Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctC3sqRV9z1ghRuQdSz0Q8A1Yt8.roa
File: ctC3sqRV9z1ghRuQdSz0Q8A1Yt8.roa (raw, json)
Hash identifier: qN+ADxYQqqfMCD0F6SparBRcE3elZuPJ60UM+8L9luc=
Subject key identifier: 72:D0:B7:B2:A4:55:F7:3D:60:85:1B:90:75:2C:F4:43:C0:35:62:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AA7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctC3sqRV9z1ghRuQdSz0Q8A1Yt8.roa
Signing time: Fri 01 Sep 2023 10:08:09 +0000
ROA not before: Fri 01 Sep 2023 10:08:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.64.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10919 (0x2aa7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=72D0B7B2A455F73D60851B90752CF443C03562DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:16:f4:5b:6c:65:ca:9e:8c:65:da:b0:2e:01:
6a:ed:2a:4e:a4:7f:4c:9c:9c:d3:78:e6:1d:76:34:
92:66:00:b1:3a:e9:c8:a8:ea:17:4d:d0:34:fb:60:
8f:99:df:04:3b:bb:c2:8f:fa:49:76:b0:f8:bf:18:
b3:ec:7c:89:8b:70:a8:e4:88:df:bf:8f:95:5a:d8:
92:8b:59:19:db:59:26:75:fa:cc:8e:f9:9e:88:53:
c5:d4:fa:e3:39:4c:fc:6c:a3:30:d2:5d:f3:a1:01:
ee:2e:e7:ea:99:59:95:ce:86:47:14:bb:8c:19:d4:
46:48:38:b8:32:aa:4c:2f:17:74:29:c6:68:c9:47:
fe:38:df:60:0d:9d:04:a7:b5:12:d5:ca:e2:af:d4:
cd:28:94:34:a8:a0:1a:c3:46:5c:85:44:18:61:de:
59:49:ce:6a:4c:40:0e:cd:67:8e:38:ee:fa:06:1f:
1c:2f:32:19:38:ca:8b:79:10:b3:90:06:98:25:e9:
4f:d3:cb:08:cf:1a:d6:96:a4:b8:bc:2f:14:f2:8f:
a2:8c:a4:60:3a:fa:62:4b:38:52:f2:74:16:08:1f:
74:07:6b:22:fc:c5:2c:f8:f5:dc:36:59:b4:95:ea:
0f:1c:0f:52:4c:90:36:1f:e4:d2:28:b0:fb:ec:af:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D0:B7:B2:A4:55:F7:3D:60:85:1B:90:75:2C:F4:43:C0:35:62:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ctC3sqRV9z1ghRuQdSz0Q8A1Yt8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.64.0/21
Signature Algorithm: sha256WithRSAEncryption
78:22:61:54:df:d5:05:39:ff:80:1c:44:fe:52:6b:38:3a:f3:
53:1d:4a:45:e5:fa:d0:47:e8:2e:55:9d:05:8d:7a:6b:3e:4b:
fc:53:69:f6:d9:4e:d9:07:cf:1f:94:b4:12:ca:f0:e0:5c:7d:
08:f9:06:13:2b:a9:1a:a4:4b:f4:a9:9b:aa:57:f4:17:88:ce:
e6:89:02:0a:aa:f5:e1:8a:ad:1b:10:31:fc:31:f7:50:73:23:
e3:59:d5:11:c6:1b:99:c2:e2:2a:e9:27:73:c6:01:eb:3a:0f:
e3:e7:8e:a6:62:8a:66:34:3c:b3:45:ea:e7:63:f2:de:6a:ef:
65:54:dd:77:ab:0e:7f:da:0e:a0:06:06:61:5b:87:59:b9:68:
e0:13:e2:2d:32:ed:0b:0b:5a:f1:6e:f8:ca:6b:cc:fc:f0:78:
ff:c8:e1:9a:41:2d:93:b8:05:49:d3:55:be:b1:96:e1:87:4f:
6a:25:0b:eb:c4:c9:fe:e6:39:0d:e9:2a:51:be:79:02:f9:a2:
64:85:22:5c:f1:82:35:75:01:9a:41:fc:3f:3a:84:5a:06:0f:
58:db:5c:ea:b0:6f:3e:eb:54:be:f0:f5:7d:3e:d8:79:95:8d:
d9:c9:27:75:af:86:17:14:02:1b:56:50:bf:a7:e7:c0:a9:c1:
45:d3:42:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org