Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rAWAcM83KCw6d1MYkPdaN-a9ZSM.roa
File: rAWAcM83KCw6d1MYkPdaN-a9ZSM.roa (raw, json)
Hash identifier: 6xxBjAX8PqI52Dc06qchai0yvfPIDN3V41D+fWUBxWs=
Subject key identifier: AC:05:80:70:CF:37:28:2C:3A:77:53:18:90:F7:5A:37:E6:BD:65:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2980
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rAWAcM83KCw6d1MYkPdaN-a9ZSM.roa
Signing time: Fri 01 Sep 2023 10:06:40 +0000
ROA not before: Fri 01 Sep 2023 10:06:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.120.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10624 (0x2980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AC058070CF37282C3A77531890F75A37E6BD6523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c1:6a:d0:a3:4b:7e:2f:ab:b8:c2:f0:c4:31:
65:59:09:11:4e:e3:c3:c2:1f:de:a7:0b:bd:cd:fd:
93:db:97:eb:9e:1c:37:59:98:79:e5:1a:5f:7c:41:
3b:af:0d:5a:5d:d2:ab:23:af:e5:ed:6f:73:fa:fa:
dc:4b:f0:89:91:69:32:6d:35:b6:58:2f:d3:a8:25:
46:c0:40:d3:3a:f9:84:94:1d:ce:b9:d4:70:f8:00:
7d:a4:3f:8e:92:19:e6:fc:92:86:1f:ac:af:b4:09:
f5:ac:e4:79:ef:d3:7c:ae:f0:3b:f0:b2:63:af:f5:
5a:bf:ad:e6:4b:02:d3:70:ea:47:a1:73:40:95:a7:
13:3f:0d:ad:ce:29:0e:d2:e2:93:e9:ef:d7:d5:31:
4c:05:22:4e:c1:49:0a:8d:eb:46:60:bd:41:5e:53:
69:9b:51:ec:48:51:18:75:12:a3:41:9e:c9:e0:38:
1b:cf:40:32:cf:8f:f0:6b:be:8c:4b:77:38:c6:d2:
01:f9:f0:41:32:d6:ce:1a:6d:19:ed:0b:3a:9e:ce:
f3:88:cb:80:f9:7f:14:dd:41:08:cb:40:04:48:34:
23:d6:5b:5f:37:2f:47:16:18:f1:2e:79:32:8b:67:
34:38:0b:80:27:cb:2a:3d:1c:4f:c9:21:4f:2f:03:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:05:80:70:CF:37:28:2C:3A:77:53:18:90:F7:5A:37:E6:BD:65:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rAWAcM83KCw6d1MYkPdaN-a9ZSM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.120.0/23
Signature Algorithm: sha256WithRSAEncryption
94:c3:ba:18:2f:40:90:35:7c:a6:3c:78:c9:26:4c:5e:69:13:
ca:46:84:c4:00:ab:42:17:87:a9:66:84:87:92:1f:a1:60:6d:
3e:e3:94:04:18:c3:9a:78:42:1a:cd:68:0f:20:af:ad:4c:79:
05:8c:96:c8:6c:48:5f:02:2c:46:36:25:af:c9:e6:69:e4:b3:
cf:88:99:0b:82:c3:ef:68:6e:9d:cd:38:d1:79:09:4c:e6:ef:
47:63:73:bc:5f:ba:3c:1a:24:99:9d:da:df:43:f4:37:58:9b:
6d:3c:1e:b7:b6:8e:6c:43:34:65:82:58:93:de:f4:3f:30:5e:
f1:e1:0f:87:eb:62:7f:63:a8:7e:91:7e:b0:94:6f:04:7c:94:
27:14:09:0f:7d:32:44:ba:50:20:62:ab:4c:7b:07:d2:2c:3b:
52:d7:91:b7:f4:df:ab:95:eb:9f:1a:13:3d:7c:9d:89:45:32:
8e:4c:8d:e2:8e:39:9f:5a:b4:a0:24:ad:ec:76:43:24:4c:98:
c7:5e:c3:63:88:37:08:7d:12:67:e6:b7:99:29:22:d9:a7:4c:
ee:f8:eb:04:2a:17:13:02:08:ca:73:e2:aa:e3:00:f1:7b:66:
5c:e5:ae:40:f1:8b:31:70:0e:fd:1b:aa:1b:66:15:60:65:23:
f8:d8:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org