Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/adDqP6zqQyeSbbE6LWxSfpXxVsc.roa
File: adDqP6zqQyeSbbE6LWxSfpXxVsc.roa (raw, json)
Hash identifier: F7k48pGK09u/arU/mmYzB55DI/kUHpaS+4OOSARtu28=
Subject key identifier: 69:D0:EA:3F:AC:EA:43:27:92:6D:B1:3A:2D:6C:52:7E:95:F1:56:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 287D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/adDqP6zqQyeSbbE6LWxSfpXxVsc.roa
Signing time: Fri 01 Sep 2023 10:05:24 +0000
ROA not before: Fri 01 Sep 2023 10:05:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10365 (0x287d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=69D0EA3FACEA4327926DB13A2D6C527E95F156C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:25:f8:5e:b4:cd:c1:b6:2d:1e:30:4d:01:08:
ca:ce:8d:e4:a8:0c:3b:1e:3e:c8:6d:09:53:18:b9:
5c:d3:e7:ae:19:c7:55:e4:f6:5d:ba:f1:80:67:b6:
25:dd:d6:32:de:a7:1c:cf:8b:a7:6c:03:82:65:33:
dd:ca:94:36:86:06:eb:96:e6:9a:41:67:f5:ac:41:
fd:23:95:be:7f:0a:90:63:fc:a0:be:6d:8a:77:0c:
d2:a9:d6:fd:9e:02:47:ab:4d:71:07:01:e7:12:46:
1f:b9:60:66:b4:2d:03:0f:5e:f3:53:a9:c5:4d:bd:
37:d9:43:f0:2a:68:cd:a8:3d:ca:e1:f5:e5:34:01:
31:b8:77:87:79:62:1c:cd:9e:f9:10:8a:cf:b0:51:
55:bb:8a:51:bc:40:5b:39:c6:72:21:aa:09:36:41:
a1:95:67:d0:60:11:93:15:c1:8a:d0:48:df:54:d7:
64:42:8e:6a:fb:45:62:5a:22:81:40:9c:3e:6d:d7:
9d:21:21:42:b9:cb:ad:a4:00:ad:e7:82:28:1b:08:
2b:d1:62:81:6f:36:78:af:67:e2:10:43:6e:e7:9b:
24:7f:d4:3b:6f:8f:5a:ab:66:48:37:09:21:6f:48:
6d:9d:79:e5:5f:e3:df:25:a4:3c:57:65:f4:3e:91:
d8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D0:EA:3F:AC:EA:43:27:92:6D:B1:3A:2D:6C:52:7E:95:F1:56:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/adDqP6zqQyeSbbE6LWxSfpXxVsc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.192.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:67:69:96:8a:2e:4b:f1:f3:65:8e:da:f9:8a:44:08:e4:d7:
09:97:20:1d:fd:09:a4:67:3d:d0:d9:34:db:b6:02:50:31:1e:
ee:a7:7a:c3:78:0b:0a:c5:06:9c:74:74:04:c6:e8:af:5a:f6:
d4:79:c0:9a:5d:2d:6c:ae:04:26:e9:25:32:31:48:0a:0c:4c:
d3:95:b7:2d:d7:6c:e1:89:16:dd:a1:c8:04:e9:ba:c5:8e:77:
4f:7a:6e:04:a9:d0:36:36:53:45:7e:84:9e:c7:7a:55:c4:47:
0d:9c:a8:87:f7:d9:3e:5e:e0:a0:1a:86:93:dd:3e:8b:e9:f9:
18:4b:be:1e:8b:3f:cc:ff:12:4c:aa:d5:94:9c:b9:b9:73:fe:
9a:61:17:69:28:10:b2:35:df:75:9c:07:a4:fe:13:44:44:8a:
8e:96:63:98:a3:88:11:67:16:8c:69:04:63:ab:5f:38:eb:ec:
b7:63:ef:ec:de:34:d0:4e:9c:d0:9f:fa:0e:c4:04:b1:a1:a6:
a2:4d:3d:43:1b:14:51:48:22:21:d1:2f:f7:7b:b2:eb:79:1b:
dc:90:ea:04:a8:53:03:5f:78:46:39:3e:d6:5a:9c:97:db:dc:
8c:14:7e:1d:47:46:fe:68:cd:03:bb:bb:12:1a:12:c5:30:70:
53:0f:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org