
5a:1b:b6:b9:49:8b:fe:29:72:13:52:13:5e:4e:c8:
ff:e6:0b:f1:6a:de:8e:16:95:4a:fe:02:71:d5:0e:
82:9f:02:0a:4f:80:c4:92:1b:5b:d9:d4:15:09:53:
df:78:04:8f:01:7b:e5:51:b4:66:a9:5e:6c:b3:f9:
42:b0:0c:46:b4:08:81:95:73:5e:c1:92:17:74:2f:
2c:2c:08:fd:50:a2:d6:26:1d:c4:06:32:24:7e:31:
55:f7:37:35:fc:fb:3b:76:24:84:c7:78:75:98:1c:
06:7f:bb:70:56:d2:0a:37:a6:17:0d:f2:50:8e:bf:
9b:91:d4:6d:10:5e:e4:c6:15:e0:da:3d:eb:e9:bd:
92:37:f0:82:e3:1e:c1:c1:67:dc:29:a2:0f:39:6f:
fe:7f:eb:7b:39:f7:3d:50:a5:57:5c:c8:10:c9:84:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CA:8B:EE:FD:DA:38:C4:61:4D:D1:5C:06:65:0C:4B:63:EE:E1:51
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZcqL7v3aOMRhTdFcBmUMS2Pu4VE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2407:4d00:ff02::/48
Signature Algorithm: sha256WithRSAEncryption
6f:f8:48:07:0b:e5:4c:18:ed:c5:77:68:86:5d:c1:33:c3:08:
e9:07:6f:35:cc:2f:fb:21:e0:bc:79:a7:7e:f3:91:9b:33:1a:
ed:4d:a0:60:bb:41:77:c8:26:56:15:ee:e4:00:b8:b6:10:17:
d9:0a:50:26:a6:fb:67:d9:8b:60:49:96:65:62:a6:e8:ca:e2:
d2:7a:9d:ba:29:3b:b8:36:d9:e2:fa:2d:79:42:cb:3d:9d:6f:
bc:33:10:84:ed:57:3a:74:25:17:30:1a:d5:1b:be:bd:de:c4:
0c:1a:d1:f6:3e:fa:af:e6:db:52:a1:6b:e0:e8:90:1c:2d:fa:
da:88:15:67:b0:67:f7:76:75:d2:9a:16:5f:35:ba:8f:5b:f1:
61:bc:8c:8c:8a:31:cd:40:a5:f4:5e:37:e6:fc:49:4d:ca:75:
02:49:2c:41:ab:0b:fb:17:37:19:7e:be:d3:fd:f5:db:d6:a1:
10:97:5e:c6:7a:c3:37:8f:89:fb:05:f8:d3:5a:56:f4:bd:54:
d0:74:82:32:d3:03:b1:fb:46:48:20:1d:40:27:01:f7:51:99:
40:eb:7f:a6:35:3c:4f:6c:8f:98:f1:cf:54:b2:df:a3:5f:a2:
38:c5:2e:20:f8:d3:be:8b:87:72:a7:96:12:f1:7a:ba:a5:33:
12:68:09:b5
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICKhYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY1Q0E4QkVFRkREQTM4
QzQ2MTRERDE1QzA2NjUwQzRCNjNFRUUxNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqnyu2nIAI+86mh1fEUe25S1bz9MkfpsrO1p3oudtJlt2Jr0oV
XhDwvSPOjeo8hRtEb+iXq+p+hUxfT7to4App3NbFbhXREyBTSXRbDmLYAt+QfufY
+BDs+lobtrlJi/4pchNSE15OyP/mC/Fq3o4WlUr+AnHVDoKfAgpPgMSSG1vZ1BUJ
U994BI8Be+VRtGapXmyz+UKwDEa0CIGVc17Bkhd0LywsCP1QotYmHcQGMiR+MVX3
NzX8+zt2JITHeHWYHAZ/u3BW0go3phcN8lCOv5uR1G0QXuTGFeDaPevpvZI38ILj
HsHBZ9wpog85b/5/63s59z1QpVdcyBDJhO9PAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUZcqL7v3aOMRhTdFcBmUMS2Pu4VEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1pjcUw3djNhT01SaFRkRmNC
bVVNUzJQdTRWRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
B00A/wIwDQYJKoZIhvcNAQELBQADggEBAG/4SAcL5UwY7cV3aIZdwTPDCOkHbzXM
L/sh4Lx5p37zkZszGu1NoGC7QXfIJlYV7uQAuLYQF9kKUCam+2fZi2BJlmVipujK
4tJ6nbopO7g22eL6LXlCyz2db7wzEITtVzp0JRcwGtUbvr3exAwa0fY++q/m21Kh
a+DokBwt+tqIFWewZ/d2ddKaFl81uo9b8WG8jIyKMc1ApfReN+b8SU3KdQJJLEGr
C/sXNxl+vtP99dvWoRCXXsZ6wzePifsF+NNaVvS9VNB0gjLTA7H7RkggHUAnAfdR
mUDrf6Y1PE9sj5jxz1Sy36NfojjFLiD4076Lh3KnlhLxerqlMxJoCbU=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org