Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIFz_TWzLxO-c8Ekb_zV3tRH9Uo.roa
File: jIFz_TWzLxO-c8Ekb_zV3tRH9Uo.roa (raw, json)
Hash identifier: 9fynbJ/RYA8/HNlVZ7sLVhrBJsLeI6LFpjp2yDiIo1A=
Subject key identifier: 8C:81:73:FD:35:B3:2F:13:BE:73:C1:24:6F:FC:D5:DE:D4:47:F5:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AE5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIFz_TWzLxO-c8Ekb_zV3tRH9Uo.roa
Signing time: Fri 01 Sep 2023 10:08:25 +0000
ROA not before: Fri 01 Sep 2023 10:08:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.136.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10981 (0x2ae5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8C8173FD35B32F13BE73C1246FFCD5DED447F54A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c6:29:52:10:9a:76:33:cf:d4:9f:d6:8d:56:
5b:8d:7a:5b:0f:ef:f3:76:99:dd:e5:8a:a7:20:c0:
a3:e6:56:2f:a8:28:cd:06:71:90:62:19:ef:42:03:
8d:fd:7c:b7:6f:07:46:ee:ee:df:88:17:ea:82:ac:
1f:8b:8c:69:3f:40:bc:f3:e5:c4:06:7a:65:82:e9:
5f:a7:f2:33:28:3b:71:bc:95:56:25:82:cf:82:89:
3c:2a:96:cf:84:5d:29:a6:39:4b:0d:74:9c:4e:b1:
3a:5b:bb:2e:9a:68:dc:5b:80:5b:b1:5e:c7:f1:29:
15:46:14:20:3d:eb:73:1d:93:74:a2:a4:8f:5f:f3:
35:b9:33:6a:74:40:58:86:4b:b8:b6:cd:2c:53:d3:
1b:8b:e4:69:c6:50:7c:65:ec:2d:d1:84:1b:44:63:
ad:d9:27:4b:55:c5:6c:0b:16:d6:16:1b:fe:56:6f:
b0:56:2b:5e:50:bf:87:8d:e1:00:2a:ed:b2:2c:a2:
2b:c7:97:9c:27:cc:b5:52:5a:a4:ef:70:dd:3d:7e:
51:7c:e4:e7:2b:79:d1:42:c3:58:47:cb:22:a2:51:
d9:ff:71:a1:28:eb:a4:5c:40:12:ce:df:f1:21:a7:
df:63:97:b3:a5:52:9f:e2:b9:9b:a8:ef:69:3e:bf:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:81:73:FD:35:B3:2F:13:BE:73:C1:24:6F:FC:D5:DE:D4:47:F5:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIFz_TWzLxO-c8Ekb_zV3tRH9Uo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.136.0/21
Signature Algorithm: sha256WithRSAEncryption
18:87:18:2f:67:1a:a7:ba:79:d9:90:1a:08:71:78:26:13:79:
32:71:01:35:fe:e7:b5:07:3b:f9:bd:0d:3d:10:c6:55:25:70:
05:5e:8f:18:02:79:e9:d7:20:d4:91:6e:3f:be:9f:83:04:d1:
99:52:29:e8:1a:c3:39:cb:fe:7c:82:bc:63:ea:22:04:7b:cc:
b2:05:97:d7:df:a5:6b:c4:69:74:64:b0:34:68:f8:e5:e9:74:
70:f4:2d:43:a3:b9:07:31:a7:1d:b4:7c:d1:b2:c0:65:3d:6e:
92:9a:b9:ef:a9:00:42:1a:c0:0a:59:7d:d6:3a:d5:d8:ce:4a:
4b:d8:c2:05:e5:16:e8:c7:cf:cd:8b:f0:0d:84:a9:49:f7:04:
2f:88:5e:7b:48:6d:45:07:97:cd:79:fa:b8:84:0e:e0:13:50:
2e:fe:1b:cb:a8:45:68:23:69:e7:b0:4c:4d:66:cd:79:8d:45:
d2:a5:35:d3:86:3c:7f:d5:25:45:9f:6e:1e:48:74:f7:15:bb:
8e:47:ac:27:29:c2:a4:22:82:d7:7e:98:59:03:1a:38:60:f9:
89:a4:ff:31:12:f5:c7:00:ee:40:1d:68:24:1a:33:5b:d0:be:
55:79:4b:98:d4:a1:d6:fe:bb:d7:bf:58:95:25:79:9f:ec:90:
fe:06:89:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org