Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gUJvVtmMknpMApzcP-cnstmveZA.roa
File: gUJvVtmMknpMApzcP-cnstmveZA.roa (raw, json)
Hash identifier: nG3EiteiU5FoNp68cpiPcGkWWsij3ZRUOjkiYOa3N8U=
Subject key identifier: 81:42:6F:56:D9:8C:92:7A:4C:02:9C:DC:3F:E7:27:B2:D9:AF:79:90
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A22
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gUJvVtmMknpMApzcP-cnstmveZA.roa
Signing time: Fri 01 Sep 2023 10:07:32 +0000
ROA not before: Fri 01 Sep 2023 10:07:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10786 (0x2a22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=81426F56D98C927A4C029CDC3FE727B2D9AF7990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8b:25:7e:a7:df:28:96:05:39:59:aa:46:8c:
b3:8e:d2:cc:4d:4d:87:e9:4e:ef:2e:a9:3f:2b:fe:
f7:f2:7f:7c:d1:06:ec:8c:03:96:34:52:27:2f:4d:
63:25:46:04:cb:c4:70:82:36:11:1e:2e:6c:10:db:
69:f8:00:e9:3a:2f:db:a5:ff:ee:c0:f7:e2:3a:f4:
95:20:ef:c7:2f:00:42:62:1b:69:b5:b0:15:8b:40:
39:da:c7:85:dd:e4:da:c9:8f:c0:f1:f9:bd:ba:13:
fd:bb:54:41:11:41:b8:e0:5e:b1:bd:5f:b1:c6:5a:
04:03:db:21:9a:0e:08:be:30:bc:a0:fd:2c:3f:ca:
3e:47:8f:c4:3c:95:10:63:d1:7a:17:6e:1a:a7:73:
b8:be:bc:12:77:ab:04:58:86:d3:da:67:f0:c4:da:
11:6c:cd:f1:0a:5d:e3:d0:b6:6a:cc:05:7f:1f:37:
a5:41:f0:e4:42:96:18:75:46:ef:bb:b9:80:33:d7:
ee:48:db:68:c7:b9:64:65:25:26:08:4d:55:7b:bb:
b1:e1:88:d0:fd:f6:25:46:80:eb:dd:3a:ae:99:6e:
c4:10:d0:04:45:40:50:7f:25:92:1c:33:c0:8f:17:
fc:c7:ea:ef:1a:dc:5d:14:2a:28:d5:14:81:f8:3f:
a3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:42:6F:56:D9:8C:92:7A:4C:02:9C:DC:3F:E7:27:B2:D9:AF:79:90
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gUJvVtmMknpMApzcP-cnstmveZA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.128.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:a4:2c:ce:a5:5a:3b:ff:dd:fd:6a:c0:f3:5f:a4:6b:4b:b8:
3f:c9:9a:e9:07:1a:e3:12:0a:24:40:32:41:ae:0a:fb:20:4c:
e2:5b:80:40:89:7b:a1:3d:18:12:7e:49:de:b4:f0:5d:7e:4f:
2c:cf:ae:e7:97:e8:66:31:b7:49:97:2a:58:5c:87:b5:5b:58:
a2:70:1e:98:d9:de:3d:1e:96:05:cc:71:db:8d:e5:2d:61:31:
d6:4b:e1:23:ec:b7:5f:c5:c8:30:63:df:50:4f:a3:7e:c3:62:
be:24:36:c6:f8:89:05:c7:e0:d6:59:81:64:9c:af:8b:63:e1:
07:3a:5c:62:c2:3a:61:e4:b6:2d:27:cd:33:90:88:8f:69:6b:
cb:0e:ab:5b:30:7b:fe:cc:60:e6:3a:50:67:8c:9a:3b:f8:ea:
09:08:e8:9d:81:17:45:50:72:ea:fc:ac:39:51:a8:ea:a3:ba:
a1:2e:20:fb:e3:49:ce:6b:51:25:6e:a2:b5:39:0e:e0:ba:22:
86:b8:ef:68:2f:a1:93:7d:5c:7e:9b:c2:7a:2e:a9:15:8f:43:
fe:13:87:7f:ec:48:6b:e1:14:2a:51:0c:14:7b:ce:23:f0:62:
1d:09:6f:7c:79:b6:eb:c4:96:92:7a:c9:0a:2d:db:d5:7f:b1:
b8:5d:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org