Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwdLArhhQhMS1AYYxfmL3Z0VKA8.roa
File: cwdLArhhQhMS1AYYxfmL3Z0VKA8.roa (raw, json)
Hash identifier: aaWC2EEq4grO8nIO6H4a+xdCm7zF3CLzUFBFkmhnGsk=
Subject key identifier: 73:07:4B:02:B8:61:42:13:12:D4:06:18:C5:F9:8B:DD:9D:15:28:0F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A46
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwdLArhhQhMS1AYYxfmL3Z0VKA8.roa
Signing time: Fri 01 Sep 2023 10:07:42 +0000
ROA not before: Fri 01 Sep 2023 10:07:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10822 (0x2a46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=73074B02B861421312D40618C5F98BDD9D15280F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:ba:85:0c:5e:28:08:ee:74:6d:52:95:c9:
85:40:5c:b9:dd:90:43:ce:5f:b2:6c:5c:6f:7a:d5:
75:a3:c3:4b:c9:fb:7f:3c:9e:94:24:bd:c5:53:9f:
ae:41:8a:f4:38:7a:d4:f4:4e:13:1e:d8:e2:39:7f:
59:88:3b:b6:63:33:a2:49:0c:fa:23:a8:ce:39:5f:
bf:a3:fd:1e:44:17:c9:ad:b2:7c:a3:26:bf:be:03:
31:20:87:51:83:78:f7:81:37:f6:84:de:50:b9:e3:
6e:88:0e:54:6f:a8:b6:72:ed:13:52:54:fe:ee:12:
b9:53:40:04:f1:0b:ad:59:f9:93:60:cc:3e:05:69:
00:ff:fd:65:f4:e8:d2:d9:f7:f4:98:b2:08:60:be:
74:69:38:b0:d6:4f:6d:3d:af:87:02:bf:f1:42:6b:
53:64:cf:fa:3b:18:38:49:29:67:a4:fa:5c:fc:60:
4f:dc:67:92:13:7d:2d:71:19:3a:a7:de:1f:81:1e:
9d:b5:a3:ca:9d:78:a1:79:59:ad:18:be:76:7b:5c:
9f:e8:4e:80:9f:51:6a:35:95:a4:a9:2e:f7:6b:a2:
ab:3c:84:70:87:0e:6a:94:10:31:9b:00:d9:5b:58:
5c:8c:f4:97:89:fd:0b:bc:2e:9d:3b:fb:5e:47:fa:
09:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:07:4B:02:B8:61:42:13:12:D4:06:18:C5:F9:8B:DD:9D:15:28:0F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cwdLArhhQhMS1AYYxfmL3Z0VKA8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.216.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:5f:1b:41:ff:5e:0e:42:33:31:f4:76:26:88:51:d9:03:e9:
ac:43:b4:8d:a4:ad:e1:9d:eb:7d:26:1b:ce:44:4f:1d:68:3a:
00:3d:f2:03:87:01:b9:d3:24:55:86:73:65:5c:d8:cf:c9:1d:
80:1e:e3:36:fe:1a:6d:9a:d4:65:48:3d:fe:12:09:28:4e:ee:
3e:8a:59:20:49:8d:b2:64:07:b2:9c:c7:70:7d:f6:d9:2e:66:
a4:97:27:d6:57:9b:f1:46:01:e9:b6:55:26:8d:82:b0:1e:72:
78:93:7f:0f:d2:21:71:12:db:2b:3b:72:40:2c:9c:4c:14:c4:
2f:56:0c:a0:65:ad:cb:cd:30:10:04:1f:76:65:9c:e5:de:bd:
6e:c2:5b:3a:b2:c7:7b:22:5b:e4:bb:53:d4:78:19:29:39:d2:
44:18:e0:6f:3a:eb:04:61:3f:22:48:b0:71:b8:de:a9:71:58:
59:98:10:57:af:d0:90:b6:b8:8e:f4:3d:8d:a2:48:97:3c:8c:
77:6b:91:3f:95:1f:fc:29:2d:5b:c0:2d:22:0d:43:a1:75:70:
ea:e3:d9:f2:a3:a6:e9:ca:74:ab:fb:79:69:ed:ba:63:e7:be:
9a:88:00:6e:b7:09:f7:7f:22:f2:e0:67:40:cd:27:1e:fd:ab:
a1:6f:3c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org