Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fnAhO4tDP5030GN7c1mxmBw4Hbs.roa
File: fnAhO4tDP5030GN7c1mxmBw4Hbs.roa (raw, json)
Hash identifier: rCyxyJRHYB4UnyBQAhKtIUFuk5q7c1mv1+M65d8UjLk=
Subject key identifier: 7E:70:21:3B:8B:43:3F:9D:37:D0:63:7B:73:59:B1:98:1C:38:1D:BB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B12
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fnAhO4tDP5030GN7c1mxmBw4Hbs.roa
Signing time: Fri 01 Sep 2023 10:09:49 +0000
ROA not before: Fri 01 Sep 2023 10:09:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.0.0/20 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11026 (0x2b12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7E70213B8B433F9D37D0637B7359B1981C381DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3e:c8:45:1c:2b:06:f2:10:6e:5c:d8:c4:47:
91:2c:a5:b1:a2:bf:d2:bd:36:8c:ad:5a:18:ec:0c:
ea:24:d9:46:ff:b7:4c:ed:6b:33:24:16:73:b6:d8:
5f:38:c1:d4:ef:ac:76:fc:81:f0:ee:a5:ac:b8:53:
5b:ea:6e:45:b0:b0:f5:a4:e7:7e:27:93:f1:ce:dd:
04:a2:15:56:64:00:51:67:c9:e8:7f:de:c7:f2:a3:
3c:0a:3f:1b:7f:69:7f:4d:fa:eb:7b:e2:fd:3d:04:
2e:00:37:76:a0:95:69:8f:93:8d:5a:36:78:f8:17:
51:93:65:1f:83:3e:bc:0f:ca:39:08:fc:83:e1:7d:
72:7d:ea:70:d1:05:2f:c1:62:47:19:eb:98:3d:86:
8b:2d:ef:13:ec:21:ed:c6:61:c3:f4:89:01:e1:38:
eb:37:36:c8:00:c3:dd:ee:39:bb:7e:f0:1f:d9:df:
0c:d0:c4:63:d4:7d:69:80:42:e2:04:ba:76:c7:a2:
7f:ae:0f:0a:ab:97:9a:27:ef:3b:9f:3e:42:06:9b:
d6:8a:e0:8b:3f:0a:1b:be:6b:a5:8b:6d:c5:06:a2:
16:42:82:c6:a8:83:78:18:49:4f:86:02:1b:8e:70:
73:1a:2d:fd:81:4b:17:9f:fd:ea:6b:28:60:2e:21:
f1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:70:21:3B:8B:43:3F:9D:37:D0:63:7B:73:59:B1:98:1C:38:1D:BB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/fnAhO4tDP5030GN7c1mxmBw4Hbs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:19:d4:ea:1a:e7:1f:ad:34:e0:21:41:60:6d:2a:26:0b:a3:
e5:92:4b:1d:81:c0:dd:77:59:a8:4c:9f:00:1c:72:0d:c9:2c:
1e:ac:65:09:f0:ad:52:d5:42:dc:8b:0b:b6:47:99:1d:a9:29:
a9:ef:95:8d:95:fc:8f:da:31:5a:f0:b3:29:43:02:1b:ef:e1:
31:74:5f:26:3f:f2:a2:cf:c7:fa:28:67:93:a6:ba:11:8d:11:
22:6c:12:2a:59:f0:e5:74:48:f0:1c:5c:c1:8f:82:33:99:9d:
f6:1c:09:a8:40:00:a7:4f:ae:bb:00:fa:b5:20:aa:a2:82:bc:
23:da:89:22:66:93:d3:d1:67:b1:d2:7c:b7:42:4c:d0:66:54:
9e:eb:e7:10:87:f0:28:b9:e5:5a:5d:71:73:72:76:48:a5:87:
c0:f4:24:82:c9:0e:df:d2:c8:1e:9a:b4:23:30:11:00:cd:ec:
10:c1:8b:e2:a8:9f:ec:00:ec:ef:ef:fb:93:b2:e5:65:e9:16:
af:4c:5b:82:0f:21:74:14:67:f1:e6:18:4b:a5:af:ab:92:9b:
84:79:44:60:99:74:2e:d3:91:33:9b:d6:80:84:9e:f5:e4:82:
1b:cd:b1:31:54:8e:0e:bf:51:48:e9:e2:36:d3:b4:37:c8:49:
13:4c:6d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org