Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wsD63-H-CKssN3daoQ09gg_uAPs.roa
File: wsD63-H-CKssN3daoQ09gg_uAPs.roa (raw, json)
Hash identifier: vI45lJdVGtmkNKfttYfUx5dBfLDyvNuheRi2rFfvAg0=
Subject key identifier: C2:C0:FA:DF:E1:FE:08:AB:2C:37:77:5A:A1:0D:3D:82:0F:EE:00:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A7E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wsD63-H-CKssN3daoQ09gg_uAPs.roa
Signing time: Fri 01 Sep 2023 10:07:58 +0000
ROA not before: Fri 01 Sep 2023 10:07:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.184.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10878 (0x2a7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C2C0FADFE1FE08AB2C37775AA10D3D820FEE00FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:24:df:3d:ba:f9:2d:75:73:f4:59:8f:31:
fd:cc:b1:1f:a2:9a:2f:36:28:fd:82:73:ec:c7:4c:
74:58:27:1d:f2:ec:48:e9:de:36:01:df:80:c0:67:
5d:38:79:d8:9b:f1:e8:46:53:c6:be:58:ff:5b:95:
a3:5f:32:4a:11:ae:ae:55:72:7f:c2:49:99:ad:ee:
13:2b:8e:88:83:7a:30:52:78:db:02:46:1d:5b:13:
b1:41:f8:84:05:59:dc:0a:b2:30:ab:b0:67:3f:f6:
84:53:94:c0:fa:1c:e8:9a:91:48:31:82:29:b5:ca:
31:ab:20:30:83:b2:7a:aa:28:10:b8:a8:a8:86:58:
68:9b:5d:4b:4b:fb:b1:6b:5d:eb:af:7e:db:46:ae:
71:26:d9:8b:0f:d4:51:34:a8:7f:62:e1:ec:8c:74:
d3:6c:86:0b:e0:30:da:ad:85:8f:9b:4e:58:98:90:
70:0d:62:e7:61:7e:62:9f:6a:27:a2:b0:4e:06:85:
05:b3:0d:e8:8c:a8:83:01:f6:ce:79:9e:4d:af:c5:
08:e8:fc:32:86:15:88:b6:95:e5:4e:8e:17:f3:09:
16:68:2a:74:a4:39:74:1e:5d:20:b1:79:45:90:bc:
7e:9e:aa:f9:31:bb:27:85:ab:86:69:d9:e9:dd:ee:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:FA:DF:E1:FE:08:AB:2C:37:77:5A:A1:0D:3D:82:0F:EE:00:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wsD63-H-CKssN3daoQ09gg_uAPs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.184.0/21
Signature Algorithm: sha256WithRSAEncryption
46:84:bd:2e:f0:c2:26:ae:78:83:0b:93:e9:bf:40:49:85:3d:
e2:6a:22:ff:74:5b:c2:19:55:10:7d:dc:5c:d7:9c:d6:05:94:
0d:ad:d9:28:24:5a:b8:94:d3:d4:16:bd:8f:46:e5:58:dc:da:
66:aa:02:ba:2b:ea:f9:09:34:bd:f1:82:29:b3:24:39:06:2a:
2b:df:ce:c3:ae:11:7c:05:6f:35:2d:f3:37:84:27:89:ff:96:
2d:20:66:c1:84:9f:90:bd:79:6b:6c:4d:76:a6:b5:95:cd:94:
73:1f:e5:8e:f3:6d:12:ba:45:16:c4:b5:c2:5d:5f:98:4d:7c:
b6:99:93:f3:c7:da:48:83:d2:bf:45:63:f8:bb:be:98:42:d1:
0e:56:d6:a6:27:50:39:df:96:e8:36:21:16:ee:20:3e:c5:b5:
a7:b0:de:e7:63:aa:ca:cf:c8:80:1f:94:a3:bb:68:75:0c:aa:
bf:6b:cb:f3:02:79:33:44:cb:00:02:b6:92:28:49:53:13:5a:
07:4c:6b:1e:f1:0a:67:fd:62:89:5f:46:32:f7:6c:7a:cf:51:
53:1b:a6:aa:5f:e5:f4:77:b9:4a:7b:fa:67:78:43:b9:68:f8:
96:4d:3b:00:11:fe:88:b3:c5:41:3d:cc:f8:07:e9:65:df:9c:
b9:de:fe:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org