Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xHfHZ1MDuyDiF-cTqr2v3sVQ1b4.roa
File: xHfHZ1MDuyDiF-cTqr2v3sVQ1b4.roa (raw, json)
Hash identifier: 3U4GddPqngs+xbg0lkvOqoergs+4SLM9ZC7bbLyK2bg=
Subject key identifier: C4:77:C7:67:53:03:BB:20:E2:17:E7:13:AA:BD:AF:DE:C5:50:D5:BE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A70
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xHfHZ1MDuyDiF-cTqr2v3sVQ1b4.roa
Signing time: Fri 01 Sep 2023 10:07:54 +0000
ROA not before: Fri 01 Sep 2023 10:07:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10864 (0x2a70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C477C7675303BB20E217E713AABDAFDEC550D5BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:e9:ce:a4:c4:af:68:de:a3:e2:b1:b1:24:
80:c4:a2:11:31:d3:54:66:ce:ad:a9:eb:3d:47:1e:
a9:18:9c:46:e4:9e:90:2e:0b:a0:f8:f3:51:60:62:
90:a1:3a:80:8d:6d:c4:9e:67:b8:72:ac:3b:a9:dc:
29:24:a0:8c:07:82:68:5f:41:ce:0e:ab:39:85:4b:
fa:3b:f8:d6:f9:49:a7:27:ca:66:4c:bc:04:c9:12:
01:e1:c9:7f:65:e9:72:2b:6b:fe:9f:8e:a4:7f:44:
54:68:95:a0:f9:63:e7:8e:47:fd:44:0a:89:3a:13:
17:cd:b4:49:e7:e1:c4:72:49:69:42:20:d7:a7:85:
3d:12:6a:6a:6e:85:7c:f8:d3:7d:00:af:83:7b:43:
71:f5:c0:64:04:a8:13:ef:7c:d6:b5:44:e4:ab:4d:
2d:d5:66:f0:7f:24:21:81:f2:28:cf:a2:87:98:d5:
01:f3:85:75:12:7c:22:f9:1c:db:ab:b4:7f:0e:1e:
07:50:ea:de:4d:fa:4d:7d:82:57:6b:a5:1c:4f:79:
eb:9a:56:47:38:53:eb:c5:a7:66:d6:1c:29:45:73:
f4:53:a0:32:61:00:46:37:3e:24:0f:99:f1:5f:4e:
be:c8:4d:15:57:e1:1b:28:b8:3d:e5:58:30:31:68:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:77:C7:67:53:03:BB:20:E2:17:E7:13:AA:BD:AF:DE:C5:50:D5:BE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xHfHZ1MDuyDiF-cTqr2v3sVQ1b4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.254.0/23
Signature Algorithm: sha256WithRSAEncryption
88:7b:de:7d:65:d6:ff:b5:5d:e7:dc:8e:04:c4:df:c4:61:e5:
82:8a:85:3c:c3:ab:3b:48:70:48:8b:28:f5:1d:e4:b8:06:87:
1b:ea:bf:ec:e9:0c:25:c0:32:02:03:f5:d0:cd:52:e9:4e:37:
1c:ba:6a:8a:b2:2c:94:83:9b:9a:8f:9a:3a:a6:a9:dd:ce:2f:
2b:10:c2:19:52:07:0f:34:fa:7c:d3:2d:c2:cf:c6:96:78:7d:
11:b6:c6:b7:ff:c1:c6:74:98:b0:d1:20:3a:c3:2b:d8:71:96:
85:1f:1a:c6:21:70:16:71:e4:68:e7:f3:d4:94:88:d5:2c:aa:
4e:4e:53:37:b6:cf:cb:04:47:7b:74:c0:97:5c:c9:0e:a5:b0:
d3:8b:37:57:ee:2c:fb:f1:b4:0e:7b:f2:39:f7:04:87:21:f7:
6a:a2:71:98:cf:3f:99:eb:bc:59:81:8a:9a:f3:ce:ef:81:bf:
cd:a8:38:ae:cf:e4:6d:7e:6f:ad:c7:b5:71:0d:37:8b:0a:cb:
62:45:34:1a:03:5f:c6:df:41:8c:48:67:93:12:92:09:14:74:
e1:98:d6:1b:9a:2d:6b:af:ee:57:15:4b:ac:41:47:b8:f2:70:
a0:0b:33:21:60:67:ec:6d:88:5a:92:4f:69:b7:6d:f0:10:42:
27:9d:0b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org