Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gcd9zoPWTVhENpy9EFz5DJY3nl8.roa
File: gcd9zoPWTVhENpy9EFz5DJY3nl8.roa (raw, json)
Hash identifier: E5z/iSN2fl2dbcuxu6FCeiiDinrZWiJBuvoWaXDifmI=
Subject key identifier: 81:C7:7D:CE:83:D6:4D:58:44:36:9C:BD:10:5C:F9:0C:96:37:9E:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 296E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gcd9zoPWTVhENpy9EFz5DJY3nl8.roa
Signing time: Fri 01 Sep 2023 10:06:36 +0000
ROA not before: Fri 01 Sep 2023 10:06:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.0.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10606 (0x296e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=81C77DCE83D64D5844369CBD105CF90C96379E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:35:49:1a:d8:45:51:ca:29:28:ca:53:a0:
c7:68:2c:8d:de:4d:5d:5d:28:a8:44:5c:74:49:1e:
4f:d1:60:72:ca:10:ad:c6:d7:e5:a0:90:2d:bb:3a:
ce:bd:d9:c9:e7:a8:b6:3d:4d:cd:ae:f9:48:74:26:
e6:0f:d3:95:ba:1d:1d:ba:b5:26:16:69:b9:cd:d9:
2a:7d:69:06:00:e2:4f:28:ab:f3:3b:ea:52:71:92:
61:bf:f9:12:b2:16:99:7f:6b:f0:61:9c:22:ea:6a:
00:5c:95:14:6f:55:f9:7d:13:b1:2e:b1:53:dc:31:
1f:ab:7a:57:09:65:eb:10:65:ab:47:a0:90:41:eb:
c3:ab:65:f2:1f:09:a4:f3:da:c4:e2:3a:44:35:cf:
35:46:b9:06:7b:d4:7d:e1:ac:4c:01:4d:64:54:71:
28:e8:3b:68:5d:08:e3:d4:2a:52:8f:26:64:09:7e:
2d:ae:9d:02:6f:32:75:bd:e1:00:34:04:af:fd:7f:
b9:95:b3:a4:dc:47:87:61:54:8f:ba:a6:68:3b:ac:
d0:ad:b3:74:20:3e:71:d1:7d:0f:1e:cb:ba:17:b4:
bf:be:60:22:79:8c:51:ad:a2:51:8a:ef:0d:18:48:
8c:53:9d:f7:2b:09:44:67:7e:a4:3c:16:b6:14:e5:
34:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C7:7D:CE:83:D6:4D:58:44:36:9C:BD:10:5C:F9:0C:96:37:9E:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gcd9zoPWTVhENpy9EFz5DJY3nl8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.0.0/21
Signature Algorithm: sha256WithRSAEncryption
af:ce:5b:ef:8e:dd:31:a5:20:ba:8c:c9:b7:ab:0f:2e:d3:32:
da:b0:d7:e5:4f:26:55:76:7e:a1:dc:fc:59:32:82:0a:b8:a2:
06:96:af:97:d0:91:47:37:dd:4f:36:5a:4b:3e:ae:97:97:71:
c5:b8:df:4b:78:1f:3f:e0:d2:75:62:64:3e:56:50:c2:d3:51:
88:84:6c:3d:16:d4:97:f6:7c:22:e9:e2:8c:2f:23:58:37:fc:
ad:9d:58:3d:f4:8c:03:76:33:11:d0:ed:b7:b8:e0:82:54:84:
67:14:cb:03:b7:ec:66:f1:17:8d:e5:6e:8f:fb:1c:d2:fd:8a:
24:81:58:8b:67:9b:b3:71:a3:8e:0a:b9:5e:a7:91:94:58:21:
69:32:9b:f5:55:6a:a8:53:63:e7:34:17:e4:87:42:e8:1f:d6:
e0:40:b6:42:f9:9d:38:6c:29:19:9a:d1:1c:98:3b:99:88:ad:
e7:12:d3:e9:42:1a:18:df:65:b3:4b:f6:0b:25:7b:23:6f:43:
d3:d8:99:7e:1c:23:dc:5d:d0:9c:85:a3:d4:2e:38:c3:8e:f9:
eb:7f:78:61:4b:6b:7c:0b:3e:cb:f9:bb:5a:62:1f:fb:12:e5:
e0:8a:91:e6:6b:56:d4:f2:f2:c3:bf:8c:2b:ab:2e:ed:12:48:
a6:e0:7b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org