Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0cIiQiucVZGHh4nkfxhmiw5iEAE.roa
File: 0cIiQiucVZGHh4nkfxhmiw5iEAE.roa (raw, json)
Hash identifier: QW1++MpWalD6L/A++p6uF6i+09bBy9UyqCkyEovvI4A=
Subject key identifier: D1:C2:22:42:2B:9C:55:91:87:87:89:E4:7F:18:66:8B:0E:62:10:01
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 295A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0cIiQiucVZGHh4nkfxhmiw5iEAE.roa
Signing time: Fri 01 Sep 2023 10:06:25 +0000
ROA not before: Fri 01 Sep 2023 10:06:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10586 (0x295a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D1C222422B9C5591878789E47F18668B0E621001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:0e:23:9e:74:2c:ce:96:fa:c4:ca:3f:dc:
13:21:ab:e3:e7:67:ec:b4:bf:84:d8:95:8a:23:ff:
b6:b9:d5:83:52:f5:04:ab:e5:fd:60:02:20:57:27:
72:c2:68:88:d5:6b:3d:ce:c5:3f:9e:c0:d2:30:7f:
75:b0:21:a7:5e:34:c2:71:f7:17:51:28:c7:4f:ae:
53:2f:d0:36:d5:52:96:3d:23:01:4f:3d:d1:db:86:
d5:b2:6c:9e:1c:29:fb:67:0f:c7:ed:e0:f6:4b:c3:
74:75:a4:35:42:a9:f8:d6:05:32:aa:27:8a:62:c0:
f0:2b:46:36:e6:d6:b5:5c:f3:f0:4a:0e:64:5a:43:
fb:fa:5c:b7:29:58:0d:0c:d6:06:66:eb:ee:e9:0e:
0f:43:4d:b2:b2:74:17:27:87:19:46:cc:1b:f8:18:
6d:52:5b:54:02:30:20:df:c0:1c:3f:42:e5:71:b4:
42:fd:dd:b9:29:0b:2f:8c:72:1a:f5:0d:3b:46:aa:
a8:2e:6c:6f:c4:0e:1f:e4:8b:b2:bc:0f:4d:3f:90:
d9:b6:ee:d8:36:8d:bf:26:a2:a3:b0:0f:45:e0:c7:
3a:0a:5e:ee:b9:b8:c9:d5:e6:22:5d:36:14:c8:6f:
3f:47:e7:a7:d7:ad:8d:24:47:38:dc:7f:a3:95:56:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:C2:22:42:2B:9C:55:91:87:87:89:E4:7F:18:66:8B:0E:62:10:01
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0cIiQiucVZGHh4nkfxhmiw5iEAE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.156.0/22
Signature Algorithm: sha256WithRSAEncryption
92:1b:67:5d:3d:37:be:9a:00:0e:fc:fa:8e:19:cb:f6:9d:4a:
66:96:84:4c:a0:d4:2a:a3:ee:32:49:62:0a:83:4c:64:78:4a:
a5:f8:49:45:e5:02:ed:0a:99:0d:1c:75:88:c1:f6:61:61:88:
91:8a:88:3c:6d:3f:e6:5f:09:be:9a:2d:dd:f8:2c:5c:79:90:
b9:13:41:ef:ba:13:c8:7a:58:5d:8f:eb:eb:6a:14:cd:d5:df:
df:ce:c8:ac:a3:7d:0d:c8:83:45:bd:ea:81:3b:09:42:93:5e:
e9:3d:ac:7e:2d:50:1c:75:4c:75:d0:8e:ca:5f:de:b6:1b:28:
38:88:62:62:db:17:1f:26:c8:25:0a:8f:aa:3d:7d:5b:ed:d4:
7a:e7:3f:00:58:b1:b5:ae:6e:f5:48:7a:5c:4d:fb:13:6a:6a:
cb:6e:9b:ab:70:08:50:e9:f0:7e:12:ed:00:45:80:fa:77:cc:
5c:ab:26:cd:07:8a:2e:62:95:d6:b0:d2:80:07:e1:13:02:99:
e4:68:fe:e2:d6:cc:21:e6:65:53:53:f2:43:cc:a4:dd:94:91:
2d:8b:2d:da:25:42:91:e4:80:1d:2a:5f:13:f2:e0:05:8b:86:
47:9f:1e:19:c4:68:ed:3a:2e:16:fa:89:ab:74:c2:2d:47:da:
3a:a4:4b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org