Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20Xj8-yJiRZwy4kHhU7pcD0MKPc.roa
File: 20Xj8-yJiRZwy4kHhU7pcD0MKPc.roa (raw, json)
Hash identifier: qJiLsS+eaizhFF6rxkINUr5AattDe1UIdD4YNoo0KRA=
Subject key identifier: DB:45:E3:F3:EC:89:89:16:70:CB:89:07:85:4E:E9:70:3D:0C:28:F7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AAE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20Xj8-yJiRZwy4kHhU7pcD0MKPc.roa
Signing time: Fri 01 Sep 2023 10:08:10 +0000
ROA not before: Fri 01 Sep 2023 10:08:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10926 (0x2aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DB45E3F3EC89891670CB8907854EE9703D0C28F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c9:95:a8:f7:9a:84:78:2d:78:af:63:4f:ef:
f0:d6:1c:3b:13:ee:37:4a:25:5a:56:16:fd:fb:19:
b4:56:6e:e8:95:dc:0e:0b:5c:b3:f8:99:88:7b:f3:
27:11:c7:ee:1f:8c:fd:35:3a:70:34:20:ca:6c:42:
55:ad:d4:90:ce:f3:6e:e1:a8:ac:9e:6f:d0:cd:11:
40:2e:85:70:8f:fe:0b:04:cf:b8:c2:1f:d1:99:2f:
2b:06:11:27:d3:04:f3:14:42:22:c0:93:6f:5d:45:
cb:3c:df:ef:78:e0:ea:72:70:18:b0:74:21:cf:b9:
43:05:b7:f9:cc:7d:69:d1:4a:7e:05:4b:c9:ef:10:
8c:df:9e:aa:62:5b:f4:47:46:81:82:d2:5a:49:c2:
79:0f:c8:e3:50:00:9e:f0:1f:f7:e7:08:47:42:f1:
02:47:39:b0:6f:5c:23:f9:c6:f5:5a:2e:11:c8:ac:
70:15:3c:17:45:ca:8d:07:24:fb:97:a1:45:3b:a8:
c3:1f:84:a2:17:89:d1:57:cf:1b:03:78:03:ce:c9:
a5:19:f0:53:d9:57:83:b6:b5:5e:22:c5:32:fe:81:
06:c6:85:b7:6a:ca:8b:ec:5d:b2:80:84:a3:52:82:
b0:f9:63:66:e1:f7:50:91:d7:a3:f7:a2:f2:fb:45:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:45:E3:F3:EC:89:89:16:70:CB:89:07:85:4E:E9:70:3D:0C:28:F7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/20Xj8-yJiRZwy4kHhU7pcD0MKPc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.160.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:88:ee:ce:f8:c1:b3:d0:70:ae:1d:0c:64:a3:d1:f4:bc:d4:
c7:1b:a5:2e:b5:0e:66:98:32:b9:3e:be:e4:39:9c:ea:f1:34:
9b:fd:4e:a0:5d:bd:83:db:06:b5:ca:70:73:cd:3b:bb:8f:1a:
d6:9f:32:76:9a:d1:33:f4:a3:2c:ad:fd:40:1a:25:d9:92:31:
a0:d8:53:68:e5:fa:58:7c:12:c6:95:f5:31:29:19:8e:5e:27:
04:d8:b5:04:8a:42:0d:82:2d:b7:0f:6f:f0:c7:76:58:8a:52:
5c:2e:62:2a:1b:89:66:2c:0f:ce:c8:9e:6a:91:aa:2f:a4:1e:
c4:0f:52:db:ab:59:6d:06:81:54:bb:2a:c1:02:51:e0:2c:ac:
e7:29:6d:3d:ec:2d:82:a0:06:27:e8:5a:c2:b1:7e:1b:b1:53:
af:e3:a2:b7:6f:12:27:3e:72:d3:a0:e5:88:cb:a7:51:84:8c:
31:93:d9:54:f0:58:b7:b4:66:af:c5:06:f9:e1:d1:fa:aa:14:
2b:90:52:37:ad:b4:1c:b4:d5:c8:6f:57:be:79:ab:3a:86:db:
c9:28:8b:48:b2:0b:26:bd:74:04:91:ea:75:ba:c8:97:2e:e8:
a2:c7:0a:37:c7:5f:0b:e7:0e:e0:fe:23:dd:6c:7a:53:b5:b2:
fa:21:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org