Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TBCOM/7v73ALTKkJSjE8KKiPGCniYZobg.roa
File: 7v73ALTKkJSjE8KKiPGCniYZobg.roa (raw, json)
Hash identifier: DUkkN2sAYK7eIuU/Mtxsgr2ok/QHcnJl4X2p/Ltd7nw=
Subject key identifier: EE:FE:F7:00:B4:CA:90:94:A3:13:C2:8A:88:F1:82:9E:26:19:A1:B8
Certificate issuer: /CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Certificate serial: 0B88
Authority key identifier: 83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/7v73ALTKkJSjE8KKiPGCniYZobg.roa
Signing time: Fri 01 Sep 2023 09:59:54 +0000
ROA not before: Fri 01 Sep 2023 09:59:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131596
IP address blocks: 123.0.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2952 (0xb88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=832720EB0BEA005C3EDE574E31C0AB7563FA0CC7
Validity
Not Before: Sep 1 09:59:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EEFEF700B4CA9094A313C28A88F1829E2619A1B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:68:a2:04:42:44:49:2b:32:ec:e1:f8:68:
fc:64:24:33:de:7d:fe:15:3d:86:19:eb:30:2d:85:
fc:d3:15:2e:b2:8e:14:b5:b6:4e:2d:37:6c:38:53:
d3:30:28:11:cb:e3:33:b8:d1:c8:20:40:55:a9:2b:
ad:bf:df:67:0b:4f:35:b7:ce:6b:63:df:4d:a9:9e:
48:57:ea:84:12:e9:89:13:d3:be:41:72:bc:5f:fc:
24:98:a3:fc:c0:ed:be:ee:f4:c3:4d:89:23:2b:26:
b1:ce:29:a6:5c:25:d8:aa:7a:ce:4c:37:f2:0c:59:
67:2c:50:fe:c9:f4:d6:ca:d9:ae:16:3f:5c:0a:eb:
0e:2b:da:f2:46:4a:bd:f6:bf:a0:4b:08:d9:be:6d:
12:e3:88:81:d2:c5:11:58:0b:68:c2:df:3a:37:69:
c8:4f:75:f3:40:7e:f9:89:ca:2a:a8:12:6c:2f:e9:
8b:5f:0e:ed:92:b7:9e:82:d0:27:63:fa:9b:7c:8d:
23:ab:cb:13:e7:5e:37:0c:21:b8:fe:80:ed:7c:99:
eb:df:9c:b0:c7:d3:8d:06:9f:ec:00:cf:82:93:6f:
fd:23:86:85:35:2d:2a:79:ba:54:ca:d0:9a:44:de:
72:5e:e7:74:01:bd:49:5d:64:e5:97:f2:c1:af:bc:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FE:F7:00:B4:CA:90:94:A3:13:C2:8A:88:F1:82:9E:26:19:A1:B8
X509v3 Authority Key Identifier:
keyid:83:27:20:EB:0B:EA:00:5C:3E:DE:57:4E:31:C0:AB:75:63:FA:0C:C7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/gycg6wvqAFw-3ldOMcCrdWP6DMc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/gycg6wvqAFw-3ldOMcCrdWP6DMc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TBCOM/7v73ALTKkJSjE8KKiPGCniYZobg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.0.192.0/18
Signature Algorithm: sha256WithRSAEncryption
95:b7:ad:2d:13:45:5d:d5:da:05:6f:49:b3:a5:6c:9d:ed:46:
03:95:f0:e6:6d:ea:61:d3:52:66:65:6d:e2:1b:23:fd:ec:cf:
ce:df:e2:fd:0c:36:b0:1f:74:73:b8:f3:c0:c7:03:fa:f0:da:
07:ae:f5:e7:05:fb:12:d0:d9:95:e9:41:29:6d:a0:b0:bb:3f:
b0:05:1f:f7:40:d1:d9:b6:47:ce:96:1d:26:f9:ff:c8:55:dc:
ed:a9:34:4a:ea:b7:70:1f:5f:8e:63:53:cc:a2:12:b7:58:06:
e6:52:d0:07:58:a5:39:32:28:ed:1d:ed:c3:4d:c4:4b:b1:e4:
9e:21:d6:9d:96:3d:a1:31:81:da:c6:7f:0a:73:eb:11:64:6e:
f5:42:74:37:c7:b6:1f:c9:84:2a:f0:21:47:8b:d7:24:0c:a0:
88:d6:fc:24:e7:26:3b:ef:c6:dd:6b:a5:c7:65:21:bf:06:b6:
78:9f:37:2d:e0:c1:38:fe:cc:4b:15:4b:07:cb:bc:78:d1:30:
67:62:3a:7b:f7:ef:43:ae:11:80:18:f2:bc:1a:0e:cf:99:24:
c6:11:7a:72:af:68:67:06:c3:60:41:45:2b:8d:0a:e4:81:e1:
d3:34:76:78:02:0d:bd:38:46:cf:cb:6f:8d:fa:2a:54:4b:68:
c9:29:95:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org