Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blj0iNVeskQP1BSS5QUILHazRYY.roa
File: blj0iNVeskQP1BSS5QUILHazRYY.roa (raw, json)
Hash identifier: Iryd/YKx0YWhZ4gEalrVdOsB5AeOkwZVGjElgou7C1M=
Subject key identifier: 6E:58:F4:88:D5:5E:B2:44:0F:D4:14:92:E5:05:08:2C:76:B3:45:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 299B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blj0iNVeskQP1BSS5QUILHazRYY.roa
Signing time: Fri 01 Sep 2023 10:06:49 +0000
ROA not before: Fri 01 Sep 2023 10:06:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10651 (0x299b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6E58F488D55EB2440FD41492E505082C76B34586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ea:35:e1:62:02:0a:e1:f3:fe:c4:73:53:7d:
a7:a7:d4:d4:ce:44:56:b5:bb:64:52:ad:86:47:d3:
44:b7:b8:ae:d6:7d:cf:2b:23:60:9b:c8:8f:5c:72:
e0:e8:09:e0:8a:3b:5d:40:c7:04:f0:ba:ee:cf:ab:
24:7a:73:fe:4f:ce:55:c4:b2:36:8d:e1:91:f7:dc:
1b:95:d3:8d:27:6f:0f:f2:f1:01:d5:ee:3c:c2:fc:
98:5a:55:09:04:ee:64:4f:86:f5:d4:32:84:6b:ac:
29:41:4a:3c:9f:79:1e:21:6d:5b:71:3c:0b:e1:aa:
0b:74:7b:7e:2f:f7:c1:e4:3b:5a:67:ab:25:f5:70:
0e:30:b0:a2:97:a4:99:7d:cb:3d:1c:22:3c:1d:22:
9d:89:cd:55:cc:60:a1:06:24:5e:08:47:37:9a:1d:
01:60:c0:39:87:70:7c:a5:79:83:52:3b:38:dd:70:
7e:50:f2:2b:31:a1:d4:70:72:2a:24:10:44:a6:59:
20:bb:91:7b:15:b7:5f:05:54:9f:f7:6e:4a:0b:ef:
5a:04:0f:96:ec:7d:54:f9:ce:d7:89:fd:b5:6b:63:
0f:51:12:e6:54:ea:e1:a9:3a:2c:93:66:ee:a0:53:
e4:2f:56:9f:e3:b7:7d:25:71:b1:dd:d9:6c:be:0d:
a9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:58:F4:88:D5:5E:B2:44:0F:D4:14:92:E5:05:08:2C:76:B3:45:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blj0iNVeskQP1BSS5QUILHazRYY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.188.0/22
Signature Algorithm: sha256WithRSAEncryption
41:69:66:44:44:76:3d:c8:37:f4:cd:a1:91:af:74:fb:68:3d:
d2:38:66:e8:94:81:10:76:74:74:e4:eb:5b:b7:d3:5e:73:ae:
b4:96:ca:69:51:35:82:12:bf:c9:a8:91:b1:5d:fc:fe:c4:f9:
88:c5:b1:2d:39:d6:11:51:b4:c2:09:14:c5:b6:77:be:f1:c2:
06:8c:e5:98:10:1b:c0:20:86:ca:db:15:36:36:0d:ee:8a:a9:
4c:ee:d9:ef:6f:37:ad:38:24:f5:85:e2:58:cb:b9:ac:9d:a8:
8f:4c:80:07:08:66:4d:21:88:94:cd:0d:33:0d:31:81:b1:d2:
27:b2:e9:46:f4:4e:18:c2:bd:db:14:56:0a:5c:8e:85:93:56:
c1:f7:25:a0:0d:4c:e5:19:89:b7:e7:c1:65:85:64:8a:87:ce:
60:aa:35:76:ce:d5:4a:5a:27:8b:78:c5:17:1f:50:29:5d:1b:
36:25:c8:82:87:17:6d:f5:80:93:04:af:59:9e:79:67:32:3a:
3a:c6:d7:0f:b1:91:89:be:58:d3:d1:f0:b5:07:09:5e:f5:cd:
16:f9:52:82:71:3a:08:97:27:cc:70:61:19:05:1a:00:8c:71:
e6:8a:b5:b4:e4:90:25:ed:f3:1c:20:b8:d4:b3:a3:c9:dd:2c:
bd:10:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org