Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lprscHnoXDbcKARpBPw5vHbtG7I.roa
File: lprscHnoXDbcKARpBPw5vHbtG7I.roa (raw, json)
Hash identifier: x+u4h0KfhzXFnyzAzH1MDslCSavDy0lAJNnOCyBa0DQ=
Subject key identifier: 96:9A:EC:70:79:E8:5C:36:DC:28:04:69:04:FC:39:BC:76:ED:1B:B2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 295C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lprscHnoXDbcKARpBPw5vHbtG7I.roa
Signing time: Fri 01 Sep 2023 10:06:25 +0000
ROA not before: Fri 01 Sep 2023 10:06:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10588 (0x295c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=969AEC7079E85C36DC28046904FC39BC76ED1BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:bd:1d:e9:6a:5e:47:5a:84:1d:c6:49:19:
16:c6:17:6f:4b:73:83:59:80:92:70:20:32:a6:c2:
77:85:6e:c1:71:34:93:b5:74:66:74:c2:c8:de:81:
cd:be:43:8c:ff:e0:de:ca:d9:84:1c:74:ad:25:b4:
00:f1:08:f3:54:ff:48:48:18:f3:5c:74:55:75:33:
96:9d:52:69:25:ab:64:34:cc:e2:e9:82:02:f8:50:
17:69:bc:7e:1d:da:97:ed:c0:fe:e8:2b:12:b0:04:
6c:c8:72:9d:d2:0c:95:59:6a:c0:83:96:7b:32:80:
89:38:f2:ba:ea:e9:60:79:c8:92:04:fb:12:65:7d:
93:fc:e6:15:7f:3e:06:1f:5f:10:ef:e9:f9:7b:04:
8f:0a:84:b7:fd:a1:e5:b1:3c:2f:5d:aa:4d:26:24:
8c:0b:67:61:0b:9e:64:62:31:9d:1d:33:07:8d:6a:
ed:db:98:39:11:8c:2a:5f:9d:36:06:41:78:65:7d:
59:54:83:18:b7:5a:4b:f8:40:ed:dc:ed:e6:c8:f3:
0a:a2:b7:01:ac:17:29:72:2b:fb:d4:80:cb:d6:45:
3a:3c:81:9f:fa:2d:41:bf:14:81:cc:20:34:3b:e3:
0e:85:bb:a7:b0:e6:48:0b:95:a1:3c:8c:9d:64:5b:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9A:EC:70:79:E8:5C:36:DC:28:04:69:04:FC:39:BC:76:ED:1B:B2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lprscHnoXDbcKARpBPw5vHbtG7I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.223.0/24
Signature Algorithm: sha256WithRSAEncryption
77:35:30:e5:bb:fb:91:bc:c3:af:45:6f:e9:e7:aa:06:a8:c2:
aa:84:3f:cc:b6:7d:9f:d9:df:8a:dc:d8:ad:f0:5f:4e:7d:ca:
0c:cc:84:6f:8f:65:91:24:d2:36:97:3c:e6:7c:48:d7:64:3e:
8f:9e:0c:b7:c2:cb:10:ab:3f:30:7e:1c:5f:d7:eb:6a:ab:87:
bd:46:ae:e6:5b:e4:14:9c:76:ad:ab:b6:9f:69:87:89:34:76:
7e:bb:b5:e0:72:9b:75:39:29:02:49:0b:25:7d:48:f5:33:5e:
b2:b7:53:48:b9:f3:3f:8f:f5:e4:15:36:85:e0:eb:1b:e7:82:
12:18:2c:30:7e:08:5d:11:91:8b:21:00:b5:40:d2:73:6e:87:
12:ff:c9:f8:97:91:cf:35:e6:6d:35:b0:2f:5e:bd:c3:28:64:
a4:c4:5e:8f:c0:db:6a:8a:92:48:13:80:d6:83:6e:ea:84:7f:
30:fc:14:a9:bb:19:0c:0b:7e:9f:e1:26:2d:2a:46:6e:dc:98:
77:5d:b3:e8:d4:e7:b2:36:9b:3a:71:7b:3a:f0:31:a6:41:c5:
e2:cc:1f:bb:4a:60:46:c8:c2:bb:4a:4f:84:da:b2:6f:7b:0d:
c6:97:0b:cb:96:b3:e1:bc:45:52:8f:f6:e3:93:3f:eb:44:fd:
e9:98:8f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org