Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xRu0wNm2Cmn7W2lzfBgESLZvNRk.roa
File: xRu0wNm2Cmn7W2lzfBgESLZvNRk.roa (raw, json)
Hash identifier: 01m4zEwAwUDMbiO/dm5NOLXsGsnKoH37+SdI4vS+UWw=
Subject key identifier: C5:1B:B4:C0:D9:B6:0A:69:FB:5B:69:73:7C:18:04:48:B6:6F:35:19
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A0F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xRu0wNm2Cmn7W2lzfBgESLZvNRk.roa
Signing time: Fri 01 Sep 2023 10:07:26 +0000
ROA not before: Fri 01 Sep 2023 10:07:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10767 (0x2a0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C51BB4C0D9B60A69FB5B69737C180448B66F3519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b6:0a:22:fc:ad:3f:db:68:59:90:43:57:e7:
d3:42:51:36:32:8f:70:d1:de:95:78:57:e5:44:8e:
04:fa:f0:98:5f:e4:c5:42:d3:86:bd:5c:68:22:16:
2d:7a:38:5b:da:2a:d9:4f:06:95:73:96:d4:2d:53:
9b:27:78:c7:5b:ef:8f:e1:48:a9:e8:b9:3d:b7:6d:
59:b4:29:c2:83:78:3f:1e:ed:50:a4:42:b0:87:bb:
f4:c0:30:08:e2:58:ff:f2:7f:05:16:78:bf:68:61:
47:ed:9f:82:41:d7:af:64:d6:db:1f:78:44:4a:4c:
7c:b9:9d:d3:2c:18:31:67:bf:ac:ec:85:f2:e7:c1:
72:ef:c2:e7:b4:b3:b1:45:39:ee:54:07:39:61:ab:
a7:9d:24:15:a6:23:fd:f7:30:b6:b7:65:7c:40:0d:
b5:cf:d2:59:19:5a:0c:8e:ea:50:66:a1:64:cf:b0:
e7:86:59:83:fd:99:15:f7:68:fd:04:af:ea:e4:3f:
ce:14:6f:fa:49:6b:97:f4:51:fe:f9:6d:c8:cb:4c:
59:92:3f:ec:b1:54:63:20:8a:25:96:b5:a5:d3:24:
39:5e:72:99:1d:9e:f7:4b:fa:46:10:1b:3d:92:c6:
19:82:c4:d8:97:bf:de:94:1f:62:96:9c:ec:94:a0:
66:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1B:B4:C0:D9:B6:0A:69:FB:5B:69:73:7C:18:04:48:B6:6F:35:19
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xRu0wNm2Cmn7W2lzfBgESLZvNRk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.118.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:8b:a8:e9:9c:4a:6b:58:70:1e:36:98:b4:2d:13:29:67:f9:
cf:f7:66:76:5e:ac:7f:0a:63:dd:33:a9:0e:91:87:7e:b5:12:
d6:ae:64:0e:4e:2e:97:98:cc:0d:06:8b:45:95:43:a9:46:5c:
06:b1:f7:4c:8f:b1:3d:5e:aa:08:e0:f9:25:5f:a2:6b:2b:8a:
b7:bf:f7:0b:35:d5:89:63:d5:0d:1a:e3:91:d3:fc:5e:85:dd:
3e:3c:56:4a:50:7c:d2:c5:4e:7c:de:a2:93:8b:33:73:ce:b7:
d9:06:4f:1e:35:99:0d:0a:f5:56:02:70:60:27:eb:86:1c:71:
7c:00:61:50:0e:00:ff:cc:20:ad:2d:5c:f0:72:ef:c1:f4:9f:
54:5e:70:14:a7:56:b6:c0:44:7f:d1:fe:03:d3:d2:57:c2:dd:
0f:c0:19:ee:be:fc:11:84:c5:c4:3f:b0:be:de:f3:29:6d:24:
5f:10:b3:9f:98:66:62:1d:45:a4:3b:89:83:f4:e1:fb:f7:90:
e0:52:e4:23:07:b8:d8:8a:9e:70:66:32:c9:83:1c:83:79:fa:
92:cb:3b:37:52:18:29:19:f0:df:f0:86:7c:dd:a5:30:43:cb:
2d:0f:03:2b:ad:cb:0b:e0:01:2c:c8:5c:d0:99:95:cb:3a:4d:
04:08:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org