Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-a7QoL-esdOF6u3_Agnyaz5Y4To.roa
File: -a7QoL-esdOF6u3_Agnyaz5Y4To.roa (raw, json)
Hash identifier: 4LZJDLSbJicMoQyiRfDlAJCok/iwh+4Qp+qI4qid6Os=
Subject key identifier: F9:AE:D0:A0:BF:9E:B1:D3:85:EA:ED:FF:02:09:F2:6B:3E:58:E1:3A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2823
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-a7QoL-esdOF6u3_Agnyaz5Y4To.roa
Signing time: Fri 01 Sep 2023 10:04:59 +0000
ROA not before: Fri 01 Sep 2023 10:04:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10275 (0x2823)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F9AED0A0BF9EB1D385EAEDFF0209F26B3E58E13A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dc:cd:a1:db:e1:1c:f5:4f:36:a8:b6:5d:91:
40:b9:a5:40:22:4b:44:c5:d4:4a:d5:4e:fa:b4:e0:
2c:bf:31:ef:c5:d3:cb:3b:31:64:c7:a0:3a:3f:c5:
55:83:15:de:07:f1:a1:92:d9:1c:36:d9:db:99:34:
f5:2c:cb:d3:9e:61:61:af:bf:85:b8:31:55:4a:ef:
eb:59:8c:6a:a2:95:47:db:1d:3f:e4:b3:e0:86:24:
5b:99:bd:c6:9d:0d:57:4d:5b:4a:b0:45:6c:c9:93:
48:4b:fa:96:49:67:98:a2:0d:7b:8c:b5:6c:69:3a:
cf:66:62:83:f0:24:42:41:b6:10:60:3a:e4:10:01:
58:b6:d8:b6:8d:c8:3d:0f:78:ef:ce:ff:31:a7:48:
84:70:9a:87:43:54:41:56:18:d1:ba:4b:0a:23:96:
ac:bd:1c:d2:22:38:b3:26:22:03:6b:88:73:41:66:
0c:76:1d:7b:d0:16:64:6e:34:7e:80:d6:74:2c:9b:
93:12:bd:da:90:c7:20:f1:e0:35:f5:5c:c4:a3:fb:
df:78:ab:e5:5d:3d:2d:81:90:88:a0:21:51:a8:fe:
b4:6d:3d:38:28:30:e2:f7:8f:9b:d3:aa:d2:b9:71:
a6:78:b3:de:b8:e3:ce:4f:55:21:71:da:fd:51:78:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:D0:A0:BF:9E:B1:D3:85:EA:ED:FF:02:09:F2:6B:3E:58:E1:3A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/-a7QoL-esdOF6u3_Agnyaz5Y4To.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.216.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:80:25:d5:33:41:a7:80:6a:e5:81:e6:90:1d:06:95:32:10:
30:f1:32:77:25:51:9e:f8:f1:38:3e:8e:e4:6f:37:52:40:34:
8b:09:0e:63:ef:43:71:75:da:24:bf:c2:02:6f:cd:62:5d:a0:
ca:3d:45:2a:41:53:3d:f3:cf:47:10:c8:77:39:10:20:9f:91:
39:f5:05:0f:b7:f7:23:38:35:f9:c6:6b:e2:05:b5:b6:8a:60:
1f:c7:de:a6:b7:d7:97:b3:b0:bb:f4:1c:b7:78:e1:7e:1d:1e:
93:68:da:05:24:9e:8f:ef:4f:c0:f1:d3:19:6a:5c:d5:26:79:
1b:9b:a5:31:82:55:0d:3f:f5:f2:c3:26:8e:18:e1:1d:be:79:
5c:44:ee:b1:d1:dc:06:5f:5e:03:d3:ca:6a:e2:de:d3:ae:80:
99:36:23:fc:13:02:f7:fb:27:eb:40:4f:63:74:8a:6a:ce:84:
56:39:20:a0:8e:ed:c6:c6:3f:31:52:11:7a:32:31:97:0b:c7:
18:be:2e:5c:b8:6a:e1:0d:74:88:6f:23:c6:a4:4c:2d:7a:11:
a0:94:e5:5b:9c:46:7d:1a:d8:58:bb:8a:48:85:ab:d8:7f:6d:
fb:dd:64:13:db:1a:3b:e8:02:98:de:9c:80:4c:95:a4:93:57:
86:2e:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org