Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20No-eiz22lTauTwNQwM25EwgMc.roa
File: 20No-eiz22lTauTwNQwM25EwgMc.roa (raw, json)
Hash identifier: EIRarfjMT4/Afl8Y0/f1FoYpgTf78DpFspf3G8JszN0=
Subject key identifier: DB:43:68:F9:E8:B3:DB:69:53:6A:E4:F0:35:0C:0C:DB:91:30:80:C7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20No-eiz22lTauTwNQwM25EwgMc.roa
Signing time: Fri 01 Sep 2023 10:04:32 +0000
ROA not before: Fri 01 Sep 2023 10:04:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.174.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10185 (0x27c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DB4368F9E8B3DB69536AE4F0350C0CDB913080C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:2f:ba:35:dd:34:38:81:09:e5:38:35:fd:
ce:1a:92:e1:85:cd:90:8a:7d:54:5e:34:a4:e7:62:
91:30:89:71:16:6d:86:4c:71:4e:b7:22:6c:81:a7:
05:a7:37:86:cd:3b:85:a2:05:9f:1c:57:fd:9c:53:
3f:e6:ed:e6:a7:16:8e:ec:1a:31:56:67:3c:e3:59:
e1:3a:3f:07:d6:a5:96:1d:b6:78:a3:cb:01:da:34:
9f:7d:90:1b:f2:ff:21:81:23:53:e1:f2:07:28:4c:
49:9c:e1:16:5c:1d:ae:1c:c4:8a:6b:29:0a:95:d5:
b0:af:fc:82:96:6a:22:1e:46:0a:45:4d:f4:9f:9a:
bc:27:0d:79:e6:80:ed:6b:bd:6a:5e:70:1a:8d:e0:
15:27:0b:a6:25:f6:a3:c4:5b:8d:be:9d:b8:45:b1:
2d:f4:52:33:1d:22:e5:fc:14:ca:e5:1d:e4:ff:3a:
90:18:68:63:0e:bc:9a:e1:c5:fd:32:5a:9c:6f:63:
23:d4:79:db:fd:f5:e5:4b:3b:0c:10:b3:8d:90:5e:
82:ba:6a:28:15:cc:06:58:12:91:8c:53:b5:5f:31:
29:64:92:9b:4f:1a:c7:c6:a7:db:ab:6c:a4:de:e4:
7d:e7:2c:f4:25:d7:11:8b:32:33:db:fd:96:d7:a7:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:43:68:F9:E8:B3:DB:69:53:6A:E4:F0:35:0C:0C:DB:91:30:80:C7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20No-eiz22lTauTwNQwM25EwgMc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.174.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:cc:46:f8:ad:b9:8d:a9:38:06:3c:92:87:3d:ae:19:bf:76:
53:9c:68:a2:e3:39:6a:f9:42:5d:a8:df:98:e5:e0:28:74:b7:
1c:28:60:fb:bc:ca:8d:f7:f9:14:14:e1:1f:09:bb:65:1b:98:
f0:64:88:14:93:29:98:2e:76:0a:a9:ce:9c:15:f6:bd:13:09:
89:56:7c:a5:18:e1:73:d4:47:33:c1:66:af:a4:73:44:6e:d9:
a3:99:7a:8f:0e:92:ca:bc:e6:2a:e8:4f:2b:d0:5f:6f:03:1a:
cb:f8:3f:72:e3:ac:3d:9d:82:0a:d2:ba:36:5d:a3:17:5c:a6:
77:fe:d1:60:f2:45:f9:c7:da:d7:b0:ee:fb:0b:46:12:4e:48:
6e:be:e0:c0:5c:4b:6d:a2:91:7a:25:c7:a0:d2:6a:1c:2a:7f:
04:df:77:15:7d:eb:22:17:9e:03:1f:16:6e:d2:39:3a:9e:be:
7c:a5:0b:13:b6:11:aa:54:e2:d9:06:19:e8:cc:89:6e:da:86:
51:00:24:a8:bd:b1:c6:77:4e:41:88:53:59:f5:e9:72:82:36:
61:8f:f4:ee:50:90:5d:cb:ff:47:11:41:ac:ff:fe:be:c1:29:
4f:7c:d7:6e:b9:3f:0a:10:84:b4:7e:68:6b:76:a5:68:29:3d:
14:05:09:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org