Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xbH2jnbk8qTiSehcd6UTCV1ZPj4.roa
File: xbH2jnbk8qTiSehcd6UTCV1ZPj4.roa (raw, json)
Hash identifier: pYRRMsCxY70EN+qt9cLYjt/qx2ZJACCugqPGWMBiEAY=
Subject key identifier: C5:B1:F6:8E:76:E4:F2:A4:E2:49:E8:5C:77:A5:13:09:5D:59:3E:3E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28AE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xbH2jnbk8qTiSehcd6UTCV1ZPj4.roa
Signing time: Fri 01 Sep 2023 10:05:39 +0000
ROA not before: Fri 01 Sep 2023 10:05:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10414 (0x28ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C5B1F68E76E4F2A4E249E85C77A513095D593E3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:a3:ca:8f:24:0f:8d:ff:a5:c4:57:b9:f5:
c0:35:47:67:8b:d8:f3:47:bc:1f:8d:2b:58:01:bd:
ef:9f:e3:c1:6b:60:ff:a1:05:fe:21:d7:f1:e3:0d:
86:ea:53:ee:8c:8c:09:7e:a1:f3:f0:3a:4f:dd:cd:
12:33:a5:bd:a8:08:92:29:0f:32:2b:7f:7a:21:eb:
fd:1e:8d:60:c0:63:b1:cd:20:4d:6d:04:90:56:e9:
6d:86:5e:9b:b7:b6:cc:12:b4:c7:52:66:35:69:24:
57:c1:c4:97:38:91:31:bf:eb:22:40:f7:7f:14:4d:
7a:6f:d8:6f:a9:b1:1d:16:df:0b:aa:a4:32:ab:9d:
f7:96:f1:2c:c9:ed:47:33:5a:96:84:d3:f4:ee:59:
ea:68:41:03:3e:cd:8f:42:ef:21:ff:b8:4d:64:6c:
bc:cb:4f:9d:f1:84:e3:32:d4:24:9c:ec:0c:1d:87:
05:f2:06:11:80:d6:29:c2:0c:9c:10:ac:24:da:1f:
a5:b6:f0:80:77:a0:7d:43:15:dc:a5:0b:13:7a:40:
86:06:56:10:bc:46:31:4e:b4:c4:8a:8f:43:c3:66:
e9:2c:a2:18:c3:bd:c9:6e:0e:e6:b4:9e:b9:7c:80:
2b:ca:3c:cf:bb:69:e1:6a:0d:cc:e1:d5:32:13:f6:
bc:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B1:F6:8E:76:E4:F2:A4:E2:49:E8:5C:77:A5:13:09:5D:59:3E:3E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xbH2jnbk8qTiSehcd6UTCV1ZPj4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.112.0/21
Signature Algorithm: sha256WithRSAEncryption
4c:6d:9d:41:e0:ab:6b:13:56:f1:2e:f9:32:74:68:de:39:8f:
c9:56:fe:76:81:c5:55:49:34:84:6c:a9:20:3c:16:7a:b2:24:
66:b2:ed:09:80:9a:98:19:c8:51:68:95:84:87:ba:c4:fb:2a:
bb:ac:db:d9:78:ef:75:be:7b:e8:ab:f0:30:96:1d:05:56:ef:
38:c3:16:a5:12:b8:1a:3c:f6:a4:c7:54:69:9e:9a:84:19:1c:
e1:dd:8b:d5:07:5d:0c:0c:0f:b4:1f:95:15:a9:f1:39:bd:da:
1d:c9:ba:a0:1c:4c:c3:62:5e:10:00:61:1c:52:5d:4e:43:c5:
eb:7e:90:45:df:a7:f3:3b:11:cc:e3:75:94:06:21:6e:30:ab:
0f:54:f3:7a:90:6b:e5:bc:49:52:72:5d:dd:19:8e:2b:f5:4f:
aa:da:02:f4:b4:6b:8a:15:04:02:5c:4f:cf:8a:73:c4:96:2b:
75:68:5c:1e:c4:f4:1d:b2:b3:b7:77:0f:b1:60:fb:c5:1f:a8:
70:1e:9b:1d:6e:98:06:ca:3d:bd:47:f8:b3:e0:29:ea:da:c3:
b5:37:3c:c6:0f:57:31:5a:e5:a2:3c:84:fd:87:e5:ef:40:47:
4a:50:ba:a0:0f:10:ce:5b:79:d0:89:1e:c9:1e:ec:b1:0d:99:
9d:e1:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org