Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ypGdYUo7_KMtvWNQ4RAsYa2HH94.roa
File: ypGdYUo7_KMtvWNQ4RAsYa2HH94.roa (raw, json)
Hash identifier: /35d7rTjJncXQJns1hDL55nT0Q40LtWd3Og6aaGmfxw=
Subject key identifier: CA:91:9D:61:4A:3B:FC:A3:2D:BD:63:50:E1:10:2C:61:AD:87:1F:DE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AAC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ypGdYUo7_KMtvWNQ4RAsYa2HH94.roa
Signing time: Fri 01 Sep 2023 10:08:10 +0000
ROA not before: Fri 01 Sep 2023 10:08:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10924 (0x2aac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CA919D614A3BFCA32DBD6350E1102C61AD871FDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ac:02:b7:6a:9b:c3:fd:da:b0:f0:36:c9:57:
7a:42:5c:8c:db:09:44:b1:7c:9a:e7:c0:6e:cb:68:
fd:67:6a:a7:df:b6:81:95:e1:7e:23:7e:05:40:d7:
de:73:92:e7:3d:fc:ff:3d:41:3b:eb:49:5d:f7:d6:
59:a5:d7:92:dd:aa:fc:b1:fb:5c:37:79:37:c2:17:
26:f1:fc:5f:87:ac:2f:cf:db:bf:d2:ed:38:ed:58:
ad:ac:fd:eb:8e:08:a6:ae:45:3e:54:36:f1:3c:07:
9b:81:06:40:63:01:20:80:4f:27:85:a3:db:3f:f6:
77:67:ba:61:7f:57:12:83:a8:0e:a6:69:dc:04:8a:
9c:19:f2:d7:34:7c:2a:66:08:b4:a4:d1:c2:d0:fd:
6a:72:8b:f5:19:de:7c:ee:7d:d4:51:43:e7:6f:5c:
92:25:6e:ba:18:25:22:fe:45:9f:b2:9d:18:c2:2b:
17:36:23:fb:67:16:5a:c2:15:00:2c:e3:4f:6a:ee:
80:17:03:e3:19:6c:a2:20:86:f2:f3:69:30:19:e2:
2a:a2:47:bf:7c:c4:db:87:96:40:a6:2b:42:f3:7c:
a2:3e:8e:26:76:57:b7:a8:9f:1b:1c:50:6d:b8:76:
ae:3b:ae:d4:dc:b5:cc:10:9d:5d:07:5b:36:0a:d2:
5e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:91:9D:61:4A:3B:FC:A3:2D:BD:63:50:E1:10:2C:61:AD:87:1F:DE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ypGdYUo7_KMtvWNQ4RAsYa2HH94.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a3:51:dd:85:22:6c:3f:0b:2a:e5:99:8d:43:dd:64:3b:25:
ab:d1:04:1e:9f:86:c0:14:9d:b4:0e:2e:b3:01:3c:6d:7b:c9:
a6:96:04:da:43:97:f4:b8:7f:b2:13:54:8e:fa:1d:a5:ed:66:
1e:b7:dd:c8:8b:b2:1c:5d:2b:4a:39:6b:1a:a4:7a:05:4c:a7:
3a:57:6d:4d:a6:d0:71:a4:c4:d7:f7:19:70:3d:93:33:47:f5:
43:fa:b2:80:bc:19:82:2f:37:16:f0:7e:01:83:16:57:09:08:
da:27:1c:00:e7:ec:32:21:07:f5:0c:04:86:5b:1f:ac:54:63:
25:f5:02:6a:e9:c6:0a:00:ec:5b:35:2a:c8:11:37:bc:86:31:
9c:1e:3e:d6:65:20:50:da:e8:c3:19:1d:e7:fe:b6:be:35:a5:
8c:03:9d:6d:a8:6b:6d:f7:02:20:d7:30:32:74:6d:15:23:ce:
da:b6:5a:e6:b1:9c:b6:86:a6:ce:5e:47:dd:4a:e2:35:36:df:
ef:52:f1:67:6e:e5:d5:1f:70:2e:92:b2:16:75:01:2a:1b:a7:
5a:75:1f:b6:e6:15:f5:1f:2a:95:1e:dc:f9:c7:24:df:dc:81:
97:d3:6d:27:3d:ff:f1:ca:4e:0e:50:df:b3:20:bd:9a:ee:bd:
5b:fe:33:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org