Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uJFNgnPccjQnaa9IhkmhlRuVR8c.roa
File: uJFNgnPccjQnaa9IhkmhlRuVR8c.roa (raw, json)
Hash identifier: cseBuK4pOSshvUxSP0nWRZsnOM+HeOpkaIgwcfnnVx0=
Subject key identifier: B8:91:4D:82:73:DC:72:34:27:69:AF:48:86:49:A1:95:1B:95:47:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27DE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uJFNgnPccjQnaa9IhkmhlRuVR8c.roa
Signing time: Fri 01 Sep 2023 10:04:39 +0000
ROA not before: Fri 01 Sep 2023 10:04:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 211.76.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10206 (0x27de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B8914D8273DC72342769AF488649A1951B9547C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:f5:9b:f3:04:40:c6:42:be:ea:89:d3:b8:
0c:be:f2:a5:4c:28:e9:3d:57:f3:6d:6b:65:82:27:
53:34:ba:70:57:56:86:23:ef:8d:74:a0:a2:46:7d:
56:07:1f:8a:27:e2:16:0b:36:70:a7:13:f9:7b:4c:
47:56:9e:23:c8:57:5c:89:da:bb:ce:22:e0:ed:44:
6e:59:8f:fd:27:cd:80:0a:5a:1c:66:fa:c0:f4:06:
fb:e6:02:57:9c:73:cc:61:e9:aa:18:98:4c:bd:52:
cd:d2:a8:50:f8:ed:ea:6b:0a:3b:71:f0:fe:cf:6d:
11:cb:12:0c:c2:6e:c5:e3:7c:3a:bc:37:b0:49:a9:
9e:c2:97:1b:27:04:73:d3:a1:10:75:83:72:31:0b:
1c:ed:5d:d9:3c:ef:65:88:6d:44:68:51:ac:bd:b4:
5e:5d:45:f8:4f:b7:d1:9a:fb:7e:a1:a1:38:4d:ca:
63:c5:f9:8e:e1:48:27:78:7b:2d:8c:11:45:1b:0a:
00:a7:f5:70:f2:f1:48:68:6d:83:64:df:b7:e0:3e:
ba:72:b2:97:3f:55:22:63:a2:81:32:cd:e0:7d:78:
eb:36:19:5c:d4:cf:3a:de:b1:09:ec:5d:7e:8b:78:
35:e6:dc:31:85:b1:96:fe:b7:08:49:0e:36:6d:61:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:91:4D:82:73:DC:72:34:27:69:AF:48:86:49:A1:95:1B:95:47:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uJFNgnPccjQnaa9IhkmhlRuVR8c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.113.0/24
Signature Algorithm: sha256WithRSAEncryption
83:93:d8:94:81:71:63:c8:f4:44:f9:fa:3a:40:6f:34:ff:9c:
e6:37:3a:e5:8b:0d:ec:50:bb:2c:fa:d5:40:8d:5b:59:72:cc:
12:0d:95:75:da:f5:fb:61:91:a8:59:35:26:df:77:28:19:9b:
bf:f4:ea:c7:ac:43:4e:b3:47:15:f8:6f:86:d2:6b:00:02:cf:
02:63:11:ee:ed:c8:54:9a:9b:a1:33:45:a7:26:29:7f:14:91:
5b:d9:22:9d:32:25:f2:7c:e5:51:01:83:60:48:e6:19:12:af:
1d:d4:6a:2b:b2:0a:dc:88:19:a2:61:a8:0b:58:89:38:11:6c:
e1:f3:ef:15:aa:a8:c2:aa:6e:77:55:14:c5:36:19:6b:3d:1b:
07:bb:47:05:08:46:fd:bb:ff:85:92:eb:d9:90:fd:6d:7a:2e:
9a:ab:36:4d:6b:59:16:c2:3b:11:1f:9b:a1:49:be:b8:a6:ee:
20:c1:4c:2e:e6:82:b7:1c:3b:cd:30:77:f6:d1:86:c8:47:7a:
58:40:d9:21:4c:73:df:06:fb:07:1b:5a:00:e1:79:ac:48:a5:
4a:d7:4c:bd:1b:8e:32:9b:1f:4f:9c:7e:ba:bb:23:3c:08:97:
b9:2f:47:59:8b:1e:37:7e:10:c8:34:b8:4c:48:f6:8f:98:54:
6b:d9:fd:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org