Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wiDEhNmW9Z4-AFLqXkJ8UNpqE-A.roa
File: wiDEhNmW9Z4-AFLqXkJ8UNpqE-A.roa (raw, json)
Hash identifier: 7WOMit1450wzZgxfbS+DoFmDf0DpKKJ+XjOWKr0ybpk=
Subject key identifier: C2:20:C4:84:D9:96:F5:9E:3E:00:52:EA:5E:42:7C:50:DA:6A:13:E0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2805
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wiDEhNmW9Z4-AFLqXkJ8UNpqE-A.roa
Signing time: Fri 01 Sep 2023 10:04:50 +0000
ROA not before: Fri 01 Sep 2023 10:04:50 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10245 (0x2805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:50 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C220C484D996F59E3E0052EA5E427C50DA6A13E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:34:57:aa:11:25:d5:74:a3:b7:c7:54:82:bd:
1a:97:fa:7e:1e:4a:ea:98:cb:df:c0:a9:6d:ec:c9:
95:04:3e:1d:18:74:9e:3e:ba:8b:64:7e:ac:cf:bf:
81:b0:e6:1c:af:a2:97:32:f7:1f:36:a6:6a:58:43:
cd:d3:2b:b8:29:69:3f:fe:92:29:c6:f6:13:55:02:
e8:d0:9f:93:0a:2f:df:9d:1b:0c:2c:a7:a1:2d:4e:
fb:8e:25:26:94:6d:5d:bf:17:89:fd:b7:b7:bb:2d:
26:af:ef:f0:34:ec:7d:63:2b:21:3b:e2:19:7d:3c:
b5:e2:7e:30:77:21:26:45:47:0c:c9:c3:46:28:ac:
a7:21:45:b9:34:63:55:c9:ee:3e:19:2b:b7:b8:78:
b0:5b:b7:53:41:10:d5:42:fe:e1:dc:77:bf:ef:c5:
2a:ac:30:a5:3f:2a:aa:a6:bf:ad:bb:29:71:fa:68:
9a:48:54:ed:c7:61:8c:fa:4d:91:00:f7:0d:5c:1d:
93:8c:6f:cb:c5:e1:08:7b:64:6d:6b:75:d8:96:1c:
a6:ba:55:42:16:68:45:0d:34:a0:63:d8:9f:a9:63:
37:a9:f8:9e:bc:1f:d8:68:34:b9:23:4a:cd:ac:61:
4b:93:d7:43:10:aa:16:0a:e3:6e:b8:72:be:e9:15:
18:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:20:C4:84:D9:96:F5:9E:3E:00:52:EA:5E:42:7C:50:DA:6A:13:E0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wiDEhNmW9Z4-AFLqXkJ8UNpqE-A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:2e:b1:41:7d:f0:3f:e8:83:86:e4:8e:c4:b0:35:be:c0:70:
0f:8d:2a:bc:62:26:b3:06:46:ab:f4:44:14:fb:f1:dc:ba:e9:
af:c7:f8:1d:25:d5:a7:23:00:cf:f6:cd:54:cc:f3:fc:f9:b8:
a2:f5:21:27:c6:2d:15:1e:fc:43:7c:31:97:c6:a1:69:e1:e5:
ea:84:e5:4c:a8:a0:ec:c5:18:7b:e6:26:61:5f:f3:1b:ff:08:
53:72:a2:72:5d:ae:f2:c5:f4:c7:1c:33:ae:1c:c5:09:3a:8f:
83:12:ae:c7:e3:40:05:e4:9d:7a:ac:5f:53:ec:5d:d1:ad:9a:
10:a2:4a:6d:5e:c8:7d:ac:ce:7d:03:b4:60:a3:37:e2:49:26:
49:7a:fa:2e:43:24:de:da:48:8d:72:97:15:83:6a:3e:33:10:
91:e1:64:77:f9:be:fb:a1:ad:f9:3a:35:37:25:44:c3:5c:cf:
b6:c4:d6:5e:79:24:b5:e5:b8:01:a5:b3:f5:fb:d0:a6:da:7d:
a2:1a:f6:2f:2e:5c:c6:a4:31:bd:28:a4:3e:57:a6:76:52:d4:
f8:e5:18:30:43:ca:e6:4c:7c:69:42:bf:69:e6:4d:e9:df:80:
0e:20:31:8c:23:ae:72:82:99:d7:18:a4:36:f1:08:f4:53:ca:
8c:09:cd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org