Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cP0g6Pmf3oL_aowacRKkytS7TNQ.roa
File: cP0g6Pmf3oL_aowacRKkytS7TNQ.roa (raw, json)
Hash identifier: 3/8LEr7uo/+PzdU2A1iOEYo5AZDKGpzQO1v5ncN6QNA=
Subject key identifier: 70:FD:20:E8:F9:9F:DE:82:FF:6A:8C:1A:71:12:A4:CA:D4:BB:4C:D4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28E8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cP0g6Pmf3oL_aowacRKkytS7TNQ.roa
Signing time: Fri 01 Sep 2023 10:05:54 +0000
ROA not before: Fri 01 Sep 2023 10:05:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10472 (0x28e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=70FD20E8F99FDE82FF6A8C1A7112A4CAD4BB4CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:0a:ef:e1:c2:32:71:d7:79:01:e1:37:02:
44:03:c6:32:57:ad:4d:c2:37:94:ae:8f:6d:0c:fc:
4f:4e:44:b8:8f:1c:b0:cb:d8:62:47:cb:97:aa:0a:
30:cf:94:f1:7c:66:62:e4:2e:c8:16:a7:cc:7a:cb:
2e:ef:d0:c2:24:6f:26:f0:88:c6:f2:3f:c2:c3:3a:
44:ec:3c:b8:e6:b0:e4:59:73:53:c4:92:51:28:72:
b6:72:ab:e4:32:cc:e4:60:e0:56:f9:ef:8d:0d:cb:
c4:04:06:fd:18:13:5d:fc:0d:33:43:01:42:6c:dd:
0d:28:4c:ed:bc:86:41:d0:69:0a:c9:3c:27:fe:df:
0b:78:85:e2:17:49:db:a2:55:ca:85:94:68:49:b4:
31:d1:8b:a5:8b:f1:d7:1f:71:1a:30:06:3b:a0:b6:
19:92:26:4f:c2:a2:08:84:fe:05:31:64:c1:ea:31:
fa:77:97:7b:6c:55:3e:d7:f9:f9:ce:d5:b3:32:a2:
0a:b8:7b:6b:b6:a3:d4:b3:1d:70:7c:cb:71:00:4f:
f4:4d:53:0c:76:51:63:af:96:ce:a2:8c:79:d3:88:
df:56:2d:41:cc:79:da:fa:e7:91:39:b4:d8:52:86:
3a:e6:e7:0d:47:8b:ba:78:e6:7f:7f:38:9a:0c:56:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FD:20:E8:F9:9F:DE:82:FF:6A:8C:1A:71:12:A4:CA:D4:BB:4C:D4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cP0g6Pmf3oL_aowacRKkytS7TNQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/15
Signature Algorithm: sha256WithRSAEncryption
93:b2:4d:a7:ee:62:51:13:13:54:3d:cc:70:65:15:5e:18:3d:
e2:26:a9:c9:85:d1:d9:e7:35:7b:4f:9c:a1:7d:fb:6c:83:56:
42:a9:b9:d7:5a:fb:f3:c0:17:72:c7:ac:e1:7a:e0:8b:07:8f:
75:44:e5:b6:17:24:54:d4:b4:17:2d:f1:12:1a:a9:5e:2d:c6:
f2:a2:27:d9:8d:db:ea:7c:06:b3:c8:3f:e8:eb:b6:17:45:34:
f4:50:57:15:50:77:79:f3:1c:06:6f:d0:4a:ea:94:dd:ee:45:
b1:91:31:86:45:92:bf:6e:d1:e4:c6:11:16:a0:26:74:88:98:
21:03:00:e3:bf:0e:f8:f8:2a:55:91:d3:07:b7:67:28:6e:26:
e8:e0:89:96:b9:08:de:73:df:ae:12:84:cc:69:cf:9b:e6:1e:
0b:11:8e:ef:91:a5:35:42:7d:46:c2:5a:a8:77:f2:72:47:34:
27:0b:fc:b4:8a:4c:8c:27:87:d1:f1:01:0e:66:22:2c:fd:33:
3d:09:fb:45:d0:ec:cb:c0:c7:bb:ad:99:a4:9c:48:3c:c8:4e:
33:a8:f0:55:cd:a1:b7:42:d5:38:b8:a1:89:52:eb:95:b5:63:
41:c2:a9:c5:9a:40:3f:fa:10:e8:ad:99:c6:fe:1d:3d:3e:d0:
1c:4f:78:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org