Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eQC9xeVQUTEA6WNnfuzcu4xFqvA.roa
File: eQC9xeVQUTEA6WNnfuzcu4xFqvA.roa (raw, json)
Hash identifier: 4rRpGju9VZYacBTWnZW1gem3ch7Q/G+zkZw+S7ecvn0=
Subject key identifier: 79:00:BD:C5:E5:50:51:31:00:E9:63:67:7E:EC:DC:BB:8C:45:AA:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 281E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eQC9xeVQUTEA6WNnfuzcu4xFqvA.roa
Signing time: Fri 01 Sep 2023 10:04:58 +0000
ROA not before: Fri 01 Sep 2023 10:04:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10270 (0x281e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7900BDC5E550513100E963677EECDCBB8C45AAF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1a:1c:3c:1d:d7:2f:62:66:1f:e5:4e:6f:80:
39:e6:93:70:dd:51:78:be:b6:af:4a:94:16:21:91:
15:71:49:42:90:e1:13:70:f4:72:cb:65:87:d0:2d:
57:6c:80:80:f9:88:eb:1f:3e:31:88:bb:f1:0e:ff:
76:5c:c8:77:c1:d7:b0:44:e4:5e:4c:a3:d7:0a:01:
b5:32:86:ee:a8:3a:10:0e:2a:58:e3:9f:5e:45:74:
d6:44:6e:8b:94:16:a4:fb:c2:75:8f:19:92:b2:ee:
a9:6b:1e:22:85:17:32:91:a3:44:13:aa:d6:c7:94:
74:7d:d9:b7:06:25:b3:b7:b0:2e:46:c1:df:62:eb:
68:41:53:4b:f7:f5:40:bc:6f:ff:64:1b:76:ab:7a:
2a:64:fb:ba:e5:b6:54:73:a0:de:ad:7a:02:25:ee:
5f:30:7b:4d:35:e1:d9:bd:78:6d:e2:05:73:b2:1c:
1a:0f:0a:a7:cc:b8:e1:0f:9b:ed:cb:c2:64:90:2c:
96:1c:05:e2:2d:16:4d:45:db:68:85:5c:ad:47:41:
02:78:da:32:6f:9b:e9:d5:58:f8:6f:04:1c:f4:8a:
56:8f:bc:a4:a0:b1:ee:1c:56:3c:a4:95:82:64:7a:
b9:9b:3e:d9:9b:a3:8e:b3:d7:30:e2:97:01:37:7d:
81:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:BD:C5:E5:50:51:31:00:E9:63:67:7E:EC:DC:BB:8C:45:AA:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eQC9xeVQUTEA6WNnfuzcu4xFqvA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.124.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:21:d2:de:4c:c2:0f:07:df:22:bc:47:3c:a3:01:19:e8:90:
61:fb:9a:e0:bc:f9:c2:77:88:b6:16:eb:71:2b:96:6c:d4:08:
40:51:c4:64:df:ef:a3:e5:76:0c:5c:11:10:ef:0d:05:14:4e:
f9:03:73:88:e5:46:86:ce:05:99:9e:50:c0:64:bc:3e:fd:3e:
f6:d0:8c:0b:74:dc:86:e4:86:55:11:8d:a6:1b:d4:e9:58:63:
85:69:55:5d:60:11:a0:f3:fd:2d:0a:3b:15:a8:ff:a4:d4:df:
e0:74:90:6e:20:ae:b5:6a:d9:c2:4a:2e:e0:4e:73:61:51:e5:
76:b7:a9:a5:62:e2:da:97:41:5f:0b:a3:90:b6:b0:e8:c8:8a:
25:0f:2c:aa:bb:87:44:32:67:94:28:11:f1:34:80:05:a4:c6:
9e:22:9c:80:a0:5e:21:6c:87:f6:d9:32:99:48:9a:a5:4d:a2:
df:f0:46:0c:19:4b:52:4f:40:84:46:01:86:2b:ee:64:6d:33:
14:23:de:b4:41:c7:39:83:8b:30:c9:4f:5b:5e:3e:de:89:c4:
37:a9:cf:85:5f:af:53:8c:22:fb:08:ca:99:06:43:31:c3:3f:
27:5e:23:12:5c:d1:72:0e:b7:7e:67:5f:30:08:5a:55:a7:c9:
bc:cc:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org