Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z9yUsbYODRfFIeRZmU30lZwBi7A.roa
File: z9yUsbYODRfFIeRZmU30lZwBi7A.roa (raw, json)
Hash identifier: dKpzMwEIqpzxzZLSN6XyYWFClqlLaquEHkf297j941Q=
Subject key identifier: CF:DC:94:B1:B6:0E:0D:17:C5:21:E4:59:99:4D:F4:95:9C:01:8B:B0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B0A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z9yUsbYODRfFIeRZmU30lZwBi7A.roa
Signing time: Fri 01 Sep 2023 10:09:47 +0000
ROA not before: Fri 01 Sep 2023 10:09:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.112.0/20 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11018 (0x2b0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CFDC94B1B60E0D17C521E459994DF4959C018BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:53:fb:c4:18:0c:99:a2:0d:30:5a:8d:a7:
ce:2f:de:7a:42:5f:e0:7a:01:62:77:a0:61:65:06:
62:8a:3d:1f:ed:0d:aa:e2:24:44:b1:78:98:ef:36:
b7:2a:98:ec:0f:6a:5d:a8:17:93:2f:32:23:ec:dd:
78:74:9d:96:4b:12:a6:4f:f4:09:74:c1:b9:7b:e8:
a3:54:26:25:bd:d5:89:d9:e3:39:26:5f:8f:28:b9:
f4:85:69:cd:cc:03:f6:06:42:24:a5:b0:d9:94:f5:
b2:14:9b:b4:bd:d9:43:25:15:8d:07:96:56:cb:1c:
eb:37:05:8f:51:51:75:6d:89:a1:41:54:76:bf:37:
33:02:76:91:31:be:c0:3c:cc:63:e5:3c:75:31:18:
56:86:55:e4:97:bf:5e:0f:85:5c:2e:a2:21:fb:a9:
ba:2d:aa:13:af:8c:5f:37:a1:9f:d1:90:3d:66:0c:
fb:93:11:c5:7a:72:16:44:a6:92:62:f0:1d:a8:74:
16:34:e0:9f:48:a8:77:c4:c7:a2:f7:03:4a:9e:b8:
9e:19:fa:4b:60:be:68:45:3f:73:f9:a6:67:8c:2a:
6d:aa:db:94:e7:77:91:0c:0d:ce:0d:f7:db:84:42:
99:a4:2a:84:dc:5e:f8:e1:da:f5:12:62:a6:7c:62:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DC:94:B1:B6:0E:0D:17:C5:21:E4:59:99:4D:F4:95:9C:01:8B:B0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z9yUsbYODRfFIeRZmU30lZwBi7A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.112.0/20
Signature Algorithm: sha256WithRSAEncryption
96:bb:09:7a:d1:63:68:06:ef:a2:2a:58:c6:aa:80:15:ab:f8:
50:6f:d4:86:a1:31:92:fb:ce:a6:0a:ec:17:13:cc:5d:cb:94:
84:96:e8:af:91:c9:78:dd:d5:8b:b2:45:99:07:71:25:0b:bf:
a4:72:98:f5:51:11:7b:cd:28:84:41:ee:d0:40:5e:89:e4:20:
8e:bc:ea:52:50:10:12:bd:f4:c8:a6:ab:28:ee:a0:ba:6e:92:
5f:99:9a:8e:72:5b:e5:fa:48:6a:86:57:f5:90:a6:89:eb:01:
67:db:fa:2c:16:d4:bf:88:fa:71:44:67:54:98:b6:6e:11:28:
92:22:65:1b:8a:35:3e:97:af:35:f2:f6:de:bf:3e:4e:65:09:
7b:09:d0:4c:6c:ac:71:92:21:ad:b0:7f:18:7e:e9:b4:c1:fd:
6d:ce:00:fa:28:46:0b:8d:06:e1:85:16:eb:bb:21:d7:91:1c:
82:43:31:d5:14:d8:d7:9d:3b:7a:f8:1a:54:39:31:7b:ec:19:
43:ec:4c:ad:27:6a:46:b6:46:49:42:66:db:13:ff:c2:bf:5a:
4a:14:79:c0:d3:8b:b5:79:de:ef:9b:03:fb:ae:68:92:eb:85:
07:51:d8:fb:fe:19:5f:90:43:94:6d:9c:08:f2:be:97:08:3f:
49:5c:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org