Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vp1xYcXJyPPyQ4-HVrsi-cPgZQ4.roa
File: vp1xYcXJyPPyQ4-HVrsi-cPgZQ4.roa (raw, json)
Hash identifier: J6hSQNeDIm0Z9iq1Jf149MdtR6SlrhoFzxHMy9cr5eY=
Subject key identifier: BE:9D:71:61:C5:C9:C8:F3:F2:43:8F:87:56:BB:22:F9:C3:E0:65:0E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 285C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vp1xYcXJyPPyQ4-HVrsi-cPgZQ4.roa
Signing time: Fri 01 Sep 2023 10:05:15 +0000
ROA not before: Fri 01 Sep 2023 10:05:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 118.232.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10332 (0x285c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BE9D7161C5C9C8F3F2438F8756BB22F9C3E0650E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:91:53:96:72:f4:16:c2:ac:0f:f4:45:f0:
03:ec:0d:db:f0:bd:82:4e:38:71:99:55:dc:5a:6b:
d0:cf:79:82:79:77:ad:fe:44:aa:d2:d5:66:e8:55:
77:d7:29:3f:d0:77:a9:48:b8:fb:98:86:f8:92:a6:
6b:69:6b:91:64:33:96:60:be:2e:f0:68:a1:df:9e:
49:26:63:4a:bc:69:98:73:56:06:b9:93:4e:28:c9:
cf:1e:da:f2:58:d3:f4:37:72:d6:0b:70:2c:9b:21:
fc:0d:c1:99:27:10:85:c6:01:62:d6:33:3e:17:93:
0d:9c:ed:c3:b1:ad:0e:6d:54:a9:bf:60:bd:d4:df:
08:73:ac:16:01:2d:08:2e:4a:e3:05:ff:5c:db:02:
07:81:cf:09:c9:c7:ea:97:9a:e0:59:77:e6:5e:29:
98:45:e0:eb:bb:3c:91:19:70:97:ef:6f:3b:e4:7b:
db:e8:e5:62:3f:64:af:90:ad:51:4c:1d:a9:1d:9c:
f4:9a:4f:99:4c:df:4a:be:7b:f4:9a:d0:12:bb:01:
87:2e:2f:cb:1f:24:25:d0:33:6a:5c:31:a5:c4:ad:
83:ab:c8:1e:aa:95:76:a9:ab:9b:77:40:0d:7e:d3:
21:b3:1b:ca:26:70:2e:df:15:8c:2d:94:7a:7a:0d:
71:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:71:61:C5:C9:C8:F3:F2:43:8F:87:56:BB:22:F9:C3:E0:65:0E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vp1xYcXJyPPyQ4-HVrsi-cPgZQ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:4d:e3:db:52:18:b0:3e:5a:0f:6d:6f:98:05:39:bc:c4:0d:
52:94:80:db:b8:73:7d:20:0e:c5:a3:97:d2:9f:1c:da:08:b4:
76:df:f3:ee:be:1b:62:07:28:bf:1c:0e:f5:28:4b:a0:ba:4f:
4a:af:b9:c2:dc:51:0a:66:c2:a3:4c:96:a1:e3:61:c6:31:f6:
da:7b:b7:8c:ce:88:b4:da:ff:d8:62:5a:1e:52:8d:c8:34:95:
2c:86:a2:a5:89:86:5d:69:c5:54:22:5b:fc:17:33:76:88:22:
ba:2a:ce:d9:74:dc:d1:b0:85:11:38:6d:91:73:9e:99:7f:17:
ff:fd:dc:ba:b4:b0:fc:b7:2b:de:ed:e6:1c:c8:46:90:88:eb:
fb:79:9b:b3:a2:fb:7e:c3:ad:dd:9b:b7:57:61:94:19:93:f5:
e1:92:94:0c:29:a4:a1:20:aa:34:79:3e:64:44:5b:91:2c:27:
c0:de:d1:75:26:ba:49:01:a8:6a:e8:01:d6:da:b7:41:6c:b4:
b0:8f:7c:4b:30:2f:eb:5a:73:05:eb:e1:14:c8:85:93:cb:d4:
74:2b:1e:ff:98:30:d5:b0:33:4e:aa:b7:ca:eb:53:45:76:6e:
94:65:a7:3a:30:56:ad:6b:6d:d8:9b:fa:3a:94:e9:0f:c5:0e:
ef:ba:45:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org