Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sPFzY3jpdGAJ5P8F2vtePCQVeI0.roa
File: sPFzY3jpdGAJ5P8F2vtePCQVeI0.roa (raw, json)
Hash identifier: Ale/7PezCpEZd9pDIPhjAUaFxYQb+ojkt8c2N1Yk2KE=
Subject key identifier: B0:F1:73:63:78:E9:74:60:09:E4:FF:05:DA:FB:5E:3C:24:15:78:8D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29C5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sPFzY3jpdGAJ5P8F2vtePCQVeI0.roa
Signing time: Fri 01 Sep 2023 10:07:03 +0000
ROA not before: Fri 01 Sep 2023 10:07:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 103.224.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10693 (0x29c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B0F1736378E9746009E4FF05DAFB5E3C2415788D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:73:52:98:7a:94:4a:29:bf:89:88:dd:66:
de:41:61:c6:68:26:cd:f8:a2:ed:98:be:93:6a:11:
ba:8e:b3:f5:ff:f8:74:a1:2d:23:14:90:40:a5:9a:
50:be:bd:8c:6d:12:32:66:8f:16:50:4f:f0:d6:62:
3e:c5:87:c9:72:85:37:87:8c:a5:b2:5f:61:63:0a:
08:a8:27:1d:2d:df:84:2c:55:a5:27:a3:a4:74:b8:
82:6e:e6:ed:1e:7c:6c:b5:92:69:fb:f6:c5:3b:e3:
df:56:7d:05:9d:d2:d4:a7:80:bd:ba:14:a3:fc:71:
f1:85:d1:53:69:a9:72:8d:68:ae:e3:6b:d3:74:b9:
ed:23:82:c4:e0:95:9b:fc:ee:56:a8:56:7c:6f:50:
9f:fa:5f:4f:85:78:c1:1f:99:40:ef:f3:5f:e9:00:
41:d5:06:de:a3:38:2d:97:b0:63:9a:4c:87:18:fb:
d9:7b:a6:0d:d8:34:c3:54:56:ba:e7:0c:33:5d:4f:
bb:a9:b7:e7:ed:b3:8c:ac:3b:54:ee:04:34:2e:a0:
a7:e2:86:52:6c:e9:07:1b:12:56:40:e0:3e:73:8c:
2c:bb:66:13:af:2d:02:09:d5:44:c5:2f:f3:55:f0:
54:70:58:22:23:8d:20:29:80:91:d8:5c:09:e3:65:
92:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F1:73:63:78:E9:74:60:09:E4:FF:05:DA:FB:5E:3C:24:15:78:8D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sPFzY3jpdGAJ5P8F2vtePCQVeI0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.224.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:01:83:67:a6:a5:12:b9:39:c5:50:3e:1c:f4:3f:15:99:b6:
45:c6:4a:ca:05:de:f7:5e:eb:15:8a:1c:12:9a:87:8c:c6:7d:
5d:fe:cc:cc:ad:0d:8e:1c:59:af:eb:83:af:4c:08:95:a0:59:
c5:9e:18:57:fe:fc:27:01:cc:74:5d:27:76:85:c9:c9:ee:52:
0e:6d:6b:a9:34:0c:2a:38:53:28:30:65:09:f3:b6:4d:5c:ef:
88:9e:ad:d3:4d:b2:ae:d9:83:a2:e2:6c:e4:6e:ca:95:af:7b:
29:c8:6e:f9:4e:b8:51:bb:0c:9d:82:69:ef:cd:9c:da:7f:2a:
f9:3e:c2:8f:ef:11:0b:53:b2:c1:76:cd:46:d5:65:42:e5:4c:
b8:47:13:2f:fc:b0:05:df:5f:c8:0a:25:5b:6d:93:e4:ec:ea:
62:6f:85:99:68:e9:8b:28:0d:41:a8:bb:04:1f:bf:7c:9a:5d:
99:e1:44:b5:a6:70:b8:9f:f1:b5:d8:77:e0:6e:d1:0e:16:07:
de:26:0f:ba:03:78:02:16:84:8e:0e:d0:76:4b:ae:d8:50:e6:
eb:dd:15:87:8d:fc:93:e3:9c:4f:4f:28:d9:7a:f7:ae:f7:3d:
81:fa:7b:95:e3:31:e1:79:c0:ea:ba:d5:3f:45:52:97:3f:77:
13:81:97:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org