Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/63nsLyma93ke_lSEfwV8XapCz2k.roa
File: 63nsLyma93ke_lSEfwV8XapCz2k.roa (raw, json)
Hash identifier: 8PtFsEX6Y1w3Zp4fxdIYx9XHTrS/GRA8N+cXKOSnE9E=
Subject key identifier: EB:79:EC:2F:29:9A:F7:79:1E:FE:54:84:7F:05:7C:5D:AA:42:CF:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29D6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/63nsLyma93ke_lSEfwV8XapCz2k.roa
Signing time: Fri 01 Sep 2023 10:07:09 +0000
ROA not before: Fri 01 Sep 2023 10:07:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.238.0/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10710 (0x29d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EB79EC2F299AF7791EFE54847F057C5DAA42CF69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:e7:6a:d1:d4:d8:ce:1a:6f:03:83:79:f5:
75:7c:6c:3c:8f:23:71:ae:19:00:d3:c0:a6:9c:63:
70:eb:1a:4b:fd:82:7f:85:52:38:f8:88:73:f6:d5:
d3:f4:0f:ca:29:00:19:9a:0b:20:7e:44:99:de:6e:
0f:b6:b4:8f:00:1e:f0:61:40:ff:69:62:ae:7c:da:
d5:5e:e3:ed:8b:e3:7f:0c:e6:03:18:f0:ef:2e:1c:
01:1f:19:b0:4f:26:58:b3:17:74:b7:05:8e:f7:99:
a9:b8:c0:a2:a8:3e:ef:13:4f:46:b0:9a:07:57:91:
6d:ff:bc:56:b2:9d:0e:0b:af:fc:2f:50:7f:a8:d8:
1c:62:a4:f2:23:1f:31:c3:a6:67:00:b9:40:b2:0a:
3b:21:07:ca:f0:c4:bd:34:aa:f4:6f:16:6e:4e:66:
d9:0f:ae:9e:55:55:28:ff:9a:91:b9:cf:c4:6e:5c:
f3:9d:2d:e3:62:34:a9:4d:9e:c1:9a:20:26:42:00:
95:c9:54:d8:d3:80:36:44:87:45:24:a9:ff:80:cc:
a7:94:c0:4c:fe:53:22:2e:4f:1e:3a:46:05:7b:4b:
0c:bd:c3:54:27:f6:e7:41:5b:e3:14:04:d6:9f:70:
6d:d0:64:55:61:fb:15:82:fa:e8:c6:b1:ad:0b:4c:
ef:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:EC:2F:29:9A:F7:79:1E:FE:54:84:7F:05:7C:5D:AA:42:CF:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/63nsLyma93ke_lSEfwV8XapCz2k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.238.0/25
Signature Algorithm: sha256WithRSAEncryption
81:94:2d:5e:df:ea:98:62:b4:de:65:c1:48:ff:9d:f3:30:f5:
52:fd:ce:ea:f1:84:0f:40:c7:c0:ce:92:86:7d:bb:8e:de:8c:
cf:89:97:28:be:49:83:76:bc:98:2f:9d:31:7f:5f:49:2e:0c:
52:aa:81:5a:b8:f1:02:67:ca:36:3b:07:e0:87:b5:1d:29:a0:
ea:0d:db:69:e0:1a:ad:29:db:c0:08:8c:c7:c5:d9:1a:c2:e6:
a8:bb:7a:ed:26:54:59:36:53:fa:40:8e:16:71:9a:c5:51:a7:
5e:7a:3d:88:36:72:c7:7e:22:45:64:2e:ff:de:03:0b:7b:81:
81:11:66:c3:16:f5:ce:6f:09:cc:52:b3:01:4e:74:7e:32:8b:
a8:95:ab:8e:e0:24:40:18:36:dd:88:80:a4:33:98:e3:51:f2:
9f:52:d7:8d:6c:df:d2:5d:31:b2:a2:f8:ce:53:ba:13:8e:1a:
cf:12:9b:04:af:fc:d6:8e:a9:74:2d:71:0e:9e:ad:6c:1b:b3:
f9:68:df:2f:8f:8d:f3:39:36:44:22:98:43:2a:e4:e9:c2:4e:
e6:84:d9:59:85:2d:70:9b:a3:2f:df:2e:39:a8:d3:dc:f3:a6:
c1:21:3b:b4:7d:6b:79:b5:47:a2:bb:09:58:dc:94:00:0c:b3:
1e:85:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org