Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48lR6D4MlUfzJ003N0TFj7q9aSY.roa
File: 48lR6D4MlUfzJ003N0TFj7q9aSY.roa (raw, json)
Hash identifier: tWhNHfIuBpgdQTl6f/GScdDG2mA1QihVPVeezUbd+dA=
Subject key identifier: E3:C9:51:E8:3E:0C:95:47:F3:27:4D:37:37:44:C5:8F:BA:BD:69:26
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27D6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48lR6D4MlUfzJ003N0TFj7q9aSY.roa
Signing time: Fri 01 Sep 2023 10:04:36 +0000
ROA not before: Fri 01 Sep 2023 10:04:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10198 (0x27d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E3C951E83E0C9547F3274D373744C58FBABD6926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:46:fe:75:0a:89:e9:06:4d:4a:79:d8:36:
a1:e3:d2:ca:00:9c:11:4c:6e:6e:00:b7:02:2a:6a:
25:bf:07:96:99:10:31:3f:58:71:b9:a3:1a:02:2e:
8e:39:7b:6c:98:b0:3d:81:62:a4:f1:43:e0:b1:ca:
7e:a7:51:7f:d9:a0:6a:79:87:2f:1c:00:6f:45:21:
ef:f7:1f:5c:26:0e:74:78:20:87:a9:a9:a8:bc:ba:
e6:48:f5:ea:6e:e1:b9:98:a7:4f:93:3f:23:0d:3c:
93:9a:75:55:b8:a3:29:ff:0d:e6:a3:c2:3c:84:89:
ba:3f:73:93:72:00:65:91:17:65:8e:47:c1:1b:0e:
c4:ea:71:b0:2b:45:36:3e:ed:b0:cc:86:1a:3c:6a:
b3:be:01:49:f1:71:34:e5:e3:4d:14:1c:ac:00:ee:
25:60:a6:a0:8a:64:e1:e6:41:89:ac:56:74:3d:1f:
cb:98:15:79:93:df:e5:b5:e3:67:ae:67:ba:81:81:
2e:07:cf:ab:1c:b6:45:9a:3e:f2:91:a7:5d:28:c9:
48:a1:27:fb:65:91:72:05:d1:7e:d8:0e:5e:8d:16:
8f:26:bb:4a:45:b7:79:81:28:b0:39:d4:c1:75:f2:
49:79:38:db:dd:dd:b4:17:ba:94:94:6a:92:f7:8c:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C9:51:E8:3E:0C:95:47:F3:27:4D:37:37:44:C5:8F:BA:BD:69:26
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/48lR6D4MlUfzJ003N0TFj7q9aSY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/21
Signature Algorithm: sha256WithRSAEncryption
57:5d:56:46:1c:26:84:fd:8e:de:27:86:d0:ba:55:ce:da:0a:
38:5b:44:f1:c4:e9:a9:57:0a:55:87:56:a8:fd:ec:7f:fe:94:
d1:08:69:f5:79:1a:36:ec:7c:d9:5a:1b:56:d1:4c:7a:80:13:
28:cd:54:5a:e6:ce:4d:a3:bd:a6:85:1d:ba:de:e4:d7:50:4d:
67:ae:2c:5b:28:86:1a:0c:89:e0:a8:30:8f:84:6f:36:dd:7f:
09:39:a9:73:7d:1a:bb:5c:a4:09:3d:ee:ae:67:05:52:d0:f6:
82:54:7b:c3:30:f4:d6:db:34:17:c3:4c:16:c8:d2:61:cf:89:
82:b4:c1:80:28:8d:01:3b:38:db:fb:ff:3d:16:83:96:27:5c:
0e:3f:aa:d9:63:8e:6e:17:06:2d:f5:b5:d6:e5:a2:36:d1:98:
be:d2:2c:4f:38:f8:09:18:4b:38:df:a1:8d:8c:0a:52:49:2a:
a7:be:d6:44:9a:ac:2b:a7:81:de:dc:ff:b4:82:eb:74:c7:15:
0d:8b:b3:04:5f:ff:d6:05:cb:57:d3:33:09:59:0b:88:fc:7a:
a6:86:2b:64:85:f2:56:06:7e:52:27:a0:35:cc:d4:dc:20:a5:
9f:73:a4:18:bf:0f:f2:e7:b0:92:0a:a9:70:f4:be:4e:bd:44:
42:78:b9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org