Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bQLzwOT6n2RvAZ6oPcFS8eht9r8.roa
File: bQLzwOT6n2RvAZ6oPcFS8eht9r8.roa (raw, json)
Hash identifier: GA6vxF4yuJJeXdQP4c5o8rHWxU/Q6b0fwPd/XTDwc3E=
Subject key identifier: 6D:02:F3:C0:E4:FA:9F:64:6F:01:9E:A8:3D:C1:52:F1:E8:6D:F6:BF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A74
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bQLzwOT6n2RvAZ6oPcFS8eht9r8.roa
Signing time: Fri 01 Sep 2023 10:07:55 +0000
ROA not before: Fri 01 Sep 2023 10:07:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10868 (0x2a74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6D02F3C0E4FA9F646F019EA83DC152F1E86DF6BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:c6:4a:92:2f:bd:de:9c:34:e7:da:78:85:
65:96:f1:ca:22:67:4d:39:9f:d8:1f:2d:46:35:75:
7e:dd:ad:c5:e6:87:2c:42:a9:ae:c6:3e:b1:e7:f3:
d2:c6:12:44:06:0b:4d:18:31:76:8b:7d:f4:05:d7:
47:4c:92:69:cf:39:b7:8e:26:f8:a9:c7:5d:72:5f:
e3:fd:a0:ee:6a:9a:cd:73:81:e4:70:06:52:58:7b:
ae:a4:7f:f9:04:54:2c:d9:57:0d:1c:fe:cb:09:62:
9e:b0:b1:79:7d:b9:ad:b4:95:e5:79:c8:03:c8:a3:
66:e4:5f:f2:52:62:2a:a9:1d:af:f4:36:85:89:56:
22:c9:8c:d5:64:e7:7b:d8:79:06:6f:2f:8b:d1:27:
97:d7:f0:61:f8:be:66:b5:e6:2f:30:5c:7e:17:9d:
0a:5d:90:73:4e:83:0b:c5:e9:ed:ef:58:d1:92:8a:
3b:9c:25:55:07:67:04:24:39:f7:a0:eb:c1:b4:ad:
c9:f2:32:53:15:bf:32:01:34:d7:25:0e:93:6e:fb:
8a:7e:17:3d:51:a3:a2:ba:88:6a:d2:4b:a4:d2:ac:
b2:b9:0c:fe:b3:42:79:07:7b:36:62:61:b8:e9:9b:
28:ff:25:7e:71:59:03:a3:46:f7:d5:ec:55:ac:14:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:02:F3:C0:E4:FA:9F:64:6F:01:9E:A8:3D:C1:52:F1:E8:6D:F6:BF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bQLzwOT6n2RvAZ6oPcFS8eht9r8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/20
Signature Algorithm: sha256WithRSAEncryption
82:c7:d8:89:b8:09:f4:dd:72:cc:18:9f:78:9f:1d:57:2e:f5:
a3:1f:ca:5a:52:8e:dd:fd:80:fb:b2:2c:19:de:a3:a5:1a:6b:
bf:98:bb:ae:02:55:c6:5a:a3:59:45:d4:28:74:f8:b6:3a:68:
7f:1c:66:ac:55:4d:66:31:99:df:4c:2c:d9:ec:b4:ad:8c:2e:
bb:0d:e4:47:da:a5:11:85:2c:4a:cc:f7:40:d2:66:41:a5:6a:
7f:a7:e5:f4:df:ac:a0:c1:4b:3c:64:48:aa:9e:ee:3c:cd:4c:
ed:45:c2:35:df:96:50:3e:f6:74:a8:6b:46:a2:94:35:35:fd:
8f:1e:81:ed:d8:61:cc:2e:08:bb:7c:aa:d3:d7:6e:4f:88:d7:
10:df:e6:a3:50:dc:fe:dc:8a:ab:b7:39:47:31:2b:a9:c2:e5:
88:2d:04:07:f2:12:f1:21:37:4c:5b:5a:5e:ca:9c:d2:1a:30:
dd:d9:e3:89:8c:99:ed:ed:36:97:bd:d2:57:d5:57:68:aa:a3:
88:0d:67:48:54:ec:a1:e4:8e:a6:a8:5a:cc:bd:33:db:b3:b0:
a4:33:34:45:e3:f8:41:fd:e0:2f:1b:1d:f8:f4:e5:6f:4e:7f:
c6:fe:d0:ac:76:e1:85:06:78:10:74:91:3b:fe:25:38:72:9c:
90:78:1c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org