Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/__Nrq1weCPp9gyrDQ22YlMwSxxE.roa
File: __Nrq1weCPp9gyrDQ22YlMwSxxE.roa (raw, json)
Hash identifier: UR9ZCD7rmF/wL/dZVohLq9jybm1ANQhEwkdhqPBazgg=
Subject key identifier: FF:F3:6B:AB:5C:1E:08:FA:7D:83:2A:C3:43:6D:98:94:CC:12:C7:11
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A21
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/__Nrq1weCPp9gyrDQ22YlMwSxxE.roa
Signing time: Fri 01 Sep 2023 10:07:31 +0000
ROA not before: Fri 01 Sep 2023 10:07:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10785 (0x2a21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FFF36BAB5C1E08FA7D832AC3436D9894CC12C711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:98:00:ab:56:75:4c:32:c1:e0:b1:bb:d0:
a0:61:49:39:df:ac:83:ca:1c:94:69:79:20:b6:2b:
93:c3:5c:40:45:99:c7:38:ee:e0:00:d5:46:22:2a:
29:c0:10:66:5c:87:34:5a:31:72:4f:e9:9f:fd:b6:
bc:0b:6d:16:05:98:ea:98:af:fe:83:a6:99:32:7d:
31:0f:88:8c:ae:66:42:71:15:24:e3:b5:7e:ed:e0:
f3:b6:f6:b6:39:be:75:a3:cc:da:4a:cf:35:0b:be:
f9:a9:f3:2c:8a:1b:ca:a3:59:91:4c:2f:92:66:dd:
cd:c6:80:15:e9:21:55:7d:f1:d1:06:16:72:96:54:
b7:72:0f:9a:0a:d5:e2:95:1a:1c:35:d1:6f:8e:40:
18:89:09:81:8a:ec:ab:57:68:fc:76:09:d7:9d:c9:
8c:a3:63:49:22:c2:8f:40:a4:ca:8d:21:b4:af:d4:
ea:95:de:21:9a:15:bb:2b:0f:ac:37:08:b8:3e:73:
a9:82:4a:fb:ec:01:ed:32:37:1f:94:68:e8:de:50:
7a:a5:90:5f:65:1a:f5:2c:b1:9a:cb:c8:1a:49:40:
03:f9:07:a6:0a:88:51:86:52:5f:cf:34:e5:dd:64:
54:7e:17:84:f0:04:b1:cf:02:0e:3a:b0:e4:5d:cd:
0b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F3:6B:AB:5C:1E:08:FA:7D:83:2A:C3:43:6D:98:94:CC:12:C7:11
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/__Nrq1weCPp9gyrDQ22YlMwSxxE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.240.0/23
Signature Algorithm: sha256WithRSAEncryption
48:f7:7c:e4:f7:3f:2f:ae:63:15:4a:78:da:f5:a6:6f:64:23:
d3:0d:93:09:d2:e2:2e:7d:87:df:93:76:b3:57:2b:e1:51:c2:
40:75:02:6d:15:92:a6:b4:02:90:79:8f:db:11:7b:51:86:ce:
c9:77:7b:da:d9:50:db:f2:92:13:3a:b7:91:ca:a8:ca:bc:fc:
31:76:69:30:cc:27:7b:a4:59:8e:cb:4a:06:06:eb:ee:a5:a9:
e7:99:92:4b:16:55:77:f2:17:09:46:8d:05:02:01:89:bf:a3:
99:33:f3:72:ac:0f:e2:86:51:fd:87:d9:32:55:e5:7e:f3:7d:
1f:5b:54:ef:c6:08:40:03:78:07:56:a0:92:74:a8:81:5c:2d:
a8:13:ba:e1:88:a8:6b:a2:90:f4:a8:c4:66:80:c9:d6:33:59:
2f:e2:f9:98:8e:13:6e:7f:59:c3:6a:df:ab:a8:f0:e3:9f:ec:
7b:80:11:08:a5:d4:bf:d3:7c:76:b5:09:99:97:80:7e:69:83:
62:f0:a2:0c:5a:27:e0:0b:60:01:c0:4f:34:6c:0f:40:e0:9f:
48:01:76:06:0b:3c:5e:b5:63:03:5b:b3:b5:cc:e2:cc:5d:b6:
83:a9:f4:b5:98:67:4f:0d:3c:a5:2f:ad:cf:7c:e7:fc:28:6e:
c5:84:11:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org