Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vgof8eNIvJNPscAsWU4_7-Ig1-g.roa
File: vgof8eNIvJNPscAsWU4_7-Ig1-g.roa (raw, json)
Hash identifier: jgnHM1qPPBgskjKCpnWMLHcmhcdFQQjyyxBBnV5qxSI=
Subject key identifier: BE:0A:1F:F1:E3:48:BC:93:4F:B1:C0:2C:59:4E:3F:EF:E2:20:D7:E8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 294C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vgof8eNIvJNPscAsWU4_7-Ig1-g.roa
Signing time: Fri 01 Sep 2023 10:06:22 +0000
ROA not before: Fri 01 Sep 2023 10:06:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.124.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10572 (0x294c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BE0A1FF1E348BC934FB1C02C594E3FEFE220D7E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c4:90:2c:61:94:38:58:c0:f1:b3:7d:07:6f:
f3:77:42:78:2e:37:98:a7:a4:cf:a7:b0:77:c0:91:
80:ba:37:85:3b:0f:a8:38:cb:4e:5f:8d:d2:61:f3:
da:78:b6:54:45:06:32:30:bd:94:02:49:bf:66:50:
85:9b:6c:a1:43:06:e3:3d:91:03:11:bf:f4:0e:d4:
a0:59:fc:0d:60:b5:d2:12:96:26:4e:78:13:dc:df:
62:a8:90:1e:81:ca:59:e2:74:ba:4c:2b:8d:cd:4a:
5a:71:dd:94:e1:97:7a:75:69:6b:5d:86:ff:78:3e:
ca:c1:e5:ab:43:ce:39:02:5a:ec:dd:64:ad:e1:76:
4c:8a:5a:06:db:79:33:06:ad:01:4a:92:34:56:2f:
bd:7e:0a:2a:38:2c:16:be:4c:89:16:03:b2:b0:04:
03:44:fb:34:d8:d4:83:42:4e:3e:4f:52:10:34:1d:
98:82:25:05:13:19:8e:d1:67:fa:0c:e0:60:c4:ba:
ad:31:96:16:c7:53:4d:06:15:ca:95:00:ea:23:d2:
5f:3d:c8:bd:8c:e8:29:44:16:73:da:7c:74:18:15:
30:93:b1:48:21:0d:88:84:ad:ca:30:8c:86:5a:29:
81:74:e6:d0:2b:ed:c4:09:e0:48:fa:85:4b:d8:b3:
76:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:1F:F1:E3:48:BC:93:4F:B1:C0:2C:59:4E:3F:EF:E2:20:D7:E8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vgof8eNIvJNPscAsWU4_7-Ig1-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:38:e6:a2:46:e3:84:5a:c8:02:98:22:7d:c3:ec:6c:ae:1a:
c4:97:6b:15:72:71:02:48:12:2f:85:0a:17:c6:49:9e:0b:ff:
7a:74:60:72:dc:cb:26:44:e4:47:19:90:1d:b7:02:b5:40:b7:
9d:54:41:9f:0d:38:af:a2:bd:3a:cd:61:c1:94:c8:63:cd:ed:
e0:01:76:93:0b:56:c1:63:62:a8:cb:76:b5:68:d3:51:36:a2:
cb:3b:14:df:72:53:5b:51:93:75:71:ae:57:37:43:b9:c8:18:
89:b0:80:3e:86:b1:d0:cc:58:1a:b4:83:06:54:73:c4:60:13:
94:f9:e9:ad:49:06:7f:ca:d3:2a:ea:95:75:e5:7c:70:e6:9a:
f0:47:16:71:0b:38:3f:ac:12:99:bc:df:bf:98:47:0c:41:db:
c2:f8:84:80:6a:2a:7a:21:d1:66:28:12:5b:13:5f:52:7f:c4:
41:18:dc:0a:0e:66:d0:a6:86:31:49:7a:37:ae:5a:95:ff:f7:
75:f9:b4:3b:af:bb:f8:f0:11:0c:ae:e7:ce:94:fa:17:29:43:
cc:01:2a:1b:d5:09:9b:a8:e4:7f:a3:ab:46:dc:75:0a:52:74:
dd:f2:2d:02:55:f2:70:3f:85:4f:c3:e1:5c:82:d2:52:71:e7:
1c:94:34:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org