Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wGHiF6OYvyhjg72xfE4fYixM2Ek.roa
File: wGHiF6OYvyhjg72xfE4fYixM2Ek.roa (raw, json)
Hash identifier: OKNgb2hIXQ16XBsUFDBl09F4xn5vTsBFgO1APYNZn/s=
Subject key identifier: C0:61:E2:17:A3:98:BF:28:63:83:BD:B1:7C:4E:1F:62:2C:4C:D8:49
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AB0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wGHiF6OYvyhjg72xfE4fYixM2Ek.roa
Signing time: Fri 01 Sep 2023 10:08:11 +0000
ROA not before: Fri 01 Sep 2023 10:08:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10928 (0x2ab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C061E217A398BF286383BDB17C4E1F622C4CD849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:89:ca:81:80:6d:0c:0f:11:e2:c7:df:94:
7a:df:64:56:0d:52:39:bf:d8:0f:39:f9:58:e4:e4:
6d:8d:62:30:5c:9f:cd:0d:1b:6b:54:ad:7d:f9:82:
ae:57:97:3f:bd:06:13:4f:3b:84:b4:76:52:12:0b:
11:f6:d5:fa:ae:bb:1b:ee:da:8f:b3:8b:8b:2c:8b:
f8:79:47:53:08:aa:35:6a:58:17:2e:f4:8b:92:d8:
f4:c8:73:4d:0a:52:e1:32:2b:e5:ca:0a:a1:e0:00:
c5:2a:65:88:3d:c8:79:11:19:4f:88:4c:0f:43:fc:
5f:03:eb:01:68:13:4a:c3:9f:70:31:04:4c:84:5b:
09:2f:3a:b1:01:a4:f2:5c:91:c9:75:af:82:67:ff:
83:2c:cc:a2:c0:3e:e9:aa:9e:b7:94:66:c2:69:1d:
24:a3:5d:d9:cd:da:bc:a3:38:35:02:09:23:8e:30:
2c:a2:a6:fb:2a:95:9a:23:3b:ae:18:2f:58:24:ce:
ef:8c:25:75:b1:db:c1:bb:f0:e2:89:42:47:eb:30:
f2:e9:66:45:8f:a0:81:7d:59:ed:0b:a7:90:ab:2a:
a9:bc:62:f3:79:a4:d7:cd:0c:63:ad:f8:ec:6b:8e:
c3:09:5b:b6:4b:1b:02:02:c6:f0:41:03:4e:e0:7c:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:61:E2:17:A3:98:BF:28:63:83:BD:B1:7C:4E:1F:62:2C:4C:D8:49
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wGHiF6OYvyhjg72xfE4fYixM2Ek.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.176.0/21
Signature Algorithm: sha256WithRSAEncryption
9b:16:be:d2:18:49:04:ec:6e:f9:ae:77:25:0c:33:9c:6a:e8:
f5:e5:c3:6f:3a:b2:26:2e:2e:66:2b:3c:a2:c1:da:3d:38:a0:
8e:8c:14:e6:a6:14:80:7e:33:77:0e:70:d6:47:de:cb:e2:28:
77:d6:e7:19:ab:aa:ad:b5:06:e3:9e:fd:88:d9:ae:1c:67:94:
7f:64:1a:e0:2e:c7:28:d7:28:00:82:69:af:ba:ca:f6:ca:0a:
81:7e:af:a0:b7:2d:f7:60:68:26:be:b8:c3:45:02:4b:bc:d0:
8b:4a:d8:9c:fa:7c:d2:b0:46:bd:b5:c4:94:ab:51:f3:88:69:
1f:4c:e2:47:1c:fd:a1:d4:ef:15:dc:42:fe:b3:e3:8b:df:7b:
6c:7f:4a:2f:be:42:32:ca:ee:21:22:e2:75:42:9f:59:d1:c9:
5d:27:ad:6a:7f:9d:3a:94:0a:a4:53:7b:8e:61:8a:f2:f9:82:
b0:a4:58:ef:b5:a4:43:e3:68:ec:85:46:11:2d:7d:d9:95:21:
c7:a7:96:e0:75:73:38:d7:93:d9:d5:85:09:ab:79:cd:47:6d:
9f:45:82:d9:5a:a8:71:fa:a3:a0:55:fe:fb:10:02:6b:6c:1c:
15:9a:b1:58:71:03:dc:74:a5:42:01:53:94:65:52:06:f8:51:
75:89:91:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org