Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4w6pFS63TNCOkc8wsZO2zMDCOVI.roa
File: 4w6pFS63TNCOkc8wsZO2zMDCOVI.roa (raw, json)
Hash identifier: 2d1PUJXisZj2Ffo062ExKvBZD7SRVC9q37qh6IPsAuI=
Subject key identifier: E3:0E:A9:15:2E:B7:4C:D0:8E:91:CF:30:B1:93:B6:CC:C0:C2:39:52
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B07
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4w6pFS63TNCOkc8wsZO2zMDCOVI.roa
Signing time: Fri 01 Sep 2023 10:09:46 +0000
ROA not before: Fri 01 Sep 2023 10:09:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11015 (0x2b07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E30EA9152EB74CD08E91CF30B193B6CCC0C23952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:a0:a6:4b:09:12:8f:30:03:08:23:ae:ff:
b4:b6:ab:ee:b4:f8:02:19:46:e2:4c:61:ec:f0:cc:
c5:f6:28:2f:d8:48:7c:b0:f1:ac:db:d3:05:8e:30:
f4:bf:07:18:e3:3e:42:c9:f7:a3:18:d8:bd:57:8a:
b5:50:a6:84:f0:8e:f3:87:0b:f4:22:a4:c9:08:cf:
1b:40:a1:ef:c4:29:5b:67:20:38:93:74:88:6a:7c:
a8:bc:23:e9:ce:9b:c2:e2:48:1a:8a:83:c3:17:da:
5c:a3:c2:df:4e:1a:49:2e:49:c7:5a:23:34:6a:19:
e8:06:f2:39:1a:d8:ac:4a:ae:52:da:c6:e7:4c:b9:
d2:55:5d:79:31:62:df:89:b5:4d:d4:79:32:51:fd:
89:bc:00:09:f2:cf:6d:84:cb:14:a4:c4:03:9a:66:
1f:4f:58:21:26:b1:57:03:68:b3:98:8d:c6:53:b4:
00:74:7b:64:57:70:44:c5:96:42:3b:74:2f:21:4d:
66:f5:7b:e6:5f:ae:dd:69:36:20:23:76:15:a7:9a:
3e:21:bb:6b:ab:d3:9e:c8:b0:f2:c4:f4:53:31:06:
ed:e1:46:62:fe:67:4d:a4:8a:da:56:38:62:39:4d:
8b:79:45:9a:c3:10:d9:df:58:a0:4f:64:53:b5:d6:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0E:A9:15:2E:B7:4C:D0:8E:91:CF:30:B1:93:B6:CC:C0:C2:39:52
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4w6pFS63TNCOkc8wsZO2zMDCOVI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.224.0/21
Signature Algorithm: sha256WithRSAEncryption
b6:6a:bb:8f:78:53:d3:af:cb:d1:20:71:e5:33:06:60:89:e2:
5e:46:c8:64:dc:2a:22:c7:f6:0e:2e:16:a8:1f:d9:c0:82:03:
5e:29:80:ee:a1:52:08:b9:95:99:f9:d2:c8:00:a1:76:c2:8b:
91:7c:ad:9d:fc:55:77:b3:f6:23:cb:aa:33:3d:2d:ba:dd:dc:
9c:3f:81:86:4b:fe:1d:ff:b6:20:d0:7c:2e:61:ce:0e:b2:f9:
5e:51:d5:09:73:e2:a6:24:ee:35:cc:87:08:7e:43:5c:72:fd:
e9:24:cb:9e:84:f3:ff:5d:70:07:9f:2f:d0:2e:4b:cf:fb:d8:
85:e7:08:a8:86:9f:ae:b4:25:9d:6b:ba:03:35:f7:7b:be:ba:
4b:1e:23:d0:01:d5:97:ff:7f:ba:7d:9c:f8:48:58:95:29:3d:
da:10:a7:ba:63:3a:41:ab:7a:be:72:36:72:6b:8a:21:18:aa:
a3:3a:34:10:d8:d9:0c:cb:ec:c3:69:4c:8d:e7:78:f7:57:ab:
b8:b1:87:36:fd:b2:08:88:7f:85:1c:ae:36:d7:54:46:c1:9e:
bc:ac:2f:8e:88:70:39:a0:f2:49:30:81:e0:b6:36:98:b8:37:
a8:62:ad:07:35:a8:9d:a0:31:5b:15:ca:3a:e3:c4:21:6b:7c:
d1:70:52:71
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA5NDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEUzMEVBOTE1MkVCNzRD
RDA4RTkxQ0YzMEIxOTNCNkNDQzBDMjM5NTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIiqCmSwkSjzADCCOu/7S2q+60+AIZRuJMYezwzMX2KC/YSHyw
8azb0wWOMPS/BxjjPkLJ96MY2L1XirVQpoTwjvOHC/QipMkIzxtAoe/EKVtnIDiT
dIhqfKi8I+nOm8LiSBqKg8MX2lyjwt9OGkkuScdaIzRqGegG8jka2KxKrlLaxudM
udJVXXkxYt+JtU3UeTJR/Ym8AAnyz22EyxSkxAOaZh9PWCEmsVcDaLOYjcZTtAB0
e2RXcETFlkI7dC8hTWb1e+Zfrt1pNiAjdhWnmj4hu2ur057IsPLE9FMxBu3hRmL+
Z02kitpWOGI5TYt5RZrDENnfWKBPZFO11hytAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4w6pFS63TNCOkc8wsZO2zMDCOVIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzR3NnBGUzYzVE5DT2tjOHdz
Wk8yek1EQ09WSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wuAwDQYJKoZIhvcNAQELBQADggEBALZqu494U9Ovy9EgceUzBmCJ4l5GyGTcKiLH
9g4uFqgf2cCCA14pgO6hUgi5lZn50sgAoXbCi5F8rZ38VXez9iPLqjM9Lbrd3Jw/
gYZL/h3/tiDQfC5hzg6y+V5R1Qlz4qYk7jXMhwh+Q1xy/ekky56E8/9dcAefL9Au
S8/72IXnCKiGn660JZ1rugM193u+ukseI9AB1Zf/f7p9nPhIWJUpPdoQp7pjOkGr
er5yNnJriiEYqqM6NBDY2QzL7MNpTI3nePdXq7ixhzb9sgiIf4UcrjbXVEbBnrys
L46IcDmg8kkwgeC2Npi4N6hirQc1qJ2gMVsVyjrjxCFrfNFwUnE=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org