Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/huyccdmvfRVvusDpw7OwyCxJHtk.roa
File: huyccdmvfRVvusDpw7OwyCxJHtk.roa (raw, json)
Hash identifier: blKzRn0jSuxP/pDq5uKR82Aj0r4eA2eYa9/PReBntaM=
Subject key identifier: 86:EC:9C:71:D9:AF:7D:15:6F:BA:C0:E9:C3:B3:B0:C8:2C:49:1E:D9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29A1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/huyccdmvfRVvusDpw7OwyCxJHtk.roa
Signing time: Fri 01 Sep 2023 10:06:52 +0000
ROA not before: Fri 01 Sep 2023 10:06:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10657 (0x29a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=86EC9C71D9AF7D156FBAC0E9C3B3B0C82C491ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:a2:36:08:2e:fd:43:4e:01:bd:b7:e5:61:
12:9e:89:8f:c4:41:94:ec:21:9c:b2:9d:9b:d1:50:
02:02:83:27:f8:82:e8:39:41:ec:4e:d1:91:d1:01:
db:b4:8a:2e:92:6f:ad:b4:e6:0e:81:bd:b5:9d:a9:
e2:6d:c5:23:e6:57:1e:93:aa:61:7b:b3:90:a9:71:
c5:4b:d0:6c:c7:68:c6:e0:12:d0:89:01:9d:8a:22:
ae:d3:ae:e9:5b:7f:70:60:a5:98:aa:cd:a6:20:16:
02:ba:52:0e:80:af:08:71:f2:da:8e:4c:98:73:97:
e6:b9:d3:cc:ac:08:38:2f:03:df:7d:01:e6:18:fe:
9d:ea:67:20:94:e3:6c:53:6f:86:68:24:aa:32:a8:
8c:ac:68:f9:3b:bc:4f:e6:21:26:dd:60:83:11:23:
40:8d:fb:f8:48:5f:c4:14:e7:32:47:bc:b1:2e:da:
11:35:d6:a5:64:cd:d5:e0:ec:00:a5:33:1f:b5:d7:
c8:a9:a3:e7:e9:b6:4c:b4:f7:1e:e0:4d:43:75:e2:
d2:c7:2d:9c:ad:c2:e6:1d:be:4c:00:30:04:b5:3e:
2f:a5:1a:02:3f:5d:71:df:ec:d8:04:76:32:e1:48:
6d:03:25:03:9f:93:7d:78:f4:99:9c:63:17:e1:91:
e7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EC:9C:71:D9:AF:7D:15:6F:BA:C0:E9:C3:B3:B0:C8:2C:49:1E:D9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/huyccdmvfRVvusDpw7OwyCxJHtk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.8.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:2c:37:68:7a:5f:65:82:f9:3f:20:c5:18:2d:9c:b5:fb:8a:
9b:08:d5:74:df:bc:06:02:a4:92:27:b1:10:73:bc:28:1f:b3:
2c:88:55:f1:03:ef:ae:3f:32:3d:9b:41:d4:e4:c6:2a:49:85:
10:16:c6:24:ba:a9:f0:d5:00:1a:9c:5b:4c:45:4d:fd:8f:f1:
4d:48:63:ca:f4:88:1e:5d:55:85:54:5f:c2:c0:5f:7b:e1:d8:
9a:e5:b8:10:fe:7e:49:0a:f7:f4:67:b1:fb:34:60:4d:f4:c0:
3a:a2:f7:18:78:c0:7d:54:57:44:14:37:ca:95:9e:07:1c:19:
7c:65:d2:1d:18:97:42:2f:65:92:74:6f:50:69:ec:56:83:11:
3b:1e:da:ca:88:c3:ae:7e:fa:6b:b1:9e:26:87:e7:4f:bc:14:
de:dc:47:7f:a6:70:58:e6:c5:fe:c8:cd:9d:fd:c2:71:2b:d4:
7e:2a:5e:c2:96:ab:05:d1:33:86:54:9a:fb:ca:f6:00:3a:79:
20:f9:32:59:09:fd:dc:27:17:87:6a:33:15:cb:98:c0:4f:1b:
db:47:25:a9:0a:eb:54:74:24:ac:a4:f0:3d:af:f5:b9:fc:c4:
d4:e5:48:3e:f8:1e:e1:85:9c:5d:50:a4:af:5b:cc:21:2f:b8:
82:60:6d:02
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKaEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2NTJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDg2RUM5QzcxRDlBRjdE
MTU2RkJBQzBFOUMzQjNCMEM4MkM0OTFFRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9fqI2CC79Q04BvbflYRKeiY/EQZTsIZyynZvRUAICgyf4gug5
QexO0ZHRAdu0ii6Sb6205g6BvbWdqeJtxSPmVx6TqmF7s5CpccVL0GzHaMbgEtCJ
AZ2KIq7Trulbf3BgpZiqzaYgFgK6Ug6Arwhx8tqOTJhzl+a508ysCDgvA999AeYY
/p3qZyCU42xTb4ZoJKoyqIysaPk7vE/mISbdYIMRI0CN+/hIX8QU5zJHvLEu2hE1
1qVkzdXg7AClMx+118ipo+fptky09x7gTUN14tLHLZytwuYdvkwAMAS1Pi+lGgI/
XXHf7NgEdjLhSG0DJQOfk3149JmcYxfhkedXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUhuyccdmvfRVvusDpw7OwyCxJHtkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2h1eWNjZG12ZlJWdnVzRHB3
N093eUN4Skh0ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6QgwDQYJKoZIhvcNAQELBQADggEBAKYsN2h6X2WC+T8gxRgtnLX7ipsI1XTfvAYC
pJInsRBzvCgfsyyIVfED764/Mj2bQdTkxipJhRAWxiS6qfDVABqcW0xFTf2P8U1I
Y8r0iB5dVYVUX8LAX3vh2JrluBD+fkkK9/Rnsfs0YE30wDqi9xh4wH1UV0QUN8qV
ngccGXxl0h0Yl0IvZZJ0b1Bp7FaDETse2sqIw65++muxniaH50+8FN7cR3+mcFjm
xf7IzZ39wnEr1H4qXsKWqwXRM4ZUmvvK9gA6eSD5MlkJ/dwnF4dqMxXLmMBPG9tH
JakK61R0JKyk8D2v9bn8xNTlSD74HuGFnF1QpK9bzCEvuIJgbQI=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org