Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZvBsuDtE9EJ0kbAxr4QkQZFDjXE.roa
File: ZvBsuDtE9EJ0kbAxr4QkQZFDjXE.roa (raw, json)
Hash identifier: LifnZLFoGTb2Gnkx+OCBYwtpI1EJFVPntvglfVGrEkA=
Subject key identifier: 66:F0:6C:B8:3B:44:F4:42:74:91:B0:31:AF:84:24:41:91:43:8D:71
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2971
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZvBsuDtE9EJ0kbAxr4QkQZFDjXE.roa
Signing time: Fri 01 Sep 2023 10:06:37 +0000
ROA not before: Fri 01 Sep 2023 10:06:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10609 (0x2971)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=66F06CB83B44F4427491B031AF84244191438D71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ed:06:5a:fe:04:58:9e:bb:58:40:8c:a3:80:
3a:69:e2:ae:a8:53:86:39:15:aa:94:7a:3f:32:49:
8b:2f:50:89:7e:74:12:41:05:48:c0:77:c7:88:4a:
90:6b:d0:df:89:49:52:ac:52:8c:87:17:2f:af:67:
42:d1:b6:0f:50:d7:f5:e4:02:12:22:35:3c:6f:36:
ec:2f:50:a9:d6:3b:0a:6d:32:6f:be:aa:49:11:c9:
e1:99:92:ce:de:82:fd:2f:83:fc:52:21:d6:cd:28:
e8:a6:d4:92:e0:f9:7b:27:ef:06:01:3f:12:bb:09:
5c:fe:a4:ba:67:12:8e:df:5d:f8:b6:3e:94:2d:51:
5a:33:89:95:07:d5:25:27:bf:55:af:74:09:ae:ed:
9a:03:e1:c9:ff:b0:af:90:35:c2:3d:88:9c:95:16:
1b:42:89:c2:bd:c2:0a:2c:0d:eb:d1:c3:0e:72:09:
f2:19:4c:a1:ec:c9:a6:47:9e:df:a1:df:02:e3:bf:
5f:9c:0a:a0:6e:71:49:93:12:0f:e6:c2:ac:cf:69:
a0:cc:24:ce:98:f5:ec:6c:0b:ea:74:e0:fe:dc:6c:
e8:00:9b:ba:16:e7:79:13:b2:48:53:8b:95:d4:80:
25:36:a5:7d:bf:2c:f1:c1:f1:a0:e4:88:be:d0:fd:
7c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F0:6C:B8:3B:44:F4:42:74:91:B0:31:AF:84:24:41:91:43:8D:71
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZvBsuDtE9EJ0kbAxr4QkQZFDjXE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.118.0/24
Signature Algorithm: sha256WithRSAEncryption
28:39:87:d2:ba:d3:aa:6c:fc:d3:23:8a:0a:ca:eb:08:b4:ef:
e1:e2:34:ec:c7:59:3b:28:67:ff:c5:41:c1:b4:c9:62:d5:30:
a2:fd:6f:61:8b:99:47:f1:93:dd:05:8d:03:03:6e:d5:3d:f6:
ed:be:68:b0:7c:39:13:88:b4:09:86:8e:ac:bc:af:4d:a0:77:
08:fc:bf:07:51:ed:02:0b:85:21:5c:cc:c9:7d:46:6f:23:c7:
74:87:fc:93:fb:af:e6:bf:1a:59:20:73:ff:bc:26:86:dc:c1:
b6:91:7f:96:6c:1d:ba:06:c8:1c:19:0b:5a:12:71:a7:9b:37:
21:07:4d:b8:88:0c:17:b8:9c:34:17:66:ed:9b:10:f5:63:c8:
99:9f:12:38:bf:1a:69:15:cc:7b:65:51:bd:08:ba:d0:f1:9a:
49:2f:1b:72:39:4c:4e:bb:b9:f6:9e:a8:24:3d:6d:87:05:bf:
e5:58:5d:1b:27:a6:fb:21:04:8c:7d:1c:93:ff:b0:47:6d:de:
90:9c:e1:8f:4b:1e:02:fa:bd:db:dc:40:a9:c4:7c:39:ae:03:
5e:99:ce:ea:ad:2e:1d:cc:22:04:35:63:45:e3:61:ed:67:af:
81:cc:05:94:11:c1:aa:d4:f0:e6:b4:38:d2:08:05:a5:3b:34:
55:39:40:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org