Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kJ2a_nCZXT2Lsv4x6MRYPIvmV7M.roa
File: kJ2a_nCZXT2Lsv4x6MRYPIvmV7M.roa (raw, json)
Hash identifier: wImgQsq0Afm8TjN86JWm9rVBpFK47T04FQpKP0idF9c=
Subject key identifier: 90:9D:9A:FE:70:99:5D:3D:8B:B2:FE:31:E8:C4:58:3C:8B:E6:57:B3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2842
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kJ2a_nCZXT2Lsv4x6MRYPIvmV7M.roa
Signing time: Fri 01 Sep 2023 10:05:08 +0000
ROA not before: Fri 01 Sep 2023 10:05:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 118.232.96.0/19 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10306 (0x2842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=909D9AFE70995D3D8BB2FE31E8C4583C8BE657B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8a:bb:b1:fb:cd:06:d5:8a:ec:64:a5:14:0d:
8b:8e:f6:f1:7d:ca:d3:09:09:88:86:e2:77:99:7f:
e3:60:32:17:83:2f:36:df:ce:31:3d:57:e5:30:aa:
93:e4:b7:ce:24:31:a4:29:79:7c:f8:51:5b:8f:f3:
b8:3d:19:3d:fc:ff:80:e5:a0:79:f0:8a:a9:46:36:
14:8e:3b:38:53:69:82:68:ed:2a:9f:54:a8:b8:c4:
33:c2:70:a9:19:ed:ce:8e:83:29:6c:57:02:95:a2:
de:93:c4:7a:a6:d1:52:d2:ec:54:2f:6c:cb:5e:8e:
6c:55:e2:c7:3b:6d:a1:c7:06:5d:7c:5d:be:e9:79:
fc:a4:b3:9b:d7:2c:8b:13:72:9e:bb:fa:7a:6b:21:
8e:ca:49:c6:a4:f0:c1:53:6b:e1:c6:4e:8a:25:5b:
4f:61:04:a4:fa:d1:8e:20:27:9f:17:66:5b:f0:75:
17:54:9a:b0:45:ff:d6:69:10:14:bf:78:8c:2f:2f:
c9:b3:b3:cf:b4:ff:17:e0:05:16:0e:9d:a9:bb:00:
32:67:57:83:64:a5:bb:a3:6a:fd:91:b2:cc:5a:62:
d3:45:ee:cf:9c:26:da:2b:8a:5d:5b:c1:a5:ff:7c:
df:18:c2:8b:65:af:65:16:7e:b6:6e:19:48:98:19:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:9D:9A:FE:70:99:5D:3D:8B:B2:FE:31:E8:C4:58:3C:8B:E6:57:B3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kJ2a_nCZXT2Lsv4x6MRYPIvmV7M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.96.0/19
Signature Algorithm: sha256WithRSAEncryption
64:7d:32:e2:45:8a:8f:41:bc:a2:62:9d:9d:b7:cc:8b:73:c0:
12:ee:10:8f:4f:76:7a:8c:50:b7:ae:22:be:eb:cf:15:3e:15:
14:b6:81:4a:da:52:0d:24:c7:36:8a:2d:ac:29:96:18:5f:6e:
fd:76:6f:0c:49:9e:18:76:6a:04:44:b7:59:2c:9e:04:b0:5c:
f8:6b:af:47:66:73:22:45:bd:0e:63:bf:4f:e6:81:3d:3c:de:
52:e2:10:ba:d5:a2:5b:d1:ef:b9:a6:c9:26:fb:cc:d8:2d:6b:
bb:26:ca:a1:c1:66:e6:26:93:9e:e5:05:3b:ff:9e:6a:9c:ef:
81:76:d3:17:32:47:ec:0d:f0:7d:4a:47:14:18:60:17:15:58:
81:7b:ab:91:50:f7:f3:45:6a:c9:3f:39:22:04:2e:c7:f3:a1:
52:9d:2b:f9:05:b0:c4:4b:69:c7:06:85:86:73:09:ff:12:a0:
de:2f:b1:61:34:c3:c9:72:41:f7:d5:40:a7:9c:b6:e0:de:f4:
1a:9b:a5:e2:2a:e0:b9:fa:83:22:28:a3:91:58:1e:3d:6c:47:
f6:d0:e8:93:e5:a8:61:d6:59:c9:63:91:2f:50:45:08:84:12:
7d:1e:49:72:46:1d:cd:ae:22:f6:bd:d3:ff:fa:60:20:eb:ae:
fb:b5:98:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org