Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ieZqUhACIrRLX5zH_INwnN7Kaf8.roa
File: ieZqUhACIrRLX5zH_INwnN7Kaf8.roa (raw, json)
Hash identifier: zFPKFYCeRmlaIVUTs0k6AbK8pCKvd9MSgRCde0PV60A=
Subject key identifier: 89:E6:6A:52:10:02:22:B4:4B:5F:9C:C7:FC:83:70:9C:DE:CA:69:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 291C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ieZqUhACIrRLX5zH_INwnN7Kaf8.roa
Signing time: Fri 01 Sep 2023 10:06:09 +0000
ROA not before: Fri 01 Sep 2023 10:06:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10524 (0x291c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=89E66A52100222B44B5F9CC7FC83709CDECA69FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:9b:35:0a:3e:98:b2:14:ad:96:eb:a2:fc:
c2:73:87:1f:d6:bc:fc:15:d4:36:40:23:a5:50:87:
9f:f9:73:8b:51:f5:db:db:ef:6a:c9:3b:5e:cf:d7:
a1:44:6f:fc:18:cb:0b:9c:5c:3f:b1:8a:24:c6:d4:
c3:db:f1:24:a0:41:1e:e9:25:70:b7:f0:1b:95:2b:
53:79:5e:69:5a:e4:33:13:d5:ee:1b:5a:ad:94:a5:
ab:64:09:e8:4c:85:c8:ca:25:2e:33:f1:90:74:ce:
ed:11:69:ef:27:a4:1b:88:ab:85:f3:80:80:22:46:
d9:10:ac:16:58:0c:60:ff:1c:08:37:6c:87:e7:48:
10:7a:76:a5:06:5d:6b:a0:34:09:48:e1:de:80:24:
9c:5a:e4:3f:c2:3d:b1:81:df:90:2b:4e:24:f3:6e:
9f:58:97:b2:4d:ff:1b:c1:c4:bb:93:e0:77:c6:9a:
db:66:eb:52:92:e5:59:6f:6b:41:fe:1b:b2:48:11:
f1:65:3d:5d:db:fd:a8:09:f0:98:49:fa:22:14:15:
82:dd:55:82:3e:be:9c:9c:70:9c:b7:66:3a:64:66:
46:0a:5c:31:05:03:b3:22:db:8f:e1:fd:5c:a7:16:
74:42:dd:79:71:89:6e:7a:4b:8b:2c:2f:7d:96:4f:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E6:6A:52:10:02:22:B4:4B:5F:9C:C7:FC:83:70:9C:DE:CA:69:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ieZqUhACIrRLX5zH_INwnN7Kaf8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.16.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:29:c4:3a:ea:af:b2:b0:13:8f:fd:dd:bb:de:13:be:6c:b2:
2a:01:e7:30:9a:98:d5:52:ca:c4:f3:9e:c3:8b:a3:47:90:7a:
ee:36:dc:f6:9a:03:d7:c1:a5:02:8a:58:12:1b:91:bf:68:2b:
26:8f:95:6f:50:b0:3b:6e:e2:2f:db:a1:9b:4f:fe:6a:40:b4:
28:31:d8:d1:d2:f8:ac:0e:29:93:73:43:bb:85:46:2c:ec:36:
1b:d2:d1:a7:ab:eb:6c:38:07:1c:98:50:9b:8f:58:c6:ee:f1:
04:9b:ab:9e:7b:39:0b:e2:2e:8c:c2:80:68:e3:1a:4a:24:aa:
a3:83:08:c6:e9:d1:5f:c2:2d:88:bc:62:94:14:98:00:cb:6d:
e0:5c:f6:e7:3e:29:a8:5c:f7:d4:58:2e:d0:7b:52:39:6a:c9:
65:35:cf:37:93:c2:00:78:ee:4a:85:ac:bb:cb:eb:16:80:79:
82:7f:2f:77:9c:55:ea:7f:59:af:72:53:fd:e9:8b:05:de:fa:
00:17:94:cb:de:57:4b:07:54:5c:c4:8b:d4:e6:d0:bd:f2:4b:
3e:69:f7:7d:1f:42:35:89:0c:ec:68:5a:49:82:cb:03:d5:b2:
2b:81:b8:f7:27:aa:a6:c4:be:38:99:55:2b:96:d5:80:05:ae:
c7:34:42:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org