Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pjmCi0wbSMfA1qiMYZG3iB5tIBc.roa
File: pjmCi0wbSMfA1qiMYZG3iB5tIBc.roa (raw, json)
Hash identifier: FeYJcjb1CV+vY/A5lH12q+79khw80u0z47iBYmlaiKE=
Subject key identifier: A6:39:82:8B:4C:1B:48:C7:C0:D6:A8:8C:61:91:B7:88:1E:6D:20:17
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A80
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pjmCi0wbSMfA1qiMYZG3iB5tIBc.roa
Signing time: Fri 01 Sep 2023 10:07:58 +0000
ROA not before: Fri 01 Sep 2023 10:07:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10880 (0x2a80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A639828B4C1B48C7C0D6A88C6191B7881E6D2017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:c6:a4:ad:95:c5:fa:de:5c:c4:5f:99:6b:
d3:84:44:66:e0:9e:32:3c:4f:f7:3d:63:db:30:05:
70:6b:b0:4b:02:b5:e8:2c:8c:1e:34:33:c4:07:eb:
46:bf:e2:11:f0:34:7c:4b:63:68:46:02:28:7b:1e:
28:ab:10:75:e4:10:96:a6:b7:3a:fc:b5:e0:97:c4:
ea:2a:6e:d5:0d:83:f0:77:f8:44:0c:d8:07:34:2f:
7d:1a:4b:33:8c:d3:35:f4:c7:80:ca:0b:6f:50:10:
1a:a6:13:80:f8:67:0d:e6:98:78:27:ef:1e:97:06:
1c:02:80:fd:e2:11:40:8c:02:16:60:99:3e:03:47:
f3:e1:1a:e5:1d:5f:c4:a6:8a:31:33:ea:e3:73:cb:
ff:f3:1c:ae:fb:cb:60:de:58:8a:ce:6a:78:35:bc:
fc:be:63:15:d6:99:04:02:4b:35:6b:c8:f4:e5:9e:
02:a7:9f:f7:94:e8:34:26:01:87:0f:5d:81:09:09:
de:57:08:81:cd:9d:c7:1e:1c:d9:9b:92:af:24:a1:
31:a2:60:26:e9:e9:7e:f0:e1:df:44:0c:2b:47:57:
70:40:f1:3b:b6:91:52:79:ed:e7:19:4f:60:58:a5:
28:e3:7f:d2:a5:2c:ae:00:7c:f7:5e:95:00:68:05:
80:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:82:8B:4C:1B:48:C7:C0:D6:A8:8C:61:91:B7:88:1E:6D:20:17
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/pjmCi0wbSMfA1qiMYZG3iB5tIBc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.244.0/22
Signature Algorithm: sha256WithRSAEncryption
24:5b:a7:a0:78:29:17:28:2e:ff:25:67:f5:29:10:ef:3b:03:
0d:5f:08:b3:55:50:2e:b3:77:d7:ad:cc:d6:cd:25:c3:54:6c:
d0:c7:db:ec:71:fc:4f:f0:ed:42:83:35:5c:93:ba:78:5f:e9:
e4:28:e2:af:c8:30:ac:e8:eb:f7:3e:1a:d0:ed:0b:af:9a:04:
83:c4:9c:f5:31:ad:90:f1:09:c8:98:f7:48:ad:97:08:6c:5d:
45:93:7a:47:2b:f7:f2:e8:95:2a:49:8c:d2:fc:0a:31:0d:63:
44:bf:1e:9f:45:7c:fd:26:0e:cb:34:33:86:1d:61:14:7d:2d:
33:39:cc:64:b6:12:59:e8:c6:15:74:17:39:7c:5d:76:45:3b:
71:6a:cd:36:c2:fa:28:60:2e:fd:9d:41:aa:5e:c2:ee:eb:4a:
96:17:73:c7:02:ea:cf:8e:54:18:1e:2f:48:68:75:93:4a:07:
ae:f0:6b:79:e2:34:7a:30:3c:55:9f:49:c2:57:ee:08:fb:ef:
5e:5f:7d:f8:b1:a7:3a:61:c7:a6:d2:03:8f:c3:9e:3f:0d:19:
55:df:37:7c:12:e4:ad:e4:41:41:4e:ae:34:45:31:dd:4f:c5:
5f:bb:10:3b:ed:84:86:c8:57:69:0a:22:1c:1d:18:82:fd:ea:
34:30:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org