Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2mP3x_4uxWbzfwfZcicURDtR1X4.roa
File: 2mP3x_4uxWbzfwfZcicURDtR1X4.roa (raw, json)
Hash identifier: 2ZjIw9vt+67d6qA/7S8gD0AmJSKHRcALezudc4sRfy8=
Subject key identifier: DA:63:F7:C7:FE:2E:C5:66:F3:7F:07:D9:72:27:14:44:3B:51:D5:7E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 287F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2mP3x_4uxWbzfwfZcicURDtR1X4.roa
Signing time: Fri 01 Sep 2023 10:05:24 +0000
ROA not before: Fri 01 Sep 2023 10:05:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10367 (0x287f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DA63F7C7FE2EC566F37F07D9722714443B51D57E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3b:a6:e8:1f:92:43:bf:3f:cb:ab:83:94:26:
f8:0a:40:ab:77:71:7f:5c:e5:25:63:9c:00:2c:ac:
70:0f:80:93:ea:66:f2:1c:78:ca:03:9c:4a:aa:83:
f8:68:c4:8a:fb:f8:4d:74:8b:f3:85:52:01:9b:e4:
b9:4f:6d:72:fd:90:c9:9b:ae:42:07:59:3d:6e:49:
51:a3:c4:85:fa:a9:46:ef:35:8c:46:c4:e2:ef:79:
6d:3f:d4:2a:27:ca:95:fa:26:38:36:90:93:e3:57:
08:8b:99:c3:fd:04:d3:51:0d:9b:53:be:62:6a:5c:
c1:45:33:38:92:61:14:01:99:af:4d:5d:07:9d:ae:
65:38:bb:8b:4c:d5:a2:48:d0:4e:75:be:ae:f0:75:
20:04:bf:b3:5c:97:95:84:22:32:fc:39:19:6e:2f:
2f:9f:58:e2:e2:82:da:44:a5:e7:7f:93:18:01:34:
df:fb:50:8f:69:c2:6c:66:d1:6d:d6:4e:41:5e:cf:
94:6d:14:68:6a:b4:8d:0f:13:72:89:59:63:29:66:
04:67:ca:54:de:e7:9b:46:9d:f7:55:2f:16:b0:d5:
a8:5c:5a:69:39:a8:6c:91:e7:30:cf:58:a5:49:47:
53:b5:a7:4b:1b:bc:6c:4b:1b:4d:a2:71:92:9c:65:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:63:F7:C7:FE:2E:C5:66:F3:7F:07:D9:72:27:14:44:3B:51:D5:7E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2mP3x_4uxWbzfwfZcicURDtR1X4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.208.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:1a:d9:cb:4b:db:cf:9a:c2:71:a4:e7:4f:9a:3c:2c:61:22:
c0:a1:8d:33:bb:a5:9e:f3:a2:0b:77:b7:92:98:ec:39:b9:43:
71:2c:21:9c:58:eb:ce:2d:1b:dc:f0:4d:71:1d:67:b2:26:15:
06:18:80:94:1d:e4:6a:6d:6c:95:64:2e:c1:ae:7c:6c:5b:b8:
c8:71:2a:6b:89:5a:93:61:10:e6:e8:c0:07:d6:1f:42:94:b1:
9d:28:13:17:83:b3:fb:8e:74:bc:50:17:33:0e:52:1e:f8:71:
c2:48:31:4b:0e:3d:ba:d4:f4:6e:1b:e2:41:32:04:4c:4f:a3:
1e:bb:c2:33:e8:d5:36:82:73:47:7b:0d:f3:e3:2a:15:4f:1d:
1b:f0:6a:6d:b9:56:4c:95:bc:df:f8:c0:2c:de:dc:ce:1a:b9:
74:86:58:4d:47:8d:ed:10:1b:93:3f:6f:7e:3b:7a:6a:d6:1f:
d0:c5:d8:73:14:f3:81:1e:21:8e:b3:f9:88:0d:f2:06:4c:33:
d1:c3:ad:41:41:82:80:8f:4d:a6:93:93:33:5b:5a:7c:aa:c1:
7b:8e:c7:5f:0c:4a:96:25:22:17:83:05:e7:0a:0b:8a:6d:5f:
5b:c4:20:77:30:96:09:87:94:61:aa:87:63:6b:3f:42:dc:bb:
ca:1c:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org