Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0TTVCKD4r9idvSsZRwuJM6Ibcd4.roa
File: 0TTVCKD4r9idvSsZRwuJM6Ibcd4.roa (raw, json)
Hash identifier: Fq/8Xin5CNP5ChMCTRDbLiIqYMVk53nwtky2DIJQh9Q=
Subject key identifier: D1:34:D5:08:A0:F8:AF:D8:9D:BD:2B:19:47:0B:89:33:A2:1B:71:DE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27D3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0TTVCKD4r9idvSsZRwuJM6Ibcd4.roa
Signing time: Fri 01 Sep 2023 10:04:35 +0000
ROA not before: Fri 01 Sep 2023 10:04:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.244.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10195 (0x27d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D134D508A0F8AFD89DBD2B19470B8933A21B71DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:39:91:48:a5:68:01:66:10:48:48:0d:a8:
63:b1:74:04:72:7c:ad:57:d6:f3:3e:76:1e:3d:70:
1e:01:0d:fe:42:8b:d2:1f:0d:b8:05:37:d2:52:ac:
1d:cd:5b:dd:bf:9d:3e:2e:ea:14:21:40:4a:69:dd:
d0:f9:4e:3c:d2:0f:dc:54:db:e4:a3:15:66:18:77:
84:d0:8d:95:ab:32:29:e9:c5:af:96:f0:18:dc:34:
f2:29:85:09:91:62:d1:29:f3:f2:8c:cf:19:86:28:
9b:b0:7e:0f:4e:1a:1e:36:b0:95:78:f5:ce:6a:6d:
b0:f6:c2:80:bd:04:88:fc:44:40:23:4a:33:a5:24:
a7:fc:7b:66:08:84:68:16:6e:63:e4:16:bd:d2:80:
23:7f:e5:90:b8:57:68:22:96:97:07:02:67:87:cc:
04:e0:0a:f8:77:42:02:35:60:d9:34:01:52:3e:b5:
75:ee:79:da:a1:4f:3a:9e:70:59:f8:02:31:30:f7:
cd:73:5b:0f:ce:3e:02:52:f9:2e:09:59:2a:24:2c:
8b:ba:b2:82:e1:3a:d5:df:3d:53:5c:ed:cd:38:4f:
8a:30:1b:b2:c9:52:ac:5f:c3:4c:4d:62:50:0e:a6:
60:c4:30:6f:fa:79:69:1c:4e:9e:47:fc:f0:47:a0:
45:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:34:D5:08:A0:F8:AF:D8:9D:BD:2B:19:47:0B:89:33:A2:1B:71:DE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0TTVCKD4r9idvSsZRwuJM6Ibcd4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:46:4f:d9:e9:d2:43:f1:dc:3d:2a:01:3d:a9:b2:69:1f:81:
48:31:0f:5d:a9:35:40:e5:96:ab:9d:3f:2b:ab:9e:ef:cf:ca:
3e:ca:0b:36:74:61:38:cd:86:b2:25:cd:46:3f:08:77:6b:04:
f2:b2:6d:29:16:24:a3:19:79:b1:0d:17:26:6d:7e:d8:0c:5e:
c7:ab:42:8a:62:6b:ed:7c:21:6f:a1:40:93:97:dd:28:2e:5a:
e9:f6:b3:c1:ca:a7:ab:ab:9e:d0:2a:2c:97:80:69:4f:6c:d3:
ff:27:7f:60:e8:3a:12:5d:b6:af:35:60:b5:89:ba:86:92:d6:
ab:17:37:7a:37:a3:8a:86:e5:b9:31:10:70:ec:fd:51:50:3c:
c1:b7:1a:56:62:86:7e:78:c4:f0:e7:fa:f6:ca:06:70:d1:20:
65:c7:5e:84:c1:09:8d:a8:5b:28:25:da:31:c5:3d:9b:56:1b:
9b:97:97:ec:7f:26:a9:6b:7d:09:09:9a:35:ff:7b:d1:f8:a5:
38:5c:6d:a5:76:97:af:53:45:a0:10:0e:e1:8f:d5:18:3d:79:
19:82:8d:f1:cc:6c:64:47:10:a6:b4:9f:e3:ab:26:ef:ed:bd:
92:b4:5d:62:8f:36:f0:d9:c4:45:fe:9f:3a:41:99:19:05:6b:
80:9c:dd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org