Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dBg1K782OfXYU2XV9e6C9LlOeNc.roa
File: dBg1K782OfXYU2XV9e6C9LlOeNc.roa (raw, json)
Hash identifier: zX8IR2/V6T7flyZD1YtNmZpXxb9XDvFUpqDNS3goGSA=
Subject key identifier: 74:18:35:2B:BF:36:39:F5:D8:53:65:D5:F5:EE:82:F4:B9:4E:78:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2869
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dBg1K782OfXYU2XV9e6C9LlOeNc.roa
Signing time: Fri 01 Sep 2023 10:05:18 +0000
ROA not before: Fri 01 Sep 2023 10:05:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10345 (0x2869)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7418352BBF3639F5D85365D5F5EE82F4B94E78D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:b1:02:7a:91:e2:cf:c6:2c:b5:6b:98:20:
00:fa:1a:d7:3e:c5:1d:86:46:6b:5b:ec:44:56:a0:
ff:ab:6f:ed:5a:26:33:9d:28:f6:81:01:d6:3a:e3:
2f:06:e9:64:8b:e2:b5:b1:9a:17:61:0e:23:0c:c6:
40:fe:a1:a3:d6:9d:07:64:ee:4d:f1:72:21:11:1e:
f7:9c:20:e8:c1:c5:1f:d4:51:20:4a:ed:31:44:72:
4b:9e:b7:7d:0c:1d:03:f8:a8:14:a6:36:1a:a9:c6:
e5:71:43:5b:ba:38:7d:c6:17:48:7a:89:51:2f:a1:
38:63:81:5b:84:09:10:13:a6:31:ae:e2:69:7d:0f:
fe:35:f4:76:b9:74:db:3a:1b:66:63:a1:af:b9:c3:
c7:35:16:53:a8:1d:6d:8d:ab:fd:34:c3:fc:61:b8:
71:c4:d2:cb:06:ab:a3:a9:74:6b:ba:7c:4c:39:53:
f5:c3:cf:89:3b:04:f0:c9:92:a6:ea:07:9d:ca:03:
38:c4:c8:9f:9e:9c:63:55:2c:7a:bf:98:93:7b:d1:
6e:7b:c3:47:b6:7d:12:96:78:7f:84:eb:6d:4c:a0:
08:80:bc:c6:6c:2b:a4:4b:71:3a:15:60:ff:c3:83:
6a:8a:2d:c6:ec:41:86:c1:92:72:5a:27:b6:7b:77:
e0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:18:35:2B:BF:36:39:F5:D8:53:65:D5:F5:EE:82:F4:B9:4E:78:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dBg1K782OfXYU2XV9e6C9LlOeNc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.80.0/22
Signature Algorithm: sha256WithRSAEncryption
47:98:c7:09:07:a6:d2:7f:07:cd:1b:97:2d:dd:27:da:68:f9:
d3:b0:95:ec:22:e3:65:b9:8e:4c:61:c4:24:5e:35:bc:6c:ca:
7a:cd:4d:fc:a2:a6:17:42:1a:d9:30:e1:db:67:74:2b:18:81:
56:06:e6:f2:77:0c:dc:29:41:22:e1:91:5a:5a:bc:af:4e:da:
b9:6f:77:da:c8:ab:d3:a6:a4:7a:a6:d1:8d:9e:03:16:60:59:
23:6e:04:e9:a5:cc:85:11:93:74:cf:74:f0:0c:75:d9:99:31:
bf:cb:d0:c2:11:19:6b:94:bf:08:01:f8:c7:78:3a:05:6b:7d:
00:a7:72:0d:e3:21:f0:e1:48:58:20:a2:13:8f:28:50:20:78:
f7:51:82:14:cf:bb:ab:1e:44:7b:9d:e2:a6:2f:59:e2:a2:d8:
82:e0:de:19:74:5b:dc:ef:ed:df:f7:de:b4:89:27:e5:8f:a4:
b3:22:2b:07:61:09:32:06:6f:d0:19:28:dd:ab:6b:a9:5f:bb:
53:bd:43:97:85:43:cc:0c:e1:fa:55:93:b3:be:f9:e1:d6:52:
3f:c9:b4:39:97:23:db:1a:17:05:e5:4f:68:fe:4e:f8:2b:fb:
f5:65:0d:62:87:5a:96:4d:b3:62:61:75:00:b1:56:59:c8:6f:
dd:5a:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org