Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hWiYmaL0BamrhyihrFsTYfWdcsE.roa
File: hWiYmaL0BamrhyihrFsTYfWdcsE.roa (raw, json)
Hash identifier: Kiarc+DPluBOsLjVa40cmnh5nEjqrrOCtT/d2R9XZkA=
Subject key identifier: 85:68:98:99:A2:F4:05:A9:AB:87:28:A1:AC:5B:13:61:F5:9D:72:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2938
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hWiYmaL0BamrhyihrFsTYfWdcsE.roa
Signing time: Fri 01 Sep 2023 10:06:17 +0000
ROA not before: Fri 01 Sep 2023 10:06:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10552 (0x2938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=85689899A2F405A9AB8728A1AC5B1361F59D72C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:01:d5:6c:80:de:24:8b:47:44:3d:59:2f:8b:
cb:4b:21:ef:c8:4d:ec:f5:6c:88:87:88:f3:c7:a7:
c8:dc:e2:c3:07:b0:77:26:a1:e1:75:47:b0:9c:08:
61:14:b6:2f:05:16:cd:c3:c1:8e:ff:fa:ec:8e:34:
bc:3d:7b:18:a4:32:0d:a7:46:38:af:93:36:4c:47:
dc:46:25:fd:8c:1b:41:87:34:d7:01:77:6f:43:80:
e8:28:8f:f1:be:32:48:7a:d0:c1:02:77:60:86:6d:
db:6a:8c:a1:9b:ee:c2:63:51:6e:eb:14:85:e2:80:
5c:7e:c1:62:91:54:30:08:46:38:8a:c9:07:4d:51:
d7:9d:b9:d9:66:a8:80:ee:61:28:2c:a0:93:9f:86:
32:ed:a3:0e:f4:27:5b:f6:78:e1:fc:90:b5:f1:1a:
7a:cf:61:ce:52:4b:1f:e6:6e:d9:10:f0:d7:6b:48:
6d:02:67:6e:a7:51:21:ea:44:6d:4f:b2:f0:e7:f2:
7e:52:86:42:b1:68:08:1c:42:72:ab:6e:d5:01:72:
0a:10:2b:87:f8:39:e8:d3:a4:ea:83:52:3a:09:07:
f6:c9:22:4e:0b:23:04:e6:22:34:76:30:88:0b:ce:
54:55:33:88:e5:6d:3e:2e:89:34:e3:17:8b:5d:62:
22:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:98:99:A2:F4:05:A9:AB:87:28:A1:AC:5B:13:61:F5:9D:72:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hWiYmaL0BamrhyihrFsTYfWdcsE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:0f:24:b2:a9:44:db:3e:69:d0:53:72:42:1d:f9:d3:19:a9:
b9:e5:ea:47:a0:8f:af:c4:d4:23:2d:8a:16:cd:8c:f0:ab:42:
60:63:9e:bc:c7:72:af:b1:b6:3c:e5:30:f2:3f:60:30:79:a0:
54:ae:60:57:ac:8a:6a:36:10:47:92:34:9e:88:49:a4:2b:ee:
ba:42:6c:ad:0e:15:ad:16:41:38:1b:b9:1f:59:49:34:7f:43:
2d:6b:7f:56:9e:8a:38:d8:4a:a4:a7:8b:43:10:c9:56:91:b1:
fe:ab:2e:80:68:f8:79:2b:ca:63:b2:6d:27:53:2c:03:22:8c:
40:6d:c0:f0:a8:28:92:52:8f:90:67:21:f4:da:9f:62:d6:64:
f4:db:87:d5:c9:4a:99:68:7a:fb:a1:66:82:bc:f8:74:2c:04:
f2:b6:22:8f:d6:49:bd:90:60:40:b1:5d:61:01:79:59:59:4d:
e8:ef:f4:fe:09:02:43:4d:1c:7e:78:09:b8:95:7a:43:76:e4:
07:72:ad:24:a2:17:0e:c3:8e:57:4c:27:de:35:72:13:a4:85:
30:e7:1d:79:18:27:17:96:d9:7f:4f:20:ba:5e:56:9f:b3:b7:
f7:76:29:31:1d:65:36:89:c0:0f:82:18:34:9d:b9:d5:2c:56:
6c:57:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org