Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nKSKZVo6CavuVldRJLofDDjyrbE.roa
File: nKSKZVo6CavuVldRJLofDDjyrbE.roa (raw, json)
Hash identifier: YVJxAWwGn6Jlaij0BG+o4mlLyoyM8rtxmhVEYi3d+ts=
Subject key identifier: 9C:A4:8A:65:5A:3A:09:AB:EE:56:57:51:24:BA:1F:0C:38:F2:AD:B1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 286F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nKSKZVo6CavuVldRJLofDDjyrbE.roa
Signing time: Fri 01 Sep 2023 10:05:20 +0000
ROA not before: Fri 01 Sep 2023 10:05:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 211.76.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10351 (0x286f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9CA48A655A3A09ABEE56575124BA1F0C38F2ADB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3a:ff:5c:76:de:f7:61:93:bc:00:92:61:48:
35:8f:13:d9:9c:e6:89:4a:93:f3:f1:e6:2a:7d:72:
ef:b3:d8:cd:c9:2d:44:89:09:4c:eb:0c:59:0d:f4:
ff:1c:d1:d7:95:d0:90:b8:ce:2b:93:27:db:92:19:
1e:4a:54:57:f5:25:71:73:cc:96:e2:a4:52:15:b2:
13:57:f7:e3:30:19:1c:75:71:6d:7f:b6:fd:aa:80:
05:56:72:4d:98:bf:14:71:44:d8:62:92:18:88:a8:
f3:50:22:8e:f1:13:c3:55:32:be:a8:97:c0:c5:d2:
e1:8c:e9:54:6e:8c:21:3a:c8:44:20:c9:0d:de:30:
f2:d4:74:79:ae:60:95:98:99:c0:8e:c0:75:a9:8a:
6e:89:d2:63:b3:f2:64:31:fc:de:2b:9c:bf:57:89:
3f:2d:87:98:c3:8f:d5:51:f6:e4:0b:b5:4a:3f:6e:
c3:bc:6d:ae:7c:2d:29:6e:ad:52:7c:66:06:22:1d:
79:b7:71:48:4e:f3:d8:f1:df:15:de:81:6a:0a:2a:
52:47:19:03:99:64:c7:58:93:77:9a:cd:ec:7b:65:
ea:ea:00:bb:74:1c:e8:10:d1:b7:d7:43:d0:71:82:
1a:ef:bc:10:91:80:1d:31:92:46:8c:55:be:49:33:
16:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A4:8A:65:5A:3A:09:AB:EE:56:57:51:24:BA:1F:0C:38:F2:AD:B1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nKSKZVo6CavuVldRJLofDDjyrbE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:8f:c2:dd:62:64:af:8e:6a:05:5c:7e:df:5f:fd:fd:5c:45:
4c:fc:09:ee:c9:2c:8b:4d:c6:3a:39:3a:50:19:46:62:d2:8e:
66:44:bf:7e:de:b3:ff:d9:6f:b1:ca:16:42:f5:5b:0a:06:d0:
42:5b:ad:88:0f:51:1d:a6:68:1e:05:53:9f:a3:3b:f9:41:92:
68:61:07:32:dd:48:30:7f:20:cb:6a:0c:ce:56:e3:30:cb:c0:
73:17:41:e7:a6:fd:a5:d2:58:0c:e9:10:01:1b:dd:5a:90:79:
03:8e:48:ae:61:66:34:0b:51:dd:ab:dd:a3:8c:a2:e4:8e:df:
f3:25:80:3c:52:f0:df:11:c3:b7:b8:c2:c8:89:0e:6a:63:35:
97:5a:5c:ec:fa:33:fe:b8:cd:32:78:65:09:8e:05:90:69:db:
9f:6b:12:32:7c:99:1d:55:92:71:60:60:66:e4:eb:3b:43:a9:
34:a0:88:94:2c:22:7c:00:bc:a9:4f:dd:6b:7a:ee:e5:56:43:
fe:fc:2e:6f:53:bb:27:0e:e3:7a:4b:a8:8a:7a:17:43:70:97:
fe:b0:5e:86:3c:00:cd:b9:31:4d:61:bb:f4:86:04:1c:ba:12:
46:96:4b:a3:9f:4a:da:95:75:69:c1:cb:b4:c0:42:bd:6b:8e:
be:ba:c9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org