Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kHC8b15zRSsBb9WBV-5Z3deb_Xs.roa
File: kHC8b15zRSsBb9WBV-5Z3deb_Xs.roa (raw, json)
Hash identifier: wfMMfuwazrHnR2Rdj9apNO/l+l3jI26/5BAVu49P6EQ=
Subject key identifier: 90:70:BC:6F:5E:73:45:2B:01:6F:D5:81:57:EE:59:DD:D7:9B:FD:7B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27DD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kHC8b15zRSsBb9WBV-5Z3deb_Xs.roa
Signing time: Fri 01 Sep 2023 10:04:38 +0000
ROA not before: Fri 01 Sep 2023 10:04:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.168.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10205 (0x27dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9070BC6F5E73452B016FD58157EE59DDD79BFD7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3a:f5:a2:39:7c:7d:18:75:8d:27:21:77:b0:
14:36:cd:52:ea:1b:09:4b:e9:21:f6:09:28:26:98:
35:65:ea:54:22:68:62:d4:e0:0a:63:8c:d0:b8:32:
59:45:01:da:e2:d3:b5:eb:bc:b2:bf:11:96:96:78:
f7:e6:aa:8a:8c:3b:f0:72:01:56:7d:a8:e3:ad:e3:
79:b1:bd:7f:57:1a:a4:4d:37:f3:fc:6c:a6:d3:52:
4d:b6:ed:68:7c:10:e4:db:f4:70:7b:ba:31:4f:2c:
99:1e:10:2f:c7:77:a0:76:e7:89:ea:4a:d8:16:4a:
fd:dd:47:80:83:a2:c4:c4:e6:8b:bb:4f:0a:9e:a7:
c7:de:eb:53:25:e3:91:8a:3b:92:eb:23:6f:7c:5a:
1c:47:cb:32:4d:32:06:44:ec:bb:cf:63:d4:c2:f3:
7b:32:93:c4:81:70:a6:b7:bd:be:63:c4:88:26:87:
16:3a:10:9a:b7:ae:ae:4a:8c:9f:89:9c:52:43:88:
f0:81:d5:e6:72:1a:cf:57:84:ee:ae:06:4d:b6:c7:
ce:38:7b:d6:92:01:e4:4a:f0:a8:2d:44:0b:42:12:
a3:52:d9:44:cd:b2:d5:b9:20:7f:0d:fb:c5:b6:a6:
91:f4:52:3a:92:1e:3a:d4:c7:05:89:60:6b:86:98:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:70:BC:6F:5E:73:45:2B:01:6F:D5:81:57:EE:59:DD:D7:9B:FD:7B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kHC8b15zRSsBb9WBV-5Z3deb_Xs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.168.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:ac:22:27:77:c7:e5:bd:fe:bd:55:67:ac:4c:af:84:60:d3:
f8:54:6c:0a:4e:d1:29:48:6a:71:b7:1c:94:a5:c1:d2:d4:45:
86:fd:2a:bd:2e:d1:a9:d3:c1:5a:38:6c:90:dd:97:01:22:e6:
36:95:28:34:9b:4e:18:1b:f4:75:04:d0:b8:2b:cf:97:c6:a3:
63:80:77:7b:74:37:52:0c:02:f1:94:02:53:b0:83:52:b4:c4:
d6:25:e5:d1:16:d8:be:ba:fc:81:ef:e2:dc:1b:15:a1:1b:4b:
66:e6:ea:04:c6:eb:f2:72:f3:8a:93:81:7a:0e:a9:b4:5a:4e:
d0:d3:cb:7e:a7:c9:59:0e:d7:c0:8a:cf:21:f4:0b:eb:77:10:
fa:b9:70:1e:8b:13:23:93:ea:de:c9:91:7d:61:ff:fd:77:ac:
1d:33:98:ce:31:b4:49:ca:26:7f:f9:83:a2:20:33:40:11:1a:
96:57:47:85:c9:2c:1c:03:85:1f:e2:38:57:e3:22:48:73:55:
d8:4e:8f:b5:9b:a0:6c:bb:47:b8:a9:1e:be:a7:ed:07:34:0f:
ed:3e:65:86:93:75:63:2e:1e:76:b1:b0:7f:4d:74:3f:aa:53:
7d:40:07:5a:52:ba:62:68:d5:d4:1b:9b:e5:ab:88:46:f3:d9:
f6:a4:14:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org