Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sNFwunhLxfgLUuDmuxALEFQS7OU.roa
File: sNFwunhLxfgLUuDmuxALEFQS7OU.roa (raw, json)
Hash identifier: 28G5K7v+PR2WkXE51O5UB4D+8I6PFRV2RCkV4afHmd8=
Subject key identifier: B0:D1:70:BA:78:4B:C5:F8:0B:52:E0:E6:BB:10:0B:10:54:12:EC:E5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 299C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sNFwunhLxfgLUuDmuxALEFQS7OU.roa
Signing time: Fri 01 Sep 2023 10:06:49 +0000
ROA not before: Fri 01 Sep 2023 10:06:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10652 (0x299c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B0D170BA784BC5F80B52E0E6BB100B105412ECE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:8c:c5:6b:ec:f9:14:df:90:18:42:25:0a:
59:02:71:0b:99:47:1d:1f:d9:2f:45:5b:4d:9a:af:
ef:ab:fd:c6:84:17:ee:fd:88:b3:9d:9f:a4:d3:a9:
71:17:77:ba:4d:41:66:d1:73:99:94:ea:1e:4b:c3:
9a:65:23:25:3c:b4:a4:ac:64:0b:12:87:b2:32:5b:
23:6c:46:41:30:f6:ce:88:c8:ce:fe:db:9a:c9:17:
bc:4c:a1:fa:c2:fb:30:2d:7c:7d:f8:a3:7d:19:a4:
4f:67:98:f3:5f:45:81:0d:a9:88:0c:f7:1d:87:0e:
45:77:6f:01:41:73:27:81:6d:ec:df:af:0f:d1:29:
d1:88:ef:9e:bd:18:12:0c:c0:58:8e:ec:fb:16:68:
f6:a8:0d:fa:ac:07:6e:9f:c2:ab:64:62:ef:b8:51:
cb:f9:ce:3e:b9:0a:50:6f:82:66:e0:d3:b6:5a:27:
3e:fd:b7:2b:c0:f2:47:f0:87:84:4e:83:af:b7:6e:
c2:78:ea:69:09:63:79:a6:0d:51:bc:c9:85:ca:17:
35:9f:40:0a:55:e6:63:59:83:9d:c6:39:b8:eb:7a:
07:76:78:83:7b:5b:f4:12:b9:f3:e2:85:43:c1:f5:
83:ca:bf:be:d6:08:5b:99:7b:20:6b:f9:cb:2a:de:
0e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D1:70:BA:78:4B:C5:F8:0B:52:E0:E6:BB:10:0B:10:54:12:EC:E5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sNFwunhLxfgLUuDmuxALEFQS7OU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.232.0/21
Signature Algorithm: sha256WithRSAEncryption
ae:6b:10:04:71:eb:a5:20:ab:7f:d5:6e:84:05:d8:50:0a:03:
b6:e9:3c:4e:84:ed:0c:69:71:6d:82:c9:9d:01:00:ee:51:dd:
8a:86:99:9c:e3:c2:00:e0:c8:c8:de:c9:5d:6a:1b:82:a0:f9:
e4:54:90:e9:8c:6a:c2:c2:7f:ca:42:dd:8b:2e:33:14:28:a6:
65:3a:d8:69:d3:b3:31:ca:45:12:71:e0:db:17:86:fe:2f:3c:
49:ba:c5:04:b8:7f:3b:f2:13:ed:09:03:60:80:37:24:2d:6e:
80:0b:42:46:c6:4f:18:44:5c:6a:0b:f9:49:61:6d:2b:99:2c:
55:c9:4f:a2:f2:97:f5:c8:84:ae:c1:aa:db:2b:26:ab:66:7a:
93:6b:11:55:36:b1:b5:9e:c3:7e:e5:9e:d5:24:28:71:41:b0:
14:96:08:08:0a:36:10:55:42:91:2d:bd:eb:59:59:63:78:17:
95:bd:17:ea:36:4d:6d:a3:77:4f:47:ca:f6:0f:e1:8c:2f:f8:
96:d3:2f:e8:ac:26:50:c5:39:60:f2:67:01:f2:2f:72:cf:be:
11:5e:ae:a6:28:f7:a0:05:dc:78:6b:aa:83:4f:94:bf:fd:d5:
33:63:a3:20:74:de:78:1d:85:fb:0a:b2:c2:3e:3c:e4:5a:80:
16:62:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org