Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kY2BnhWGZ1VN--hSrP5kenTLZX4.roa
File: kY2BnhWGZ1VN--hSrP5kenTLZX4.roa (raw, json)
Hash identifier: 6MHFHLbpMW+iRRdZT5ddYlOCeh5NrEKKy7qBsgahoEE=
Subject key identifier: 91:8D:81:9E:15:86:67:55:4D:FB:E8:52:AC:FE:64:7A:74:CB:65:7E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B0C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kY2BnhWGZ1VN--hSrP5kenTLZX4.roa
Signing time: Fri 01 Sep 2023 10:09:48 +0000
ROA not before: Fri 01 Sep 2023 10:09:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11020 (0x2b0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=918D819E158667554DFBE852ACFE647A74CB657E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:84:c0:62:d2:b6:d8:b1:dc:dd:56:02:90:d2:
d6:8a:77:79:30:d7:ba:6b:99:19:fc:46:1f:f7:49:
70:0b:e7:3d:f4:20:91:96:43:af:db:b3:d7:55:32:
de:54:75:b1:f3:6f:3b:1e:c9:9e:6b:94:ec:ff:7d:
41:64:ad:e2:1a:2e:97:25:52:ea:82:3c:e7:d3:06:
7c:c1:11:55:df:8b:ed:ab:81:fc:d6:ae:01:8c:5c:
f0:5a:6e:f7:a8:a8:b8:d7:d6:0f:8f:77:58:f2:8e:
f9:c4:1e:24:ed:39:9b:54:62:d8:63:2d:81:8a:d5:
03:dd:93:b1:7f:84:12:a4:bd:cc:1e:cd:ad:fd:88:
df:84:93:2d:b8:94:2c:1d:95:78:d2:f5:02:18:b8:
07:f9:04:53:d3:5d:bd:08:ea:98:d6:cc:e0:a6:72:
49:69:11:b4:ab:af:9e:51:d8:c8:7f:98:a4:5e:c5:
45:2f:91:66:82:f9:e9:d7:38:00:cf:0c:16:c0:4d:
ca:10:74:31:9c:bb:05:cb:e9:06:f7:cb:7a:53:79:
97:05:2a:a9:4d:70:3e:05:e6:8d:8d:c9:b8:2e:67:
6e:2a:0d:91:b4:35:e9:8d:12:45:33:f3:31:d2:2b:
41:c5:88:0d:cd:90:aa:e5:5f:ef:8c:c5:ed:ca:c7:
69:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8D:81:9E:15:86:67:55:4D:FB:E8:52:AC:FE:64:7A:74:CB:65:7E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kY2BnhWGZ1VN--hSrP5kenTLZX4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.108.0/22
Signature Algorithm: sha256WithRSAEncryption
55:29:3e:81:8f:f7:18:a3:db:75:18:e8:d7:fb:b8:0c:25:4e:
6b:02:2a:69:6d:fa:e1:06:02:c8:6c:2f:f1:e5:f6:3d:04:cb:
47:92:c0:28:1c:68:db:74:02:9e:6a:1a:e0:50:f8:7d:ae:22:
c2:fc:23:b5:8d:b5:27:d6:12:ca:9d:57:d7:45:e9:1c:dc:fb:
74:26:b0:e8:42:9f:b3:64:9c:47:e4:35:7b:a5:6a:71:05:b6:
ee:33:16:50:52:7a:71:11:4c:08:f8:bd:75:dc:3b:66:6b:15:
80:fe:df:98:03:26:54:1f:a9:48:3d:c5:4b:bd:c1:aa:30:e4:
f3:46:b2:e2:bd:8b:6c:3f:fb:15:91:7d:58:90:9d:81:1c:f7:
e0:11:de:7f:4d:1a:7f:3d:12:2f:f8:12:e9:e8:f4:ea:22:12:
09:21:ae:3a:2d:51:8f:26:5d:b2:f8:51:76:9c:7d:f2:37:2a:
ed:ca:70:f3:22:8d:1e:a2:16:80:96:e5:a6:2a:d6:3d:c5:2a:
a9:81:4e:11:64:2b:7d:b3:8b:a1:38:47:14:fa:4a:77:58:84:
5f:86:cc:61:88:cf:9b:8d:04:9e:45:4f:2e:0b:22:fc:31:38:
4a:02:b5:91:40:57:d7:a0:8c:fd:ec:57:ee:fe:b0:be:eb:61:
b4:a7:15:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org