Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3avcBlM5P5GVbbR53m8yslLvQBQ.roa
File: 3avcBlM5P5GVbbR53m8yslLvQBQ.roa (raw, json)
Hash identifier: u3khw2hsAFL3R7Z6J/j816D3L35jYloh+YlEXrOdUxs=
Subject key identifier: DD:AB:DC:06:53:39:3F:91:95:6D:B4:79:DE:6F:32:B2:52:EF:40:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A28
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3avcBlM5P5GVbbR53m8yslLvQBQ.roa
Signing time: Fri 01 Sep 2023 10:07:33 +0000
ROA not before: Fri 01 Sep 2023 10:07:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10792 (0x2a28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DDABDC0653393F91956DB479DE6F32B252EF4014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:24:4a:17:36:19:e2:2a:47:f5:3e:20:09:
e7:a9:13:7a:31:80:d3:21:59:1e:32:c9:0d:32:91:
f0:4b:76:24:d8:94:ca:0c:85:97:54:d5:5b:97:b0:
73:90:4f:c0:d5:5c:c8:60:b9:cd:07:b1:cf:9b:4b:
66:95:b3:12:fe:7d:6e:1f:b1:37:37:ca:00:dc:6e:
b0:a3:5f:70:0e:59:d4:a0:fb:c1:b2:47:ed:5d:d3:
23:d2:f0:a4:c9:18:f2:3e:b2:b5:42:de:3f:a3:bd:
4a:ea:c3:96:84:01:3f:d7:e5:14:53:b2:e9:3b:1b:
f3:46:a1:a8:e6:a8:41:8b:85:4c:13:57:19:b8:a9:
94:07:4c:2d:36:27:8d:9f:cc:16:d1:79:fc:a6:57:
1e:59:ef:f1:b6:46:9b:a1:63:46:1f:f0:1d:0a:aa:
a5:8e:cb:4a:96:6a:60:f4:fd:78:af:a6:c9:a8:f6:
03:0f:b2:eb:dc:2f:e7:5e:c5:62:bf:bb:67:e0:d3:
f9:e8:c4:11:5d:43:95:b0:1c:79:56:c8:d6:ec:41:
d1:4f:f8:7f:e2:65:e9:b5:b6:25:3a:08:fe:7a:9e:
21:de:dc:72:bc:c7:d6:2c:4c:5a:9f:76:14:c2:80:
5b:97:5e:cc:6b:19:d6:02:01:7e:79:06:f2:ac:2b:
6f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AB:DC:06:53:39:3F:91:95:6D:B4:79:DE:6F:32:B2:52:EF:40:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3avcBlM5P5GVbbR53m8yslLvQBQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.96.0/22
Signature Algorithm: sha256WithRSAEncryption
14:9b:a9:ea:4c:15:13:d5:b6:80:55:1e:e3:bf:25:98:9d:be:
de:12:ab:73:34:65:7c:a1:59:5b:6c:57:97:c2:53:46:98:63:
9b:d5:54:0d:d5:5b:86:9d:a0:a6:f9:fa:7d:1a:c0:0c:3f:fb:
2f:44:dc:ca:c0:84:ab:d9:9c:78:2d:ed:ae:af:2e:10:52:6b:
e4:e5:64:00:95:4a:80:e9:df:fd:49:b2:b5:0b:cf:f9:7f:03:
36:a5:bd:c5:bb:01:59:62:ed:1c:6d:92:c2:da:df:df:e0:09:
9b:96:60:32:d8:4c:87:ed:bb:68:9c:16:c9:bc:4d:0a:22:1c:
8f:4a:d4:64:46:1c:c0:6f:78:8d:de:37:2b:ac:31:d6:1c:9c:
4d:a9:3c:ec:f9:67:c3:a0:80:ef:c0:81:61:4b:09:23:62:19:
2f:83:41:ee:42:05:b1:46:13:5a:1e:0a:bd:ad:30:dd:2c:0f:
d6:b2:52:c7:39:c5:c4:e2:05:59:d1:36:91:b3:73:a1:27:0f:
43:12:49:2f:ef:ea:fe:25:df:c1:11:ce:2c:b4:87:a0:eb:bd:
5c:f1:e8:b1:5a:85:72:f0:f5:8e:71:b9:2c:42:8c:0d:2a:25:
a9:0e:7e:97:6a:05:85:dc:d6:06:67:e4:ff:9d:ea:25:82:4a:
d9:6f:0f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org