Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4owdM8RbkuY9SM8RSzafuxn5q0s.roa
File: 4owdM8RbkuY9SM8RSzafuxn5q0s.roa (raw, json)
Hash identifier: ylKJWf5XyLtE2fENrYeju/LUQgKOodexfQqoNboGp6M=
Subject key identifier: E2:8C:1D:33:C4:5B:92:E6:3D:48:CF:11:4B:36:9F:BB:19:F9:AB:4B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27CD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4owdM8RbkuY9SM8RSzafuxn5q0s.roa
Signing time: Fri 01 Sep 2023 10:04:33 +0000
ROA not before: Fri 01 Sep 2023 10:04:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.194.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10189 (0x27cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E28C1D33C45B92E63D48CF114B369FBB19F9AB4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4e:5e:16:24:0d:4d:99:3d:e8:af:3a:80:1b:
ec:da:96:70:08:c2:3e:1e:72:53:17:06:be:b5:cf:
53:5c:d6:79:4f:2a:99:33:8b:fe:34:8c:24:9d:30:
1a:bc:1b:79:33:52:6f:07:89:fb:95:d7:a8:d8:b8:
83:cc:7c:17:38:98:de:34:47:4c:fa:cd:4d:9c:e4:
88:c8:a3:9a:32:23:c5:8e:25:f8:29:91:d1:4c:20:
a2:67:f5:08:83:b3:4e:58:b7:de:5f:a6:29:b9:4d:
42:b2:e0:b1:20:a6:75:45:d1:f1:67:bd:43:fe:f4:
cd:21:91:0e:da:e7:41:5a:55:87:d0:d9:08:db:8d:
22:78:52:2f:c5:73:bf:9e:68:40:18:65:09:b7:7b:
c7:26:17:16:a2:bc:59:8c:56:cd:89:5b:ef:9c:ae:
21:e5:b4:40:11:06:e4:ef:a8:ec:b4:a7:54:57:3f:
a7:aa:55:8b:f0:73:68:ee:8c:2d:1b:81:12:b4:16:
86:b4:ef:54:34:12:df:57:28:b0:fa:bf:33:69:ce:
24:a9:8f:e4:f6:96:ae:b2:a0:1c:12:2e:59:97:fb:
9d:b0:3f:19:fc:77:08:d5:7d:13:f6:5d:5f:67:47:
84:92:52:1c:aa:38:92:62:e4:a7:80:78:64:b5:ae:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8C:1D:33:C4:5B:92:E6:3D:48:CF:11:4B:36:9F:BB:19:F9:AB:4B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4owdM8RbkuY9SM8RSzafuxn5q0s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/19
Signature Algorithm: sha256WithRSAEncryption
09:d5:d9:27:e7:15:95:4e:c7:a3:49:f2:ba:30:7f:6c:a2:68:
be:cd:01:5b:c7:87:e3:2a:4a:8b:00:5f:3a:f7:79:a2:a2:df:
b7:cf:7f:1f:a3:9d:f7:c2:f1:89:af:72:89:79:55:1a:7b:f1:
65:01:42:1c:39:39:62:48:43:84:71:22:60:48:d9:04:95:3b:
e9:00:15:22:04:de:a2:35:76:67:09:d0:bc:7e:7d:89:5c:82:
5f:03:b2:00:61:85:5b:1f:3f:5d:29:8b:4e:3f:20:14:dc:73:
59:a9:a9:2f:75:da:b1:d1:d8:47:bc:12:48:c4:77:f4:4b:91:
df:3b:7d:4a:8e:0d:63:51:34:1d:5b:27:cb:cc:95:db:2b:6d:
e9:32:c6:c0:1e:bf:42:c6:98:a3:f2:5d:8c:eb:2d:b8:33:2f:
7b:c1:6e:c0:51:e2:97:2c:cf:e1:b3:2a:43:f2:91:20:bf:68:
56:25:5d:00:b9:00:a6:4e:64:a3:87:ad:fc:94:d5:fe:22:1e:
e3:18:e7:8b:04:48:c3:83:0d:9a:b3:a6:77:45:00:68:a8:18:
b0:55:06:22:f0:1d:99:3a:23:b9:55:cf:5e:59:06:e2:77:9b:
1d:65:8c:c5:5e:f5:40:49:cf:e0:56:e0:8c:98:98:03:fc:08:
2b:c8:69:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org