Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3ehWMGcjrAAYXu6cRZfXSdbF5tM.roa
File: 3ehWMGcjrAAYXu6cRZfXSdbF5tM.roa (raw, json)
Hash identifier: KxgdD4Bl2BdhSUe7LZvWAgLyPf8Bs2bVt12TFTnqSBA=
Subject key identifier: DD:E8:56:30:67:23:AC:00:18:5E:EE:9C:45:97:D7:49:D6:C5:E6:D3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27ED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3ehWMGcjrAAYXu6cRZfXSdbF5tM.roa
Signing time: Fri 01 Sep 2023 10:04:44 +0000
ROA not before: Fri 01 Sep 2023 10:04:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10221 (0x27ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=DDE856306723AC00185EEE9C4597D749D6C5E6D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:d9:e5:fb:79:3f:9e:e5:bf:60:4f:36:18:
df:2e:dd:fc:52:da:b1:92:5d:3b:c9:43:21:84:03:
a7:3d:b7:d6:c9:e2:43:ec:b5:67:6a:38:0a:43:cf:
ef:4b:12:96:04:48:be:ec:51:0e:9a:b2:95:93:16:
3d:96:af:50:83:66:d7:a8:38:8c:4e:bf:7e:1c:df:
34:ce:69:45:33:8b:c4:3e:11:7f:d8:83:10:62:18:
7c:79:40:20:b0:aa:11:18:8a:b6:66:98:40:bc:ce:
90:fd:0d:1f:d5:10:4d:be:39:b1:ce:9d:bc:6b:9b:
60:6e:59:a9:f3:c0:f9:e3:15:3b:9c:61:bf:ca:04:
40:52:c6:72:f1:35:b5:05:eb:30:0c:a6:da:00:09:
ec:34:f9:b2:99:5c:41:9a:7f:be:26:b0:ed:df:5c:
6e:21:19:1e:3e:8c:9d:cf:64:59:4d:27:51:59:66:
69:a1:aa:8b:bb:b4:f4:bc:3d:05:6f:9b:bd:e3:33:
e2:96:0b:45:f9:60:c1:a9:9a:87:37:e6:a2:83:6f:
ac:0d:36:ec:0f:d2:d6:b0:11:f3:04:b1:8c:5e:39:
ad:00:c1:5e:da:c7:9c:b7:89:50:5f:f0:7e:0e:06:
bb:34:90:5e:c9:35:49:ff:00:ef:07:3a:42:14:4c:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E8:56:30:67:23:AC:00:18:5E:EE:9C:45:97:D7:49:D6:C5:E6:D3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/3ehWMGcjrAAYXu6cRZfXSdbF5tM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.120.0/21
Signature Algorithm: sha256WithRSAEncryption
73:58:29:48:a7:ed:91:ab:eb:e0:d2:1c:bb:24:e8:bd:6d:51:
9a:6d:71:51:e8:d4:d1:62:23:3e:be:be:1d:93:5a:81:96:f2:
af:d0:2b:92:13:77:93:69:db:9a:52:21:ca:8b:be:03:d6:7b:
93:77:ff:a5:95:17:02:a3:5c:84:9e:4c:a1:14:f5:32:6d:35:
4c:cb:9b:01:51:c1:fb:81:bc:31:7f:56:d7:35:d7:12:25:36:
eb:9d:4b:44:37:fb:d8:fb:e3:f3:69:f5:67:3b:fc:9b:01:b0:
f4:c1:ad:8f:a9:61:6b:cd:ab:8f:36:d5:47:20:bd:79:79:35:
bf:f9:69:01:e2:d3:ca:e0:08:7e:30:17:84:b1:eb:62:63:d1:
d0:55:fe:b6:83:a5:f1:a9:75:7d:5d:28:d7:6e:e6:97:d2:16:
6e:bd:81:7f:21:c0:6e:c6:a9:87:ab:13:89:b1:80:e8:ce:20:
49:57:56:a8:c3:d9:c0:73:d6:ac:5c:f4:18:83:92:23:b3:2d:
35:86:91:9e:97:8a:33:41:50:40:fe:90:ce:e1:da:11:a0:40:
e2:0a:24:04:87:a2:bb:b9:50:24:2d:68:fe:af:03:90:18:f0:
27:22:54:6d:e8:58:01:50:59:22:ee:bc:18:d8:8f:c0:a2:61:
df:9c:8d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org