Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KJPh7BwKQckn0vc4_rwcGG1DcA.roa
File: _KJPh7BwKQckn0vc4_rwcGG1DcA.roa (raw, json)
Hash identifier: LWrIG1HMfZNob5R10tIoz2zewRooZCZPSbP5UYiuIUI=
Subject key identifier: FC:A2:4F:87:B0:70:29:07:24:9F:4B:DC:E3:FA:F0:70:61:B5:0D:C0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B2B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KJPh7BwKQckn0vc4_rwcGG1DcA.roa
Signing time: Fri 01 Sep 2023 10:09:56 +0000
ROA not before: Fri 01 Sep 2023 10:09:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11051 (0x2b2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FCA24F87B0702907249F4BDCE3FAF07061B50DC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2c:bf:f4:24:31:11:2c:67:20:20:84:e9:9e:
b5:17:c4:47:dd:6f:06:03:3c:0b:c7:07:fe:5b:35:
aa:6d:23:be:c5:25:f8:61:c3:70:06:ab:38:67:5f:
84:9f:5c:e8:17:d5:f5:5c:b1:84:09:05:5c:11:69:
a0:e0:8e:53:33:e6:3e:a3:35:7c:40:e7:10:07:11:
66:20:17:b3:5b:5f:8f:4f:68:2d:1d:2d:25:13:20:
e8:bd:ca:aa:24:f4:52:f9:39:e5:c9:6e:2a:79:2a:
a4:bb:e2:49:27:ee:e0:91:05:c8:71:fb:73:0a:45:
cb:42:7d:fc:61:95:64:ed:28:b7:93:3c:69:db:08:
ad:b0:ee:1f:ce:8b:97:98:54:f0:5e:16:ff:40:94:
70:5b:4c:61:44:1c:32:94:53:3a:60:36:81:52:73:
a6:c3:3a:32:9a:94:2b:5b:6a:38:de:4a:d3:75:19:
17:cc:3e:27:b6:11:cb:04:f2:dc:f0:91:f4:4d:19:
1c:70:fc:6a:1d:fd:33:8d:59:91:9d:98:03:2f:13:
21:b2:3b:1e:08:cc:c1:34:35:b1:9c:4c:eb:23:d7:
46:e1:d2:6c:72:db:97:a5:db:18:a9:32:d1:3b:65:
9c:33:6f:63:5d:c9:4c:8d:58:aa:cb:2f:49:4b:d4:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A2:4F:87:B0:70:29:07:24:9F:4B:DC:E3:FA:F0:70:61:B5:0D:C0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_KJPh7BwKQckn0vc4_rwcGG1DcA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.216.0/21
Signature Algorithm: sha256WithRSAEncryption
65:fa:44:da:8d:cd:09:8d:b5:20:ac:69:e9:c7:91:5e:44:4d:
93:98:c4:e2:80:57:de:67:13:cf:8d:c3:52:8a:b4:09:56:77:
7a:65:c3:e2:f7:73:11:82:3c:f3:e6:c0:cb:6e:70:6e:bc:13:
53:1f:19:a4:ee:eb:a7:59:df:f5:61:b6:fc:ee:d6:68:32:9e:
56:0d:0f:89:38:05:ee:9a:81:07:1a:c1:20:5a:bb:33:5e:8e:
61:b3:96:21:9e:d5:f8:6f:93:2a:ed:9e:85:ce:e3:31:a5:85:
e6:f9:6e:e4:f8:82:0f:80:91:ce:7f:6f:00:64:ef:f1:a6:ce:
e2:a8:fe:5c:6b:74:7f:5c:a8:41:d2:ea:d8:a4:09:19:d6:32:
e2:a5:e0:5b:53:a5:84:6d:ef:5f:a2:c4:fc:2c:82:3a:69:2a:
b2:d9:52:ec:87:1f:70:cf:02:51:b5:d2:f8:3c:05:18:12:69:
56:9e:04:4f:23:f6:77:bf:57:63:06:4b:d6:2e:8e:4a:d6:57:
a4:9a:97:b7:65:27:8e:d3:79:1b:2c:3e:04:bd:1e:64:00:f2:
f9:b4:40:5d:b5:ce:3f:4a:b1:7f:99:8a:7d:5a:f7:f9:e4:a9:
22:e1:ed:a7:3c:cc:cb:3e:7c:7b:41:a2:a2:1e:11:e0:2a:bf:
dd:9c:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org