Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zl065sJ1BHpF0TqLRBY4PdtSwZc.roa
File: Zl065sJ1BHpF0TqLRBY4PdtSwZc.roa (raw, json)
Hash identifier: pYLViv2TVX9xoluHggIihDNNUQM9ZeA+f4dNQvm0ycs=
Subject key identifier: 66:5D:3A:E6:C2:75:04:7A:45:D1:3A:8B:44:16:38:3D:DB:52:C1:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29A4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zl065sJ1BHpF0TqLRBY4PdtSwZc.roa
Signing time: Fri 01 Sep 2023 10:06:52 +0000
ROA not before: Fri 01 Sep 2023 10:06:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10660 (0x29a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=665D3AE6C275047A45D13A8B4416383DDB52C197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:e6:82:d7:f9:c6:7c:a5:97:b4:7e:15:20:
9a:dc:58:5f:b3:3b:7f:a7:e2:c2:79:18:2b:f5:02:
75:54:15:89:f2:22:51:e4:91:9c:bf:a4:b6:f4:60:
ba:5c:71:af:9b:28:f7:51:38:63:44:b2:4b:77:82:
e4:39:35:c6:5f:75:3b:80:fe:2f:d7:67:3b:ec:cb:
7b:8c:0d:3d:47:7e:5a:54:6b:b3:b7:9a:a7:c7:b6:
86:87:0b:59:d8:66:53:e0:3a:38:c6:f2:d6:f5:e9:
ed:62:1c:77:91:e6:01:51:15:39:40:08:db:fd:c0:
fc:fb:bf:8f:b8:d5:76:c6:8d:31:f2:42:40:f1:b9:
1d:45:e0:47:2b:ac:f2:aa:d5:fb:32:b1:2a:84:82:
38:92:f3:63:99:3a:6c:df:4d:79:c1:a8:59:11:8a:
2c:c7:e3:84:3b:ee:d9:84:2f:a9:37:18:15:2e:10:
70:62:ff:0f:1b:e1:1c:40:ff:ce:58:4a:36:4b:69:
cc:65:13:ab:7f:84:71:e0:a5:5c:09:cb:ed:a0:12:
2d:a1:7b:01:58:4d:b8:28:5d:dc:27:11:89:ee:a1:
4b:69:20:28:ff:6a:f7:00:7c:f7:1b:a6:80:89:5b:
c4:03:aa:97:12:81:f9:48:1d:7a:fa:ab:42:00:85:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5D:3A:E6:C2:75:04:7A:45:D1:3A:8B:44:16:38:3D:DB:52:C1:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Zl065sJ1BHpF0TqLRBY4PdtSwZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:11:55:a2:5c:dd:5d:0c:fd:67:27:66:ca:5e:31:58:bf:5d:
ed:f3:b7:20:78:32:35:8d:f5:36:fa:61:e5:80:22:83:9b:f8:
e9:aa:f3:e3:c8:d2:d1:77:05:ea:a2:24:df:75:5b:b9:fe:a8:
0b:cb:51:3b:4f:31:53:2e:65:ff:cc:c4:d1:eb:04:08:b9:f5:
7e:aa:b5:2b:30:d7:ad:bd:81:fe:e6:56:a3:74:73:de:60:56:
b6:db:eb:8b:47:a8:7f:7d:f3:03:3f:75:be:9c:8e:64:d8:a7:
4f:71:72:b0:ae:65:a2:33:6b:12:fb:60:c4:df:ce:67:f9:f8:
a7:05:5c:28:ce:ec:ea:d9:48:10:4c:76:c5:e4:0a:72:18:9c:
5d:dc:eb:68:97:27:2e:dd:2c:5c:dd:0b:5c:0c:f5:3e:2c:98:
48:78:e4:9e:b5:c5:1f:d8:8a:59:5a:2c:3c:66:6d:fc:66:09:
01:d0:bf:aa:c2:b3:b9:76:0c:d7:57:25:0e:a4:3f:a5:74:d7:
11:aa:7c:bc:75:d2:ad:57:80:4e:2d:e5:b7:d7:c4:0c:d2:93:
f4:81:2a:f1:55:f4:f4:a6:0e:f5:c3:66:90:c6:78:5c:93:17:
d3:2c:c8:c5:b1:f3:b7:96:fc:d7:c6:db:82:f1:73:d0:df:db:
5a:98:06:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org