Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bVmOOs6s0Wx4Be0Rtw7BH-E6rb0.roa
File: bVmOOs6s0Wx4Be0Rtw7BH-E6rb0.roa (raw, json)
Hash identifier: Ln61EHkmQ4kxaA2UU/jZP5dZPu4Ok7LNh+Sld3AUYhg=
Subject key identifier: 6D:59:8E:3A:CE:AC:D1:6C:78:05:ED:11:B7:0E:C1:1F:E1:3A:AD:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2901
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bVmOOs6s0Wx4Be0Rtw7BH-E6rb0.roa
Signing time: Fri 01 Sep 2023 10:06:03 +0000
ROA not before: Fri 01 Sep 2023 10:06:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.119.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10497 (0x2901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6D598E3ACEACD16C7805ED11B70EC11FE13AADBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:76:31:be:6b:ee:f8:72:c3:fd:86:fc:1a:
a2:8e:2e:9e:d7:d4:28:7e:71:49:6f:21:51:6c:a9:
76:52:19:89:cf:ba:bf:68:6d:9d:26:99:5b:a2:fe:
45:a8:fc:a8:c5:17:88:7f:d8:bb:00:1f:c2:d0:48:
3d:af:ef:9e:4d:79:c4:01:88:b6:2f:c8:93:90:4f:
7e:4e:a7:8c:df:20:73:0b:ca:23:b5:1e:9c:89:9d:
01:99:d4:b2:f9:29:38:eb:48:c0:52:e7:97:ae:4a:
f0:f9:4e:83:e9:51:ee:55:d1:b4:46:88:db:77:a0:
bf:56:5a:7a:60:22:55:97:b0:52:8d:58:9c:57:fb:
d0:b7:c0:81:0f:d7:a8:dc:c3:df:9a:1f:e4:73:d6:
e4:21:a5:56:5b:0c:c3:23:3b:ec:19:11:32:4a:f8:
50:50:6a:72:e8:10:6f:3f:14:2d:1f:db:ef:5d:df:
a8:62:7a:d7:17:d8:85:1c:c6:80:c6:ea:4c:b4:71:
45:93:33:57:00:42:fb:e1:1a:ae:63:0c:2e:96:cf:
aa:94:ab:9e:cd:2c:62:54:b3:1d:91:b1:04:8a:3e:
3e:50:53:84:6f:10:d2:05:a8:20:2e:3a:64:a1:22:
fc:a9:b6:de:f3:01:f5:52:ff:f4:08:78:97:f7:5b:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:59:8E:3A:CE:AC:D1:6C:78:05:ED:11:B7:0E:C1:1F:E1:3A:AD:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bVmOOs6s0Wx4Be0Rtw7BH-E6rb0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.119.128/25
Signature Algorithm: sha256WithRSAEncryption
1e:da:d9:ad:a2:79:e1:6d:12:ac:09:4a:0e:5c:e2:e8:58:12:
a3:ca:bc:4d:07:a2:1a:69:93:05:7c:03:e8:e0:e7:5a:8e:47:
d2:e2:b9:9b:a9:2a:51:5e:bc:71:77:bc:32:81:aa:20:bd:fc:
d4:8f:29:8b:05:cc:74:79:13:43:8e:8e:fb:71:c0:eb:0f:cc:
c1:6e:fd:d8:c3:69:ad:a6:77:43:20:ab:e1:24:81:47:ce:d3:
18:40:10:da:d0:a3:15:7c:2e:05:1a:57:73:d9:0e:72:7c:57:
71:78:64:20:f0:21:8c:56:d4:de:8f:9d:64:a7:da:03:d5:1f:
82:0a:a5:ee:51:2c:25:12:f6:9c:9a:d3:f3:29:ad:7f:00:65:
1f:5e:43:7c:ea:12:a9:5b:85:91:2d:42:7d:f8:b6:64:29:46:
ee:e2:2f:b4:78:1a:fd:27:96:bb:89:7d:b3:b4:b2:8e:10:dc:
23:7a:b1:c3:8d:a6:5c:f1:a2:54:ec:d6:25:ef:0a:63:9f:33:
0f:42:c8:a3:43:4f:33:bd:72:eb:e8:80:be:91:1a:50:07:4d:
a3:68:d9:cc:a4:bd:79:47:97:1d:17:d3:ac:1b:08:76:2d:f7:
dc:d3:71:91:da:20:c6:5d:73:1b:b5:c2:da:1d:07:8a:be:85:
69:e2:df:e0
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICKQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2MDNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZENTk4RTNBQ0VBQ0Qx
NkM3ODA1RUQxMUI3MEVDMTFGRTEzQUFEQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtHnYxvmvu+HLD/Yb8GqKOLp7X1Ch+cUlvIVFsqXZSGYnPur9o
bZ0mmVui/kWo/KjFF4h/2LsAH8LQSD2v755NecQBiLYvyJOQT35Op4zfIHMLyiO1
HpyJnQGZ1LL5KTjrSMBS55euSvD5ToPpUe5V0bRGiNt3oL9WWnpgIlWXsFKNWJxX
+9C3wIEP16jcw9+aH+Rz1uQhpVZbDMMjO+wZETJK+FBQanLoEG8/FC0f2+9d36hi
etcX2IUcxoDG6ky0cUWTM1cAQvvhGq5jDC6Wz6qUq57NLGJUsx2RsQSKPj5QU4Rv
ENIFqCAuOmShIvyptt7zAfVS//QIeJf3W4MXAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUbVmOOs6s0Wx4Be0Rtw7BH+E6rb0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2JWbU9PczZzMFd4NEJlMFJ0
dzdCSC1FNnJiMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THeAMA0GCSqGSIb3DQEBCwUAA4IBAQAe2tmtonnhbRKsCUoOXOLoWBKjyrxNB6Ia
aZMFfAPo4OdajkfS4rmbqSpRXrxxd7wygaogvfzUjymLBcx0eRNDjo77ccDrD8zB
bv3Yw2mtpndDIKvhJIFHztMYQBDa0KMVfC4FGldz2Q5yfFdxeGQg8CGMVtTej51k
p9oD1R+CCqXuUSwlEvacmtPzKa1/AGUfXkN86hKpW4WRLUJ9+LZkKUbu4i+0eBr9
J5a7iX2ztLKOENwjerHDjaZc8aJU7NYl7wpjnzMPQsijQ08zvXLr6IC+kRpQB02j
aNnMpL15R5cdF9OsGwh2Lffc03GR2iDGXXMbtcLaHQeKvoVp4t/g
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org