Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_vE42jxcHTutFbliCwfTDNsts5I.roa
File: _vE42jxcHTutFbliCwfTDNsts5I.roa (raw, json)
Hash identifier: FztKt6t6HzdAC2v9QK7VOIT4ZLi1KYRyO+sdqVbZHYA=
Subject key identifier: FE:F1:38:DA:3C:5C:1D:3B:AD:15:B9:62:0B:07:D3:0C:DB:2D:B3:92
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29E9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_vE42jxcHTutFbliCwfTDNsts5I.roa
Signing time: Fri 01 Sep 2023 10:07:14 +0000
ROA not before: Fri 01 Sep 2023 10:07:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.121.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10729 (0x29e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FEF138DA3C5C1D3BAD15B9620B07D30CDB2DB392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:dd:e4:1e:99:7d:17:ae:1d:7e:b9:22:1d:
2d:92:9f:70:72:3f:52:e2:d4:c6:42:6c:d2:e4:46:
3a:dd:93:f8:df:fb:f3:99:d3:55:15:1f:38:a8:9e:
19:76:42:34:71:72:08:72:7c:02:20:1f:e6:74:b0:
89:a3:a7:53:84:8a:87:bc:06:f4:4b:d5:ad:b9:da:
4a:a2:29:71:43:5f:34:1b:ff:68:da:dd:25:f7:fc:
e9:f7:1b:3b:a3:a1:fe:87:24:4c:8c:bc:f7:8f:d6:
66:cc:3e:ca:c0:6b:de:82:20:43:41:e5:af:73:f8:
29:8e:20:91:58:13:df:f8:37:67:e8:70:cf:cc:82:
2f:9c:1e:65:1f:41:92:89:1b:63:04:03:7d:4a:0d:
42:98:ae:ff:d1:2d:91:6c:7c:cf:57:d1:67:56:39:
10:b5:66:10:5e:81:01:41:24:fb:66:61:44:08:3e:
9f:ec:dd:b8:3d:12:9a:51:83:10:f4:d8:0e:db:3c:
ce:12:5b:44:7c:5d:03:90:c8:b4:e6:8c:fe:b3:63:
ef:23:82:bc:38:14:70:24:98:a0:72:51:e9:0c:94:
71:2d:7c:d4:c6:3c:01:56:35:ae:6b:8c:74:62:da:
f8:f5:58:06:f3:90:e4:2f:86:cc:2a:ee:3c:80:36:
db:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F1:38:DA:3C:5C:1D:3B:AD:15:B9:62:0B:07:D3:0C:DB:2D:B3:92
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_vE42jxcHTutFbliCwfTDNsts5I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.121.128/25
Signature Algorithm: sha256WithRSAEncryption
3a:05:91:56:57:ad:85:b9:0c:68:b7:20:1d:50:0f:39:33:d0:
3a:0f:2d:d8:b6:d6:b2:43:64:d9:d1:7a:a8:5d:12:e5:76:c1:
67:8f:0c:68:1b:24:84:c0:12:67:7b:8b:d1:30:8c:26:47:25:
32:3f:a6:1b:4d:23:dd:4d:ea:f7:91:b7:6f:3f:a1:f0:77:09:
d5:41:1b:52:6e:11:c2:a3:45:cf:f2:12:f4:df:f2:f1:6f:f1:
e5:04:59:3d:1a:cb:9b:f0:90:d9:17:09:9f:64:e3:4d:26:8d:
c6:79:15:b4:16:50:0f:93:45:a1:4a:63:8d:bd:b2:bd:37:1c:
76:d0:5b:4a:d0:47:6c:8a:45:43:bf:9d:1c:94:fb:41:2a:d6:
8b:ee:b0:5c:b4:35:7e:c8:4e:1a:f5:45:38:d6:7e:79:b2:6a:
6a:97:16:47:b1:23:01:ed:f7:91:f8:1e:b0:eb:b9:ce:cb:5f:
51:15:d6:95:76:10:a8:1e:48:5c:c8:d2:97:29:29:18:4f:4d:
31:90:33:3d:90:a3:7e:42:f9:09:3b:1e:5c:4b:a5:d8:81:34:
58:b5:52:78:d5:a4:28:2e:05:25:89:01:d0:6d:07:4e:0a:b0:
e5:28:f4:d8:89:33:1f:32:a9:0a:dc:dc:85:74:fa:a7:41:40:
f5:d1:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org