Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0usQVzdR-xZIiLtTR03ayZssV6k.roa
File: 0usQVzdR-xZIiLtTR03ayZssV6k.roa (raw, json)
Hash identifier: hDuNcUct4Qf4PFJKTCuXXT/vSuLpZo1JGOni1O+lvh0=
Subject key identifier: D2:EB:10:57:37:51:FB:16:48:88:BB:53:47:4D:DA:C9:9B:2C:57:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28DE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0usQVzdR-xZIiLtTR03ayZssV6k.roa
Signing time: Fri 01 Sep 2023 10:05:51 +0000
ROA not before: Fri 01 Sep 2023 10:05:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10462 (0x28de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D2EB10573751FB164888BB53474DDAC99B2C57A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:1f:0a:ee:76:b9:eb:c4:13:d8:1e:38:9b:
da:98:00:b5:7f:52:49:fe:e5:de:e8:17:a6:34:f7:
4a:48:6b:a1:8f:0d:13:c6:fe:29:2c:76:ae:ce:50:
17:e5:81:f8:11:e6:75:0b:b1:87:7a:68:d3:fb:a8:
ba:bc:47:56:e0:1b:01:23:d6:09:ce:00:1f:16:c4:
71:b2:ee:74:9b:28:72:0b:23:a9:5b:83:de:22:34:
4c:11:a8:96:fd:3c:b5:13:22:fd:f8:ef:9a:35:b6:
2c:37:01:99:ca:20:a8:2e:c3:a7:93:20:d9:15:33:
45:94:6a:08:29:e6:fd:72:38:9e:ef:d2:9c:ad:0e:
26:cb:01:34:58:6a:c4:17:0e:04:93:d8:85:4b:e6:
fd:4b:05:28:a5:e8:43:b1:ac:d5:48:e5:b0:38:2b:
f3:9f:45:94:44:62:50:6d:77:e6:b0:eb:6d:59:85:
14:b9:5d:03:c8:59:0d:6a:96:98:e4:0f:28:4f:fe:
e7:50:30:e5:87:ff:bd:37:08:d6:6f:17:db:3d:cf:
e5:3e:ad:28:4d:db:2a:9b:18:e4:35:bd:ba:18:4f:
df:dc:03:9e:6a:27:9a:39:0c:b6:ca:30:d8:54:88:
8a:fc:67:e0:93:96:c4:26:cd:e8:c2:27:4c:99:9c:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EB:10:57:37:51:FB:16:48:88:BB:53:47:4D:DA:C9:9B:2C:57:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0usQVzdR-xZIiLtTR03ayZssV6k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.224.0/22
Signature Algorithm: sha256WithRSAEncryption
50:20:f5:c5:16:b3:33:dd:88:d3:d0:26:52:56:35:de:68:eb:
ef:d7:eb:74:09:98:c9:12:a8:54:22:cc:c6:ad:fc:53:d7:39:
7a:b8:78:9b:dd:47:52:dc:e3:22:95:a0:4f:1f:d4:63:75:eb:
15:9a:e6:d8:54:2a:bf:d0:00:7f:63:e8:45:42:0e:10:fc:4d:
5c:01:3b:c4:c5:b8:14:6e:5a:d8:fc:52:fc:c4:fe:f7:f3:7d:
95:ec:61:e9:27:69:5a:2e:6d:b9:d5:22:c7:10:0d:db:cc:b6:
8a:fe:87:a9:6a:8c:81:4b:62:0c:74:f3:10:7e:96:2d:aa:82:
32:0b:c2:4b:fa:89:61:7b:40:86:a0:5e:7f:c5:fb:74:99:50:
84:e0:a8:54:ab:8e:45:65:dc:a2:e9:76:3b:e9:71:4d:8a:52:
22:8c:8f:10:ed:d7:40:1a:d8:ee:92:8a:56:db:be:f7:d1:1c:
12:2e:2a:3b:6d:24:0a:bc:44:f9:1d:8b:0d:55:ce:4d:98:40:
8e:e1:d8:f3:69:56:c1:74:63:12:e0:11:74:8e:ae:17:58:a3:
96:24:52:15:61:75:a2:db:d9:3c:51:cd:0a:a6:9f:91:94:42:
a6:7c:e1:3d:74:58:33:a2:ff:d7:24:b3:20:e7:de:8b:d0:1d:
a1:8d:c5:56
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKN4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQyRUIxMDU3Mzc1MUZC
MTY0ODg4QkI1MzQ3NEREQUM5OUIyQzU3QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQ2h8K7na568QT2B44m9qYALV/Ukn+5d7oF6Y090pIa6GPDRPG
/iksdq7OUBflgfgR5nULsYd6aNP7qLq8R1bgGwEj1gnOAB8WxHGy7nSbKHILI6lb
g94iNEwRqJb9PLUTIv3475o1tiw3AZnKIKguw6eTINkVM0WUaggp5v1yOJ7v0pyt
DibLATRYasQXDgST2IVL5v1LBSil6EOxrNVI5bA4K/OfRZREYlBtd+aw621ZhRS5
XQPIWQ1qlpjkDyhP/udQMOWH/703CNZvF9s9z+U+rShN2yqbGOQ1vboYT9/cA55q
J5o5DLbKMNhUiIr8Z+CTlsQmzejCJ0yZnA4VAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU0usQVzdR+xZIiLtTR03ayZssV6kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzB1c1FWemRSLXhaSWlMdFRS
MDNheVpzc1Y2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wOAwDQYJKoZIhvcNAQELBQADggEBAFAg9cUWszPdiNPQJlJWNd5o6+/X63QJmMkS
qFQizMat/FPXOXq4eJvdR1Lc4yKVoE8f1GN16xWa5thUKr/QAH9j6EVCDhD8TVwB
O8TFuBRuWtj8UvzE/vfzfZXsYeknaVoubbnVIscQDdvMtor+h6lqjIFLYgx08xB+
li2qgjILwkv6iWF7QIagXn/F+3SZUITgqFSrjkVl3KLpdjvpcU2KUiKMjxDt10Aa
2O6SilbbvvfRHBIuKjttJAq8RPkdiw1Vzk2YQI7h2PNpVsF0YxLgEXSOrhdYo5Yk
UhVhdaLb2TxRzQqmn5GUQqZ84T10WDOi/9cksyDn3ovQHaGNxVY=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org