Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap4OUyVbKPVgBgCRX7MuP_AEnfo.roa
File: ap4OUyVbKPVgBgCRX7MuP_AEnfo.roa (raw, json)
Hash identifier: 2EQBeOd6rv9LXHnFSxxRwTYfGSZeo3RQOO1Kkkm/g08=
Subject key identifier: 6A:9E:0E:53:25:5B:28:F5:60:06:00:91:5F:B3:2E:3F:F0:04:9D:FA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AE4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap4OUyVbKPVgBgCRX7MuP_AEnfo.roa
Signing time: Fri 01 Sep 2023 10:08:24 +0000
ROA not before: Fri 01 Sep 2023 10:08:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.240.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10980 (0x2ae4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6A9E0E53255B28F5600600915FB32E3FF0049DFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:79:d9:10:50:32:f0:10:93:0a:ea:f3:5f:
7d:f0:f8:97:36:02:7e:b9:e3:c7:e2:61:6a:05:9b:
b6:de:26:4b:d8:c2:55:87:1c:2b:82:4c:8d:9b:79:
9d:ef:dc:7d:28:c3:51:eb:99:a2:ce:42:6b:0a:f2:
de:c5:5c:92:ca:7f:89:8e:56:97:3d:e4:64:a2:d1:
fc:52:a0:ff:09:2c:88:52:89:e7:a3:eb:87:1c:7d:
9e:44:86:3d:d5:86:02:3b:f6:1c:dc:1a:7b:8c:da:
4c:74:d0:35:f1:b5:03:ac:3b:6d:38:1f:04:76:1b:
b8:8a:87:81:02:3e:f5:b4:8c:fe:d9:d9:50:11:57:
76:fd:35:85:23:9a:f6:a4:ef:45:1b:13:24:19:eb:
6f:66:67:78:63:48:ba:46:2d:c7:86:60:a3:aa:1a:
8b:09:ae:08:49:02:77:e0:59:fe:8e:97:d0:cc:fd:
ef:3c:b3:0d:d7:89:00:b1:6c:0d:95:0e:67:51:54:
f0:c3:e0:0a:ea:b8:25:ad:06:c5:80:d4:0f:2b:07:
20:6d:b1:ad:e9:2c:1e:37:dc:9b:b5:a1:0d:2e:af:
a2:4f:cd:97:de:05:cc:3d:06:fe:2d:5c:0c:74:3e:
f5:de:07:fe:05:55:7c:7c:8f:d9:74:15:bb:86:be:
42:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9E:0E:53:25:5B:28:F5:60:06:00:91:5F:B3:2E:3F:F0:04:9D:FA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ap4OUyVbKPVgBgCRX7MuP_AEnfo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.240.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:5b:33:1a:eb:ca:51:c3:21:e7:87:53:e7:82:39:3b:39:32:
97:7e:e7:b7:67:8b:65:8f:39:17:88:2b:31:a7:a9:e8:b3:f8:
98:07:3f:f1:76:10:14:e5:63:21:5d:64:aa:f6:b7:3b:c4:aa:
bd:3d:1f:48:d1:3c:14:e0:49:8c:05:2a:22:22:31:26:3f:08:
0a:d6:42:16:d7:0d:75:b5:fd:c7:83:2d:ca:ed:1d:b2:34:79:
b9:84:69:b8:6c:41:9b:89:47:ef:78:9e:e2:96:a4:79:cb:20:
f5:3f:b0:ed:eb:72:a0:e6:3c:c5:77:5f:6d:f5:92:ee:12:a9:
16:12:2a:98:c8:e6:8d:27:e2:02:70:6e:0d:61:c7:57:51:91:
b6:df:61:a5:34:e4:af:7a:01:3b:20:43:f1:45:7b:cb:ba:d2:
ae:28:7f:22:6c:08:4f:e8:46:d0:3c:79:4e:57:03:05:b7:1a:
33:61:70:eb:ea:9e:28:54:4f:fa:3d:61:61:70:5d:75:b5:26:
98:3b:6b:c3:8b:2b:98:66:11:5b:1d:52:35:59:8c:7a:2d:bd:
0d:b0:6f:13:3c:47:df:03:17:2d:47:8b:48:54:bb:d3:94:4c:
20:79:5f:d0:6b:ad:35:fd:1f:df:4a:fc:d5:2b:d4:1d:ed:cd:
ca:0d:fc:11
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKuQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MjRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZBOUUwRTUzMjU1QjI4
RjU2MDA2MDA5MTVGQjMyRTNGRjAwNDlERkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUXXnZEFAy8BCTCurzX33w+Jc2An6548fiYWoFm7beJkvYwlWH
HCuCTI2beZ3v3H0ow1HrmaLOQmsK8t7FXJLKf4mOVpc95GSi0fxSoP8JLIhSieej
64ccfZ5Ehj3VhgI79hzcGnuM2kx00DXxtQOsO204HwR2G7iKh4ECPvW0jP7Z2VAR
V3b9NYUjmvak70UbEyQZ629mZ3hjSLpGLceGYKOqGosJrghJAnfgWf6Ol9DM/e88
sw3XiQCxbA2VDmdRVPDD4ArquCWtBsWA1A8rByBtsa3pLB433Ju1oQ0ur6JPzZfe
Bcw9Bv4tXAx0PvXeB/4FVXx8j9l0FbuGvkLFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUap4OUyVbKPVgBgCRX7MuP/AEnfowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2FwNE9VeVZiS1BWZ0JnQ1JY
N011UF9BRW5mby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6PAwDQYJKoZIhvcNAQELBQADggEBAGpbMxrrylHDIeeHU+eCOTs5Mpd+57dni2WP
OReIKzGnqeiz+JgHP/F2EBTlYyFdZKr2tzvEqr09H0jRPBTgSYwFKiIiMSY/CArW
QhbXDXW1/ceDLcrtHbI0ebmEabhsQZuJR+94nuKWpHnLIPU/sO3rcqDmPMV3X231
ku4SqRYSKpjI5o0n4gJwbg1hx1dRkbbfYaU05K96ATsgQ/FFe8u60q4ofyJsCE/o
RtA8eU5XAwW3GjNhcOvqnihUT/o9YWFwXXW1Jpg7a8OLK5hmEVsdUjVZjHotvQ2w
bxM8R98DFy1Hi0hUu9OUTCB5X9BrrTX9H99K/NUr1B3tzcoN/BE=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org