Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ootXExzqMutqgvgbA6eUerd3cLA.roa
File: ootXExzqMutqgvgbA6eUerd3cLA.roa (raw, json)
Hash identifier: dQns627oTDjOkykYz3Typ8RTlstHgOQFhcTlQhER1ng=
Subject key identifier: A2:8B:57:13:1C:EA:32:EB:6A:82:F8:1B:03:A7:94:7A:B7:77:70:B0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B1D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ootXExzqMutqgvgbA6eUerd3cLA.roa
Signing time: Fri 01 Sep 2023 10:09:52 +0000
ROA not before: Fri 01 Sep 2023 10:09:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11037 (0x2b1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A28B57131CEA32EB6A82F81B03A7947AB77770B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:d9:0f:0e:31:ba:d1:10:3d:e4:10:08:99:
80:df:7c:40:d8:5c:71:de:e0:d2:8c:b6:4f:5f:8b:
be:b0:52:73:b8:b2:33:be:60:c2:36:df:b9:70:f5:
11:51:1b:d3:8b:93:aa:49:2c:e8:13:6a:7f:2e:60:
2a:cc:2c:dd:b6:7e:a0:ec:b2:7a:c2:6d:05:10:37:
f8:c5:bb:a5:a5:ad:8c:41:fe:b4:14:36:77:9b:cb:
dc:9c:65:eb:66:43:c5:db:fe:62:f8:8f:5d:43:45:
57:4a:69:2a:6a:8e:e3:54:b3:02:c9:d9:59:6b:d7:
cd:b7:55:75:19:f6:b7:2d:58:72:f9:2e:24:99:40:
c3:2a:6f:c7:72:14:48:f1:93:7a:47:37:2d:9d:24:
b3:ca:09:4c:a8:59:c9:22:14:b4:9c:ed:e2:3d:52:
d7:3d:e0:81:6b:7a:80:ee:9d:b3:0b:ee:02:4c:06:
f2:95:94:04:72:be:13:b5:f0:0f:cd:a5:07:32:ed:
da:20:f0:32:b3:56:d7:95:8f:c6:d5:50:94:53:ba:
d4:5d:f4:13:ce:58:fa:5b:06:fc:a1:f4:aa:69:89:
81:19:26:be:b5:6b:56:18:40:f1:21:24:1b:81:a7:
41:25:99:e4:fe:8f:9c:b2:00:b1:13:5c:45:95:38:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8B:57:13:1C:EA:32:EB:6A:82:F8:1B:03:A7:94:7A:B7:77:70:B0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ootXExzqMutqgvgbA6eUerd3cLA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:27:f6:e1:9d:8d:96:63:c0:f6:37:58:0a:97:f1:5f:98:c1:
7d:61:ff:b1:98:ae:0a:d2:bd:90:b9:ec:c4:d0:6e:37:8a:f1:
bb:37:ee:bf:95:a3:12:19:c0:37:9c:8c:7b:b1:17:79:52:8b:
07:f7:9f:a5:d4:2d:b3:14:38:17:77:12:db:2f:8f:71:35:b1:
01:48:0e:4c:89:2e:c2:e4:b0:0f:1e:7f:df:57:c5:48:32:8c:
f7:64:53:c9:e2:3b:77:be:bd:39:eb:8b:c0:84:50:04:dd:12:
7f:f2:4e:aa:d5:b6:b4:8a:ae:94:56:86:9a:9d:75:97:a6:da:
a4:1f:49:e9:c9:3e:f9:59:41:19:3b:42:05:2d:f5:25:fa:f4:
da:ca:e2:74:95:50:1b:20:9c:d2:48:b2:09:f3:e8:b2:a1:02:
63:af:ac:14:1b:91:3e:6c:62:fb:61:41:b5:db:a1:31:c1:64:
a0:3c:9d:55:87:c1:69:d6:be:34:7e:3c:d1:44:b5:e6:d2:b3:
c4:3f:db:86:ac:76:56:9c:93:78:7d:e1:f0:27:55:b4:02:90:
00:55:3c:99:39:46:7f:d6:60:67:21:05:87:3b:ea:c6:65:91:
e3:8b:13:df:4b:31:e3:c1:3b:97:51:c0:b7:87:cd:6f:b8:f5:
e1:8f:c2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org