Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5M37ExpcupmLjRcd7pSGf0Om7vM.roa
File: 5M37ExpcupmLjRcd7pSGf0Om7vM.roa (raw, json)
Hash identifier: Pp8/TvmQ2Qz+o+G/0D6gYXRTlPYJ4wmm1BTBfuXxvzg=
Subject key identifier: E4:CD:FB:13:1A:5C:BA:99:8B:8D:17:1D:EE:94:86:7F:43:A6:EE:F3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5M37ExpcupmLjRcd7pSGf0Om7vM.roa
Signing time: Fri 01 Sep 2023 10:05:43 +0000
ROA not before: Fri 01 Sep 2023 10:05:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10435 (0x28c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E4CDFB131A5CBA998B8D171DEE94867F43A6EEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:94:e6:19:0c:35:a6:36:dd:63:42:aa:ef:a5:
a2:59:11:61:ec:f3:26:49:5c:40:de:30:e7:a0:ff:
2c:1c:d5:9d:39:5a:93:b2:dc:d7:90:99:fb:7e:cc:
1d:e1:c4:ec:4d:00:42:8a:23:8e:37:9f:54:b9:bd:
b9:91:79:06:28:e2:94:36:b3:6b:d1:e7:30:1d:77:
f3:cd:a5:33:4e:e2:4b:62:ef:f3:30:81:30:9d:42:
5a:7b:5f:b3:b7:e4:da:a1:28:ae:85:15:6a:53:9c:
bf:f2:45:16:2c:e6:1d:30:33:7e:c4:d9:e6:19:c2:
6f:10:28:72:2b:d4:c3:83:c4:2c:53:9b:2b:90:33:
6a:57:98:c5:95:08:c9:1a:83:aa:c6:af:56:cd:57:
c2:69:87:b4:87:b9:c5:03:e8:b8:80:74:6f:cc:be:
26:7e:46:6e:89:67:26:2d:59:53:ca:b7:d5:33:cb:
bf:94:83:fa:4b:e2:0b:59:99:3f:ed:e6:49:94:26:
3d:44:57:4a:82:e0:eb:18:b6:46:41:0c:d6:4c:02:
8c:9b:35:5c:0b:83:37:31:e9:c6:14:37:cf:2c:65:
5e:f3:d0:0f:5f:45:95:25:fb:43:ee:66:fa:4a:04:
42:6d:a5:66:4b:02:1a:49:40:76:8d:37:9e:a8:67:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CD:FB:13:1A:5C:BA:99:8B:8D:17:1D:EE:94:86:7F:43:A6:EE:F3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5M37ExpcupmLjRcd7pSGf0Om7vM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.111.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:31:41:e9:86:f8:22:3d:ba:3e:da:97:93:98:62:53:00:ca:
ab:0f:f5:bf:12:17:2c:ac:55:54:d0:2a:bc:92:82:5b:91:02:
7c:d6:7c:c3:12:09:b4:e0:01:6a:b6:bf:54:20:ab:ef:6d:cc:
c0:4d:ba:1f:e4:9c:08:d5:f1:e9:db:c8:b8:18:d0:76:94:73:
39:34:a3:71:7c:c5:e8:16:6b:1e:fc:4b:c5:7e:ab:cb:27:bb:
5a:55:51:4c:a3:49:11:92:4a:36:64:c0:74:b2:72:49:44:19:
72:ad:f6:06:80:3a:02:1e:ee:fd:26:95:cd:e4:e4:f2:e6:27:
d0:2d:61:33:b1:e7:a6:a6:49:4e:0d:89:ae:ce:05:99:70:45:
a8:22:5d:c6:fd:d0:02:17:e3:b8:11:3d:f7:0d:b6:e7:44:ac:
92:8a:5e:e8:23:53:3f:ea:72:94:17:1e:80:b6:9d:72:7d:36:
51:5b:ae:c5:fb:9f:27:71:00:bd:6f:fe:72:02:1b:1b:b2:2a:
dd:48:38:da:36:b9:92:9a:cb:20:83:d2:47:6d:ea:72:d5:14:
bf:ae:aa:d1:b2:84:e0:9a:86:5a:07:1b:ef:64:7a:3a:a2:44:
1c:6d:68:3a:87:a8:ab:b0:42:d8:26:ee:ea:0b:81:54:f5:51:
2c:99:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org