Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wHDRBZuuBD7MHAoOZTPryzxpb4A.roa
File: wHDRBZuuBD7MHAoOZTPryzxpb4A.roa (raw, json)
Hash identifier: 72e5RtmF0hEg5SxIkPLJDvQQCyNSmsyIi/bMEER2dHc=
Subject key identifier: C0:70:D1:05:9B:AE:04:3E:CC:1C:0A:0E:65:33:EB:CB:3C:69:6F:80
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29F8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wHDRBZuuBD7MHAoOZTPryzxpb4A.roa
Signing time: Fri 01 Sep 2023 10:07:20 +0000
ROA not before: Fri 01 Sep 2023 10:07:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10744 (0x29f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C070D1059BAE043ECC1C0A0E6533EBCB3C696F80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:52:cc:d6:a5:15:d4:f8:2f:48:0f:f0:d5:31:
22:f0:12:a8:1e:12:74:90:d7:70:2a:be:3d:ef:21:
82:c4:0a:23:4f:4a:99:e7:b9:a4:6e:56:74:49:02:
90:ff:21:54:bd:1d:2e:56:83:97:c1:e9:aa:77:c5:
b3:4b:e4:5b:dc:27:29:9d:a1:67:fe:76:d6:30:63:
86:09:c3:a8:22:4e:d1:d4:2c:e9:01:e2:61:4f:0d:
d8:bb:7b:c2:04:2c:1d:63:65:18:81:6b:d5:3d:6e:
85:dc:57:70:3d:cd:4e:89:df:5b:bf:78:d0:02:ee:
17:66:c9:01:33:44:0d:67:62:b0:94:b3:66:05:18:
a3:c6:69:28:47:3f:b2:e5:31:8e:a8:94:14:05:29:
ac:e3:2d:bb:d6:ba:cc:0f:3a:64:c8:f2:9a:74:d1:
ea:e5:2a:13:4e:7b:0f:02:4c:29:32:87:79:08:09:
c7:4d:d0:0e:f0:8b:ac:3b:cf:f4:10:1f:a1:81:fe:
73:4b:88:28:b0:eb:da:a8:96:61:bf:60:fb:38:67:
62:39:33:fd:a3:0a:81:c4:9e:98:b5:fb:f1:6c:ed:
55:cc:30:03:f0:e9:c5:f9:0d:57:91:33:4f:3a:07:
ae:27:99:1c:aa:e3:73:a0:1f:92:d3:f6:54:3d:b0:
e3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:D1:05:9B:AE:04:3E:CC:1C:0A:0E:65:33:EB:CB:3C:69:6F:80
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wHDRBZuuBD7MHAoOZTPryzxpb4A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:a9:9a:db:81:95:e6:76:69:1d:a7:f0:f4:dc:88:c2:48:e4:
d5:a3:7a:37:da:cf:0e:b1:d9:19:be:73:e1:1e:67:ee:3d:b7:
01:83:5f:11:00:87:72:49:1e:2f:ba:28:15:61:37:6c:47:13:
c5:1a:5c:b0:bc:37:f3:e0:b4:89:5b:46:93:8f:d5:4c:ce:56:
6b:7a:90:c3:69:76:e7:8b:28:a5:f4:9d:47:d2:6a:f9:9d:c1:
6b:e6:8f:0c:85:4b:cc:eb:64:ad:48:e7:86:9d:22:e3:34:40:
ec:fc:9f:d3:ef:2c:58:1b:e2:d5:9a:44:19:90:d3:0d:c3:94:
ea:df:7e:04:c1:ea:dc:2f:63:14:22:79:06:ab:a9:b6:6d:06:
d8:fb:1f:9f:73:ee:f6:d2:52:25:51:5e:83:a9:e0:47:9b:2d:
71:0e:6f:9f:bb:b5:62:28:46:d1:6f:38:11:d6:fb:f3:81:80:
d2:9c:20:f6:29:f8:85:e0:4a:15:a8:83:b6:a3:4f:47:22:9f:
cc:f3:88:e5:ce:4d:cb:64:2f:b1:bd:8d:79:93:fc:af:a1:8c:
ec:df:c7:b4:63:ec:38:18:a9:bd:83:2e:c0:37:80:ae:83:48:
1b:08:35:4c:ed:67:1e:db:43:73:75:66:e3:81:92:05:d0:62:
9a:6d:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org