Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z_ULSd9ZKohHmvE6KzbItayw7fI.roa
File: z_ULSd9ZKohHmvE6KzbItayw7fI.roa (raw, json)
Hash identifier: cHhWNeYM1WR8q6fXZWMPE1U7X2ur3856ej0Xhn55QsE=
Subject key identifier: CF:F5:0B:49:DF:59:2A:88:47:9A:F1:3A:2B:36:C8:B5:AC:B0:ED:F2
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28FD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z_ULSd9ZKohHmvE6KzbItayw7fI.roa
Signing time: Fri 01 Sep 2023 10:06:01 +0000
ROA not before: Fri 01 Sep 2023 10:06:01 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 118.232.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10493 (0x28fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:01 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CFF50B49DF592A88479AF13A2B36C8B5ACB0EDF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:f5:9c:73:16:27:28:de:00:7a:2e:9f:d0:
f8:6b:20:97:4d:6e:9d:b7:b6:6b:4b:c3:49:d8:9b:
a2:03:17:aa:c1:86:ac:f9:4b:e5:a3:eb:9f:9f:20:
35:94:ce:5b:8c:e8:93:6a:d5:93:7f:9d:67:6b:2e:
40:bd:47:e9:d1:1f:7a:1b:39:a0:2f:79:df:4d:ad:
cd:22:4d:5c:f7:93:76:da:3b:25:80:1a:da:31:43:
62:2e:3c:8f:2c:5a:9a:b8:41:e9:57:39:f8:71:94:
81:0f:eb:33:d8:71:4d:d2:70:cd:1e:fc:52:1a:45:
ca:66:af:67:b2:27:4a:4b:5a:1b:a6:d6:c3:5a:10:
83:3f:3e:4b:ec:c6:ed:74:95:56:58:e8:0e:1c:98:
09:24:5b:33:72:12:0d:0e:8c:e8:ef:65:ed:76:bc:
53:5a:cf:7f:42:f4:4a:6a:15:ff:76:2c:0c:b2:14:
eb:3e:47:70:6c:43:96:a6:90:0d:eb:a8:d8:d0:e9:
f8:ac:e3:31:bd:ae:5a:f1:85:30:be:c3:07:1b:ad:
a8:00:1d:fc:cd:54:3d:f9:8b:c4:d1:c1:09:26:b6:
fd:36:f3:ef:08:43:d5:67:b7:9a:67:2e:68:0e:1c:
0e:46:70:51:4e:bc:33:c8:0b:70:b3:0a:03:86:51:
c0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F5:0B:49:DF:59:2A:88:47:9A:F1:3A:2B:36:C8:B5:AC:B0:ED:F2
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/z_ULSd9ZKohHmvE6KzbItayw7fI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.216.0/21
Signature Algorithm: sha256WithRSAEncryption
07:9e:e4:53:6c:c1:57:61:59:84:44:c4:54:08:fa:a4:d3:03:
68:ca:9b:3d:3d:4d:59:2c:52:ef:ac:3e:4d:6a:67:64:62:6f:
fe:f7:4b:c3:82:1c:55:c9:bd:a8:37:bf:68:43:00:34:ce:bd:
92:13:b5:be:a4:8a:62:5c:5e:03:2d:ad:55:8a:eb:83:4f:37:
2b:fb:ef:af:3d:f8:e3:d3:94:07:99:b0:8b:f4:d9:0f:36:af:
33:91:ff:23:b7:f5:90:c1:5d:8d:9c:0e:5c:ba:30:5d:9f:8a:
cf:b8:f2:86:9e:1d:ac:f8:f7:4e:bb:db:67:ec:40:f2:97:cb:
2b:10:54:50:45:ce:21:40:5d:b2:58:c2:3d:ae:9d:6f:ea:42:
17:04:b3:93:63:9f:d8:e2:ca:6e:fd:c9:e2:de:2b:31:4e:4b:
15:03:61:e5:ad:30:83:c3:7d:85:c3:0d:7f:d3:85:08:11:0d:
6f:ef:7c:c8:77:98:55:84:c3:dd:85:88:5e:4a:ed:ec:0c:de:
05:2b:06:cd:0d:81:12:72:76:6d:7a:5b:d7:c9:62:c1:a6:84:
89:c7:6b:74:67:50:df:f4:75:b3:3d:c6:be:4d:09:b3:87:65:
76:5d:95:0c:ba:de:8f:94:ed:f9:8a:b6:b6:dc:83:68:a0:02:
ee:60:4e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org