Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q3bGlKoODzXSN8docu4htqxDxlw.roa
File: q3bGlKoODzXSN8docu4htqxDxlw.roa (raw, json)
Hash identifier: iupckbugtIm8jjqsnFl/mt++UqK3CGjJvFWn+5qYXXc=
Subject key identifier: AB:76:C6:94:AA:0E:0F:35:D2:37:C7:68:72:EE:21:B6:AC:43:C6:5C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29A2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q3bGlKoODzXSN8docu4htqxDxlw.roa
Signing time: Fri 01 Sep 2023 10:06:52 +0000
ROA not before: Fri 01 Sep 2023 10:06:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10658 (0x29a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AB76C694AA0E0F35D237C76872EE21B6AC43C65C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:66:57:e0:54:bf:fc:0a:e4:25:f7:b7:3a:
65:ae:b0:35:1b:d1:40:5b:4d:3b:50:59:f5:1f:4f:
f7:4a:5b:f0:b1:b2:43:a9:2e:48:dd:4e:00:03:a4:
cb:2f:a5:3d:72:48:e9:f8:f0:f3:d1:b9:29:d0:f3:
6e:d3:bc:e5:e9:d5:18:d1:dc:e9:20:2a:87:02:8c:
3f:86:5d:23:5f:7a:13:a6:0f:ec:15:1a:da:28:a9:
9e:0d:80:1c:2f:e8:41:c2:a4:64:af:7b:47:f4:1d:
c4:c8:64:21:d7:49:9f:52:ad:16:e3:7c:a7:b2:5b:
75:52:16:65:23:43:9d:90:7f:47:fb:05:c2:8c:e8:
92:b0:dd:d6:1f:b8:fe:77:2e:85:33:3d:63:0f:3c:
32:51:56:76:10:59:28:aa:df:48:3e:0d:64:eb:8b:
9d:48:9f:f1:92:60:b4:c4:7d:d1:0e:ff:f9:0b:49:
42:67:cb:3c:81:6d:12:dd:67:8e:00:d2:77:ab:2f:
de:3e:0a:0f:f7:1b:e8:f5:9c:ab:6c:98:ca:2f:f2:
23:11:6c:94:82:cd:c0:9a:e2:33:db:70:9c:2b:e1:
5e:f6:cd:53:94:b2:36:f7:e1:b4:58:e2:d1:b3:6c:
f1:23:09:5a:45:bd:c3:c1:74:72:be:a6:c2:08:b8:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:76:C6:94:AA:0E:0F:35:D2:37:C7:68:72:EE:21:B6:AC:43:C6:5C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q3bGlKoODzXSN8docu4htqxDxlw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.4.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:9f:24:74:46:8e:e8:e2:4b:8a:50:b9:5e:07:b5:77:f4:d0:
71:46:fa:59:ec:c3:e8:26:74:3f:e5:e0:80:a8:44:a1:72:92:
f4:68:f9:fb:c8:5d:86:c0:34:0f:8d:7d:31:86:b8:28:c9:38:
f4:66:ca:af:c8:f9:7e:7a:91:ff:6c:07:d1:ba:75:25:08:99:
9b:be:f4:cc:03:07:ef:09:fd:8d:bf:d3:c0:be:01:98:ff:dd:
52:7b:6f:f6:a5:81:9c:c2:f8:44:08:30:e1:20:bf:4d:85:8d:
ce:08:72:8d:0d:55:41:6f:a9:95:cb:30:83:0f:4c:10:15:6e:
f3:93:c9:32:f0:44:9f:b0:82:46:45:12:bf:3a:87:58:55:a9:
33:17:12:5b:83:e8:ed:d8:99:eb:1b:6b:85:41:d6:62:5d:d5:
5e:4e:7d:19:1b:f7:67:39:a2:34:0f:e5:90:a5:2c:c1:78:44:
93:93:31:92:ad:8e:81:07:cb:9b:e8:35:33:06:a1:d0:6b:5f:
e7:ff:5d:ea:13:e1:b3:6b:5a:7e:aa:13:65:ba:aa:df:5c:f3:
22:1e:25:7f:a9:04:92:3b:31:79:bc:07:91:3b:89:8d:89:17:
c4:79:35:77:e6:a2:04:fb:51:1a:4e:20:3d:90:c1:50:1e:3f:
f7:16:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org