Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIMv5CUCByTj0LFEtEOpEJ3hEBM.roa
File: kIMv5CUCByTj0LFEtEOpEJ3hEBM.roa (raw, json)
Hash identifier: iQeDFZnt6yUlfyjmTnq4MbaTbyyhX3rMM3/lrtnZb7s=
Subject key identifier: 90:83:2F:E4:25:02:07:24:E3:D0:B1:44:B4:43:A9:10:9D:E1:10:13
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2987
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIMv5CUCByTj0LFEtEOpEJ3hEBM.roa
Signing time: Fri 01 Sep 2023 10:06:43 +0000
ROA not before: Fri 01 Sep 2023 10:06:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10631 (0x2987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=90832FE425020724E3D0B144B443A9109DE11013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:b0:dc:34:24:dc:9d:06:e5:c0:27:56:8d:
34:19:1a:b6:e0:6e:b3:02:7b:81:69:0d:56:12:fc:
9e:06:15:05:9e:32:93:ea:5e:61:58:36:e9:59:6e:
7f:80:bf:38:c3:e6:34:33:d2:51:32:85:75:97:b1:
96:9e:e8:8d:f9:48:e2:6b:d3:e1:16:b9:e0:5a:15:
2b:fe:25:c1:ee:ee:3f:59:f9:3c:05:9d:1f:55:95:
98:92:17:2e:7b:05:55:39:97:d5:d2:2c:f1:79:05:
ea:83:5f:38:b9:00:f6:f1:53:1e:0a:2d:d6:5f:45:
a6:c5:f6:17:c8:6f:51:ec:29:e8:8a:15:c4:05:be:
d8:7c:91:29:9f:dd:c8:77:bc:87:77:9f:7f:bd:2f:
69:e3:42:d5:cf:23:bf:ea:2a:a9:d5:79:03:3b:8b:
f2:35:88:09:23:dd:7d:ae:34:aa:26:22:55:c4:50:
bf:58:9c:50:45:02:4d:e9:59:09:a0:c4:51:cf:3f:
f7:bb:0b:bd:9e:9f:7b:92:6b:ce:34:be:3b:29:cf:
62:58:7e:16:e7:0d:95:16:0c:4a:2a:fe:e5:d0:25:
3f:38:8b:75:33:04:d6:d5:02:5b:29:56:b2:35:ec:
3c:2c:23:b1:57:bc:0e:c7:33:23:26:80:6a:32:11:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:83:2F:E4:25:02:07:24:E3:D0:B1:44:B4:43:A9:10:9D:E1:10:13
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kIMv5CUCByTj0LFEtEOpEJ3hEBM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.44.0/22
Signature Algorithm: sha256WithRSAEncryption
03:0b:38:8f:ec:e7:40:16:fa:d6:de:55:60:38:3c:4d:4c:b9:
18:d0:b5:70:f1:ec:73:6c:7d:d7:e8:56:d4:d9:df:6e:c9:b7:
63:cf:1e:36:26:45:2a:da:55:cb:ca:94:fd:78:e6:da:d9:95:
c2:7b:19:d7:11:21:cd:8f:5a:1e:33:d0:20:cd:68:61:c8:db:
f9:9c:bb:2b:e7:f6:3f:80:1a:23:62:e9:c4:c5:0f:a2:e8:7e:
a1:c2:9a:27:37:37:22:60:c3:01:aa:69:cf:c4:20:3b:ec:5d:
f5:ab:7e:a9:3a:1d:50:da:4d:22:1e:1a:e7:9b:6b:72:a6:9a:
24:45:97:ee:06:01:98:7c:07:cd:48:ed:36:2e:82:4c:5d:d7:
2d:8d:f1:52:88:ed:68:6b:a7:6c:2f:b7:4a:32:80:a7:9d:6a:
61:80:f6:b8:33:7a:7e:b9:3d:d2:65:d0:fe:f3:b2:c7:c3:67:
41:21:12:78:83:3e:73:e3:a9:23:99:8f:de:58:e5:a0:89:02:
62:04:dd:50:e5:84:bf:95:b9:14:25:1a:96:17:ea:ce:37:ab:
05:fd:35:00:d7:66:3b:75:17:ef:b5:55:30:c7:cd:f5:94:cf:
1d:91:3a:28:98:ef:a9:f1:a7:c2:a7:23:e6:49:b0:e5:df:b1:
24:e2:3a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org