Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/61PQY5OQRRLydlxbUChyqqC-DTE.roa
File: 61PQY5OQRRLydlxbUChyqqC-DTE.roa (raw, json)
Hash identifier: 0UXctK9AQ9UvItYWPYw9hm7sPwb6Pvvbd8CsQsjXQYI=
Subject key identifier: EB:53:D0:63:93:90:45:12:F2:76:5C:5B:50:28:72:AA:A0:BE:0D:31
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2909
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/61PQY5OQRRLydlxbUChyqqC-DTE.roa
Signing time: Fri 01 Sep 2023 10:06:04 +0000
ROA not before: Fri 01 Sep 2023 10:06:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10505 (0x2909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EB53D06393904512F2765C5B502872AAA0BE0D31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:7d:aa:79:77:07:cc:90:f0:d8:b0:9d:80:
a4:25:bf:d7:72:cc:27:d6:39:9a:b2:29:35:3a:8f:
2b:de:b6:3b:af:9e:3c:63:1c:74:2a:a3:63:5b:b3:
2b:26:2f:a9:80:95:f8:3d:e7:2f:09:00:46:22:98:
62:66:36:16:1c:d0:db:08:12:3c:fd:8d:51:67:7a:
34:3a:f5:11:7e:e3:ca:e2:17:e1:ff:a6:d2:04:3d:
6b:a2:b2:ab:08:55:f3:13:e1:c8:04:27:d4:d8:1e:
39:97:50:3d:3f:42:70:49:6b:a2:63:cf:7c:34:e6:
1f:8e:08:e1:d4:3e:f6:06:36:19:cb:de:42:01:a4:
e3:ff:c8:87:98:4b:b9:e0:1d:15:08:28:32:56:ac:
47:e3:9b:21:0a:25:78:00:cb:8a:75:e1:f9:f4:36:
71:c4:45:6e:6f:40:68:cd:6b:02:dd:00:ee:e5:a8:
e8:a5:93:0f:5a:db:cf:41:cc:5d:79:80:b7:9b:64:
fc:43:af:61:b4:ff:a4:ea:bc:17:2c:22:4c:ad:85:
7f:21:15:2d:36:d2:cd:97:d5:c4:c0:61:9f:db:a1:
ef:32:3e:c4:a3:4b:8e:1e:a3:b1:c2:a3:32:75:95:
42:97:07:7e:b7:b9:10:18:85:d9:53:1e:95:9a:7e:
bd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:53:D0:63:93:90:45:12:F2:76:5C:5B:50:28:72:AA:A0:BE:0D:31
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/61PQY5OQRRLydlxbUChyqqC-DTE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.156.0/22
Signature Algorithm: sha256WithRSAEncryption
20:d1:4f:81:96:e5:8a:6c:be:d6:c1:2f:ff:11:20:f4:09:88:
0e:f0:9c:d3:19:22:12:5a:24:ad:27:ad:bd:74:15:ba:a0:06:
9a:f4:cb:75:b0:b9:27:0a:27:a2:e1:2e:51:b3:1a:eb:b1:2c:
19:a1:9a:24:2d:7c:ac:f4:dd:66:4b:5c:8d:b6:92:0f:73:30:
9b:b7:95:9b:ed:4c:c6:44:59:29:00:5b:de:49:41:2c:4b:37:
e3:fd:33:a4:ea:a9:39:0d:05:06:3d:cc:1a:a0:6d:39:86:20:
c1:58:e8:19:4d:f4:3c:d4:8a:5e:79:34:db:11:b6:54:f5:28:
25:32:c9:f6:5a:99:8b:9a:05:a0:05:54:de:5a:56:c9:7b:21:
f0:6f:9e:09:e1:f2:a3:77:c1:0c:b0:65:65:3e:ce:fc:16:7b:
a7:c3:d0:e7:36:9f:ed:9b:12:6a:98:7c:23:1a:17:e1:30:d0:
be:57:2f:dc:0b:f3:44:4c:19:88:1d:98:8a:d7:19:33:7b:3b:
f7:7a:91:d9:f6:94:c8:63:b4:2f:c8:4c:70:23:3c:20:bb:37:
4c:93:97:96:17:d7:1e:8f:cd:51:83:90:ce:7c:8a:b0:38:1a:
1f:7b:ca:9e:26:7f:23:88:6a:4e:d4:2a:a2:97:53:29:20:43:
ed:1d:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org