Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqS9O6YQjqNudGtlAvSgqQfWfwc.roa
File: bqS9O6YQjqNudGtlAvSgqQfWfwc.roa (raw, json)
Hash identifier: +XsyXKZ6J1woFOsvFDZeu6/c3weS2yC/LBhH8XDw1l0=
Subject key identifier: 6E:A4:BD:3B:A6:10:8E:A3:6E:74:6B:65:02:F4:A0:A9:07:D6:7F:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2926
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqS9O6YQjqNudGtlAvSgqQfWfwc.roa
Signing time: Fri 01 Sep 2023 10:06:12 +0000
ROA not before: Fri 01 Sep 2023 10:06:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.200.0/21 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10534 (0x2926)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6EA4BD3BA6108EA36E746B6502F4A0A907D67F07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:11:07:dd:1d:c2:74:c8:b2:7b:6a:db:06:
bf:69:d5:12:3b:b6:6d:a9:ea:d7:e7:09:7b:8f:0e:
c2:c6:8f:60:e3:b7:67:ca:42:cf:93:cc:b7:17:e9:
13:73:35:bf:d0:8a:ad:21:09:cc:a5:c6:4f:ce:49:
32:80:7a:78:4a:36:e0:97:b2:c8:a2:e4:03:ea:4f:
63:c9:c7:c4:5b:9e:ce:9c:e2:68:4d:a0:e4:e0:cc:
00:21:be:cd:21:f2:09:4e:e1:d8:db:9f:7c:69:ba:
66:d4:34:f4:37:0c:f2:1e:45:5b:cf:0b:df:18:09:
7e:85:47:68:09:0f:28:63:63:2a:0b:34:ba:98:36:
8e:8a:f7:9d:8b:d8:3b:99:8b:19:60:bf:57:6b:94:
3f:e0:10:14:01:92:c4:fc:a6:fb:4e:4d:24:8c:50:
4c:f8:98:1f:e6:c1:89:2d:42:ca:45:2e:f4:c0:61:
6c:35:33:d1:fd:92:c1:f1:88:6e:ef:2f:53:32:d1:
23:2a:32:2d:a7:f6:f1:70:ae:c8:33:ba:1c:8e:a7:
5a:01:00:76:3f:4c:96:9c:b5:8b:bb:33:64:1d:d8:
d4:ca:93:b5:2d:58:ac:c7:d8:6d:bf:4d:3b:22:7d:
1d:98:47:66:33:57:f5:e7:80:14:88:2f:7c:8e:e3:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A4:BD:3B:A6:10:8E:A3:6E:74:6B:65:02:F4:A0:A9:07:D6:7F:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bqS9O6YQjqNudGtlAvSgqQfWfwc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.200.0/21
Signature Algorithm: sha256WithRSAEncryption
79:0c:2b:03:c2:12:07:db:6c:80:ba:c4:10:ad:f2:5d:76:b3:
18:88:1c:b5:cd:75:57:e0:44:48:e8:28:47:8b:9d:ae:cf:16:
13:af:67:a2:49:46:3d:9a:5c:9c:65:57:27:a8:f6:27:72:39:
2c:3a:25:4a:f3:c9:30:77:5f:fb:bf:83:73:e6:eb:ff:29:63:
4b:3c:bb:9a:93:15:e8:a6:b9:8a:bc:e2:8c:2d:90:7e:25:6f:
c8:66:35:61:e0:23:4d:5a:ea:44:41:16:9c:1b:28:e9:b6:04:
34:c5:ca:af:a7:45:6b:b8:e3:80:0a:4a:c1:e3:0c:ef:ed:3e:
5d:85:27:0c:d0:bf:52:3c:52:2b:51:f3:1b:e7:b9:10:18:a5:
ad:75:89:7d:6a:aa:4e:26:3d:f6:79:e7:ca:ae:69:51:a4:59:
75:a1:f0:ca:74:9a:e2:88:81:ec:d6:6f:ec:c2:74:e5:12:16:
8c:60:e8:38:b1:9e:8a:e7:f2:d3:1f:8c:ae:57:d1:88:49:f4:
5d:6c:43:ff:1e:f8:d3:c5:78:36:ff:62:e4:cc:cb:85:b0:8c:
ba:f0:fc:ae:32:83:f3:10:f7:bc:e1:63:17:64:d8:a6:f9:1a:
ae:02:5e:1c:fc:b3:73:af:c2:d2:d4:c9:29:b5:2c:d4:d3:4a:
7c:13:25:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org