Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tV3ul_qhx-E5E0Bthzgj4BheBW0.roa
File: tV3ul_qhx-E5E0Bthzgj4BheBW0.roa (raw, json)
Hash identifier: y467oIoYQLicn07wnXISRQirjxFx1sAw6H4fK4C304I=
Subject key identifier: B5:5D:EE:97:FA:A1:C7:E1:39:13:40:6D:87:38:23:E0:18:5E:05:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 298C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tV3ul_qhx-E5E0Bthzgj4BheBW0.roa
Signing time: Fri 01 Sep 2023 10:06:44 +0000
ROA not before: Fri 01 Sep 2023 10:06:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10636 (0x298c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B55DEE97FAA1C7E13913406D873823E0185E056D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:40:45:c4:a1:ef:fc:3f:f1:80:6f:f6:0d:63:
c1:2c:23:9a:2a:cf:31:6c:dd:78:c1:db:4f:c9:67:
84:d0:5c:81:eb:6d:b1:66:5f:8a:14:58:9c:28:ac:
74:06:3c:6a:65:2d:d1:4d:7f:17:93:50:74:91:be:
37:9c:8c:2c:1a:6c:1c:96:61:08:4b:fa:9e:b2:85:
9d:6e:c2:7c:6b:6b:65:09:03:0f:40:61:fa:b4:6a:
3b:c0:3b:bd:f6:93:f0:0c:a5:b0:e0:3a:d3:0d:66:
7f:ed:a4:e6:1e:57:57:df:c4:38:e2:66:90:04:f7:
26:d7:cc:40:fc:0e:ca:c5:5d:d5:2d:52:fb:88:48:
e8:22:81:19:45:76:fb:18:72:db:fa:95:b3:c6:e8:
83:06:10:9a:05:bd:a6:73:32:07:ba:34:90:4f:bf:
c2:7c:5b:b7:11:9c:86:28:d7:49:d7:08:69:75:81:
18:c4:66:23:b8:8f:7f:81:cd:73:7c:42:a2:77:cd:
cd:f7:c6:68:42:a7:e8:aa:7a:8c:c3:8c:57:a6:1d:
61:43:75:af:5b:96:21:7d:dc:b1:55:53:11:53:4b:
ae:5a:8a:5c:77:3b:df:dc:5c:c5:a5:e6:0f:19:0e:
b4:05:e5:fe:e0:e8:6f:63:4e:c3:d7:48:ce:a6:c7:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5D:EE:97:FA:A1:C7:E1:39:13:40:6D:87:38:23:E0:18:5E:05:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tV3ul_qhx-E5E0Bthzgj4BheBW0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.78.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:e9:9b:45:7a:b2:a7:78:35:93:a3:76:66:a6:3a:3d:72:17:
94:d2:ec:1b:66:4f:ec:b2:76:a3:0e:99:7c:16:10:fd:33:f3:
e8:78:be:7a:22:fe:bd:2a:a4:38:90:05:cb:ad:04:82:93:70:
7f:39:35:f3:98:9e:f7:c5:77:30:a8:b2:11:15:79:89:34:0e:
d2:09:16:8d:17:60:88:41:00:56:2b:fe:e5:87:71:ce:4d:f5:
bc:b4:f4:0e:c0:3c:1f:30:eb:71:df:96:17:d9:cc:98:d6:55:
e7:f2:17:ff:5f:9f:7c:7c:d2:8d:0a:7c:b0:0a:f7:53:3e:13:
32:0d:b6:52:c4:73:cd:56:f3:42:9c:51:b6:e3:7e:af:2e:86:
79:a5:63:8a:ff:ef:eb:38:1a:ae:20:0b:2c:c2:c8:e9:0a:72:
79:db:10:03:55:4c:18:91:9c:6d:d5:4c:e6:1a:ce:7d:f7:fd:
ff:1b:f4:c8:ad:5c:d0:97:30:16:2b:03:73:4e:9c:ba:fc:89:
c5:16:7c:44:81:45:e6:03:86:5d:e8:73:2a:62:37:85:14:37:
f8:d0:16:72:80:6d:69:13:6a:29:8a:dc:6b:86:db:b4:d7:1a:
f3:6d:53:22:de:82:aa:0a:05:ff:80:b9:32:81:95:6d:ce:3a:
d7:6d:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org