Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-PilGVi1O-GhzkO-uwYhkIHssCw.roa
File: -PilGVi1O-GhzkO-uwYhkIHssCw.roa (raw, json)
Hash identifier: KLMagv4q4VDahEDNZSfvhcnCRnYxSqVAKmsM0wx3mLA=
Subject key identifier: F8:F8:A5:19:58:B5:3B:E1:A1:CE:43:BE:BB:06:21:90:81:EC:B0:2C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28CB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-PilGVi1O-GhzkO-uwYhkIHssCw.roa
Signing time: Fri 01 Sep 2023 10:05:46 +0000
ROA not before: Fri 01 Sep 2023 10:05:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10443 (0x28cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F8F8A51958B53BE1A1CE43BEBB06219081ECB02C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:fa:bf:49:dc:3c:bf:3b:be:dd:7f:6f:4f:
7d:68:a2:7d:c1:71:8f:1a:01:ad:b9:2b:ed:d5:e2:
c9:9c:7b:b2:06:c1:49:40:bc:eb:cc:04:64:6b:1e:
31:44:40:fe:b8:0f:36:25:1f:2b:17:68:08:89:8c:
59:d3:f7:70:60:32:ef:1e:cc:36:3d:51:0e:69:53:
cb:dd:ca:16:17:14:e0:47:0f:c1:46:79:53:b9:e4:
f5:05:c0:3c:d6:36:c7:43:1f:0f:f7:26:2f:b9:c6:
50:5a:d2:47:54:cd:93:f2:3d:93:a8:75:bb:3e:50:
a2:27:3d:07:ce:aa:7c:dd:fd:37:89:b3:c1:f2:2f:
08:0a:e5:6c:27:26:7f:65:90:6b:20:37:c9:2c:8e:
25:63:8b:db:4f:9e:10:ab:ac:a9:7d:e9:e1:c6:92:
d0:de:99:c9:a7:51:00:29:87:77:a5:7c:ce:35:f6:
7f:e3:3b:a2:4c:d6:ab:bc:01:07:fb:c6:20:87:52:
18:8e:c9:1f:be:5d:b5:70:53:42:aa:f1:1b:b2:42:
7e:94:33:52:91:6e:55:86:9f:4b:f3:59:5b:7b:c1:
d9:54:5d:22:94:8f:88:e2:4f:f5:a0:cc:39:cf:b1:
7a:4d:8a:47:7d:3c:18:94:b0:97:f9:42:53:9d:75:
3c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F8:A5:19:58:B5:3B:E1:A1:CE:43:BE:BB:06:21:90:81:EC:B0:2C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-PilGVi1O-GhzkO-uwYhkIHssCw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.136.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:77:c8:4e:93:5b:ab:a5:8a:81:d7:0a:53:02:1d:e9:05:a9:
c7:ce:80:f4:f4:9c:73:4b:6d:80:95:f6:d8:74:71:18:34:58:
ef:eb:5a:b9:ee:6c:d2:5b:48:c2:d9:17:68:3c:34:a4:18:54:
f9:39:f0:cb:83:39:14:2d:27:74:9d:3e:ff:20:3a:ca:86:e7:
b5:00:99:a0:2a:68:b9:f4:bf:d8:13:da:2a:6d:cf:97:d6:9f:
98:56:60:93:91:64:11:d7:78:83:b1:f2:e0:44:03:0d:64:25:
13:be:8b:54:be:73:5e:1f:fc:6b:4b:1d:19:58:df:30:2d:fb:
40:66:80:88:f3:85:73:15:d9:a1:c0:4a:ec:0d:28:04:f1:66:
44:bb:e0:78:ce:5b:52:ef:5d:39:89:cc:38:da:9c:ca:70:c1:
a9:e4:2b:b4:72:41:fb:0b:d2:b2:c3:da:50:69:c9:ef:c4:cd:
ab:b3:fe:8f:8f:7b:d6:d6:49:ff:9b:0c:e3:9b:d6:0b:60:25:
57:a2:81:08:40:4e:b5:12:3f:e3:2f:5a:99:83:c9:7c:38:48:
44:b1:49:eb:63:3e:29:50:77:92:74:68:5c:d4:9b:2b:7a:ac:
8a:96:8a:f2:5f:df:3c:cd:86:d9:20:fe:ac:33:c4:91:a8:a3:
73:80:a7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org