Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/azv49wOfpbjzHDOip-KvgBK3FH4.roa
File: azv49wOfpbjzHDOip-KvgBK3FH4.roa (raw, json)
Hash identifier: tYN2ZVXN+yuMa/kareIlWzJxHRU28Icw+qM64/i8r10=
Subject key identifier: 6B:3B:F8:F7:03:9F:A5:B8:F3:1C:33:A2:A7:E2:AF:80:12:B7:14:7E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2899
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/azv49wOfpbjzHDOip-KvgBK3FH4.roa
Signing time: Fri 01 Sep 2023 10:05:33 +0000
ROA not before: Fri 01 Sep 2023 10:05:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10393 (0x2899)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6B3BF8F7039FA5B8F31C33A2A7E2AF8012B7147E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:54:e2:b3:d9:00:b9:c3:d4:9d:07:c1:8d:
6d:04:06:f9:bf:c8:33:50:bb:a3:a1:28:79:37:3e:
01:61:e0:e7:e5:92:a9:57:18:71:fd:4b:0c:c6:98:
5b:3d:4c:9c:d0:0b:8e:cc:f5:74:4e:f6:7c:e4:aa:
1e:78:1f:1e:2c:89:f2:50:c5:b4:aa:13:4a:8b:08:
f9:27:82:23:35:dc:ad:14:f6:1e:ad:9e:1b:61:7d:
25:bc:85:f5:5f:79:8d:19:66:02:0d:c4:e0:a3:c7:
08:81:93:b5:9a:2b:6a:8b:ef:18:3c:5f:02:e0:a7:
1b:e2:81:ca:53:89:15:b6:f0:c8:41:84:2f:ec:84:
46:b3:ce:f2:1c:71:ce:17:21:14:aa:5a:30:40:60:
00:cf:5d:8f:97:85:ea:c8:b1:6e:28:9f:3f:aa:2e:
71:b6:79:3c:cb:21:19:6f:23:32:ef:a8:e1:ed:84:
96:24:25:7b:d2:93:18:e9:9a:64:7f:87:10:33:20:
ea:8e:82:2e:df:c4:9a:4c:ba:88:a7:ff:7e:97:2c:
8e:11:17:ce:09:e7:1c:5c:e3:49:64:5d:1a:78:04:
3f:01:e0:8f:78:db:2e:fe:06:fc:e2:68:c1:34:3f:
14:fb:4c:d4:2a:50:bd:a8:42:87:16:0d:0a:ef:48:
52:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:3B:F8:F7:03:9F:A5:B8:F3:1C:33:A2:A7:E2:AF:80:12:B7:14:7E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/azv49wOfpbjzHDOip-KvgBK3FH4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.157.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f9:8b:a8:c1:77:c9:91:b2:96:0b:44:9d:7c:17:7d:24:7c:
47:23:cd:6c:35:07:2f:0b:4b:fa:85:b6:d5:44:81:a5:62:ac:
c8:3a:f6:ae:f9:85:96:b5:d9:62:d0:44:2b:0a:d7:20:01:80:
bb:20:cd:80:6d:54:13:40:a0:15:32:2a:77:6b:e4:e9:5b:26:
20:a9:83:14:cc:91:f9:8c:f2:18:80:41:72:d3:8b:33:bc:66:
1f:e4:bd:69:17:43:44:a7:9b:00:58:48:d4:80:5b:60:9c:57:
3a:37:28:70:8a:c0:a0:58:43:01:73:ec:57:44:58:76:11:85:
6e:91:d0:a2:24:4d:78:c4:e6:6b:2b:8a:b0:03:94:24:d8:34:
1c:07:c0:a8:4e:a9:97:12:7d:15:94:5b:07:ea:0c:3e:12:55:
cc:32:44:91:b3:03:e0:e4:65:cb:95:1e:dd:ec:08:15:b5:5b:
e4:b6:4a:64:04:5d:e0:54:c5:e8:fd:22:b9:b0:06:63:f2:ac:
a7:ea:2e:3e:b6:b4:19:7f:da:99:8b:a7:31:4a:e9:fa:ba:3b:
04:e1:ec:d1:c7:e3:00:03:b3:be:f1:d0:30:d9:a9:98:09:ab:
4e:cb:71:76:94:df:d6:ce:c5:a2:8f:e7:99:40:79:39:96:56:
dd:85:c7:7e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKJkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MzNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZCM0JGOEY3MDM5RkE1
QjhGMzFDMzNBMkE3RTJBRjgwMTJCNzE0N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+WlTis9kAucPUnQfBjW0EBvm/yDNQu6OhKHk3PgFh4OflkqlX
GHH9SwzGmFs9TJzQC47M9XRO9nzkqh54Hx4sifJQxbSqE0qLCPkngiM13K0U9h6t
nhthfSW8hfVfeY0ZZgINxOCjxwiBk7WaK2qL7xg8XwLgpxvigcpTiRW28MhBhC/s
hEazzvIccc4XIRSqWjBAYADPXY+XherIsW4onz+qLnG2eTzLIRlvIzLvqOHthJYk
JXvSkxjpmmR/hxAzIOqOgi7fxJpMuoin/36XLI4RF84J5xxc40lkXRp4BD8B4I94
2y7+BvziaME0PxT7TNQqUL2oQocWDQrvSFITAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUazv49wOfpbjzHDOip+KvgBK3FH4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2F6djQ5d09mcGJqekhET2lw
LUt2Z0JLM0ZINC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC0
sJ0wDQYJKoZIhvcNAQELBQADggEBAGL5i6jBd8mRspYLRJ18F30kfEcjzWw1By8L
S/qFttVEgaVirMg69q75hZa12WLQRCsK1yABgLsgzYBtVBNAoBUyKndr5OlbJiCp
gxTMkfmM8hiAQXLTizO8Zh/kvWkXQ0SnmwBYSNSAW2CcVzo3KHCKwKBYQwFz7FdE
WHYRhW6R0KIkTXjE5msrirADlCTYNBwHwKhOqZcSfRWUWwfqDD4SVcwyRJGzA+Dk
ZcuVHt3sCBW1W+S2SmQEXeBUxej9IrmwBmPyrKfqLj62tBl/2pmLpzFK6fq6OwTh
7NHH4wADs77x0DDZqZgJq07LcXaU39bOxaKP55lAeTmWVt2Fx34=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org