Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6XTQ-O1Jlo_LHGCjlMDUig1ziE.roa
File: w6XTQ-O1Jlo_LHGCjlMDUig1ziE.roa (raw, json)
Hash identifier: auTU7CousrLvTj3ADYzi9Rk6nS8f7heJUZ1bv9Z/Ucs=
Subject key identifier: C3:A5:D3:43:E3:B5:26:5A:3F:2C:71:82:8E:53:03:52:28:35:CE:21
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6XTQ-O1Jlo_LHGCjlMDUig1ziE.roa
Signing time: Fri 01 Sep 2023 10:06:54 +0000
ROA not before: Fri 01 Sep 2023 10:06:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10669 (0x29ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C3A5D343E3B5265A3F2C71828E5303522835CE21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3b:02:1a:35:03:23:e4:66:f6:5a:a3:88:bf:
24:6b:50:b8:d7:ee:83:8a:e8:16:6f:9b:78:14:5d:
32:58:b6:ef:c1:d8:ab:46:be:b9:22:9e:c9:7a:32:
4a:ab:82:f1:5f:bf:ec:b3:83:d8:34:93:0e:7e:63:
88:7b:a1:90:41:71:0a:78:56:64:97:e6:c0:2b:f8:
26:3c:dd:fc:7e:61:9a:fb:65:cb:40:3c:9e:b6:61:
ec:73:c5:12:3e:79:57:9b:9b:c2:3d:bf:af:4f:26:
70:59:7c:41:e5:e0:34:2b:5c:bd:79:37:c6:98:b0:
61:b6:9f:82:f9:1b:7d:84:c9:24:7a:e6:cd:6e:38:
a8:2d:f6:96:eb:4b:66:c6:61:d6:d4:39:57:ad:32:
3d:76:d3:6e:61:34:88:3f:5f:f6:94:2f:3a:74:36:
2d:8d:19:d9:35:31:84:79:cd:f5:28:10:8d:9d:47:
ec:75:a6:a3:85:20:7d:4f:01:7e:94:4e:37:86:83:
13:da:c3:59:9e:2f:d6:1a:e6:cc:e9:e5:86:4d:58:
b7:7b:7a:6b:60:66:20:4b:1a:f8:45:2f:74:5d:91:
83:b0:0c:f5:59:3e:13:27:89:8a:8e:d0:50:5b:19:
fb:60:1c:03:2c:bc:62:e6:af:55:f4:28:94:ec:f9:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A5:D3:43:E3:B5:26:5A:3F:2C:71:82:8E:53:03:52:28:35:CE:21
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/w6XTQ-O1Jlo_LHGCjlMDUig1ziE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.88.0/22
Signature Algorithm: sha256WithRSAEncryption
20:91:68:ce:75:cd:49:83:9a:d1:e7:0a:5c:b8:e3:80:a2:7b:
0e:68:20:07:82:30:90:d0:2a:c2:9f:fe:47:4c:52:81:5c:24:
47:32:9a:82:81:79:0a:fd:6b:ca:a0:0a:d5:78:da:c1:46:d5:
5b:73:be:33:7a:bc:f1:1e:35:92:e5:e5:02:3d:5a:a2:d9:cc:
40:b2:b0:c5:35:09:b5:91:18:86:2c:7a:30:35:6e:da:3c:f0:
58:09:44:26:56:34:d7:b1:41:ba:e4:0e:94:98:65:3d:fc:89:
cb:3d:ef:1e:b9:ff:6e:46:81:25:71:fa:6c:ef:9f:55:25:46:
db:7b:16:ca:07:f2:b7:3a:71:be:e1:30:c3:a9:10:b4:e0:ef:
95:39:db:e7:48:c1:b6:7f:69:a1:c4:55:3a:13:fb:6e:8e:56:
2e:8c:53:f0:f4:0d:f3:f3:3a:7d:ab:63:fa:c6:51:71:be:ae:
f6:21:11:14:c0:0b:d9:67:71:d2:1c:ca:51:5e:b8:4e:1e:d7:
5b:e7:cb:f4:f8:0b:09:45:2f:d9:75:51:1a:a2:1f:04:a2:ee:
9b:66:6c:0c:b0:1f:b8:84:b4:f1:62:0a:5f:48:16:d1:9a:72:
2c:43:65:4f:e5:3b:21:13:f4:f1:07:6b:cf:e0:da:1b:98:fd:
50:f8:cb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org