Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zNEWUGOpzfx-KVJSL1Hfznvrd4Q.roa
File: zNEWUGOpzfx-KVJSL1Hfznvrd4Q.roa (raw, json)
Hash identifier: qt4jAFgnKOfFBbfimu1kUy4oNBsgJCArVSGhFJSt76w=
Subject key identifier: CC:D1:16:50:63:A9:CD:FC:7E:29:52:52:2F:51:DF:CE:7B:EB:77:84
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2914
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zNEWUGOpzfx-KVJSL1Hfznvrd4Q.roa
Signing time: Fri 01 Sep 2023 10:06:07 +0000
ROA not before: Fri 01 Sep 2023 10:06:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.233.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10516 (0x2914)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CCD1165063A9CDFC7E2952522F51DFCE7BEB7784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b8:4b:67:0b:9a:6b:c7:d2:fd:b4:17:f0:f0:
ea:44:f7:a9:d1:94:b8:77:5d:23:04:1a:92:73:cc:
b6:0f:1c:6d:6c:47:bf:1b:a9:66:98:f7:e6:6d:79:
f8:b1:aa:de:b4:f9:5c:0f:bc:ba:b7:47:7c:b1:dc:
e9:a6:64:79:be:a2:63:72:6f:74:67:10:91:2d:14:
1b:cc:f2:55:a1:df:34:30:e0:85:67:f9:b9:b0:27:
0a:49:a6:a6:11:c8:d4:89:50:60:4b:e9:14:83:a5:
ac:a0:52:69:6d:6c:e4:35:88:a9:b3:75:56:ef:aa:
87:ad:dc:1c:27:57:64:7a:de:0d:9a:98:7d:11:62:
6e:a2:ee:57:6c:21:93:4d:14:e3:34:f5:87:fe:13:
60:4a:cd:a3:45:3b:49:ac:20:06:3d:0b:73:8b:71:
5d:19:1c:63:6b:8e:79:b1:7d:14:ea:ac:87:6c:b9:
79:df:a4:87:f8:dc:9f:1a:13:9c:22:c5:4f:ca:7a:
e5:70:ed:0c:38:14:52:62:8f:b4:1b:a2:51:20:a4:
ac:c3:57:d9:74:19:25:42:f4:32:5d:3b:ed:f5:27:
5f:f8:9d:0c:07:eb:4e:e8:5d:c0:a5:b4:92:75:b5:
58:84:4d:4d:4e:9a:f0:3d:2b:1e:3c:1d:71:70:7e:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D1:16:50:63:A9:CD:FC:7E:29:52:52:2F:51:DF:CE:7B:EB:77:84
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zNEWUGOpzfx-KVJSL1Hfznvrd4Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/21
Signature Algorithm: sha256WithRSAEncryption
11:06:c5:03:2e:49:c7:e5:f1:b6:c8:3f:12:ec:0f:a5:48:01:
bf:8a:e9:0d:3a:04:a5:e2:a3:71:02:dd:bf:b2:51:69:a8:57:
f9:cd:3b:09:39:4c:33:ab:7b:44:73:ff:84:ea:e8:d5:12:ff:
aa:f8:63:ed:89:fb:82:73:89:c4:d6:80:28:e8:cb:bc:73:50:
b6:ac:dd:23:57:7f:fb:70:ca:26:17:66:4b:65:ac:ac:bb:f3:
d5:cf:93:eb:b0:1a:8a:3d:02:32:10:47:3a:a9:36:55:c3:3a:
21:a3:e3:21:b0:08:d3:f9:1b:69:d2:b8:19:97:da:a6:0c:52:
74:02:ac:e0:84:08:c6:07:e3:de:97:d9:b6:36:00:c9:76:46:
35:d9:7f:23:89:78:ee:16:5c:8a:1c:53:a0:19:de:18:a2:32:
be:b5:f5:f9:38:d0:39:ed:7e:e4:1c:93:f1:2d:ec:c3:4f:23:
e7:d7:51:f1:ff:f9:9b:07:ec:6b:a9:94:79:ae:7c:26:0c:16:
59:c5:83:e2:37:45:52:70:ca:ea:52:c0:d2:a6:6d:5d:f6:7b:
19:9c:40:dd:6f:dc:fe:08:ec:42:0d:6f:e2:82:08:49:b1:54:
fa:af:24:5a:a5:9a:ef:86:31:57:fc:4f:22:26:b1:1b:24:5c:
ca:cf:09:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org