Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/67p2jU8cX1kd1G5AfOx2q14oB58.roa
File: 67p2jU8cX1kd1G5AfOx2q14oB58.roa (raw, json)
Hash identifier: QA+VI5c8hRucMKTvv3od2wh/aDNFlQRXWhL/6wzyftA=
Subject key identifier: EB:BA:76:8D:4F:1C:5F:59:1D:D4:6E:40:7C:EC:76:AB:5E:28:07:9F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 288D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/67p2jU8cX1kd1G5AfOx2q14oB58.roa
Signing time: Fri 01 Sep 2023 10:05:29 +0000
ROA not before: Fri 01 Sep 2023 10:05:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.136.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10381 (0x288d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EBBA768D4F1C5F591DD46E407CEC76AB5E28079F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:4b:8c:76:22:b3:d6:4b:4c:36:85:e3:82:
1d:f9:6b:7a:97:2b:9e:9c:c1:d4:4f:b7:60:f3:e4:
51:35:1a:97:35:0d:91:f3:a2:3e:28:d4:28:7d:ba:
3f:ea:d3:c0:cf:aa:95:66:06:cc:47:f8:a0:7e:0b:
49:0f:b7:fc:1e:9c:6c:c2:30:30:8f:ea:2b:14:cc:
98:a5:6d:3a:67:aa:37:cf:0b:64:45:1c:ae:b8:e1:
2d:1d:2b:77:c7:ae:25:ca:ec:19:eb:a1:fd:ca:f3:
6b:17:37:f8:e3:5b:e6:27:4b:fa:47:d6:02:7c:d9:
c0:10:b9:c9:67:ed:68:21:9b:b4:d3:2c:f9:23:71:
0a:cd:c0:a0:46:00:4a:0d:27:68:ba:6c:7d:c5:8a:
6f:fb:ac:bb:af:77:50:e6:70:e6:a5:66:69:ef:22:
b7:e9:b6:90:c6:45:8c:fc:82:13:04:86:2d:9a:b3:
7e:6a:92:26:69:9b:b2:bb:ef:f9:41:e4:3d:fe:ab:
ba:53:0a:03:28:09:89:53:6d:ec:ab:2b:d3:fc:92:
18:53:38:25:ec:5a:f4:89:96:23:a9:5f:0b:c2:aa:
d2:f8:f6:87:34:e6:15:e4:11:72:3c:2c:bd:93:7a:
8a:77:05:5f:10:95:bf:cf:f1:07:a2:2e:18:3f:50:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BA:76:8D:4F:1C:5F:59:1D:D4:6E:40:7C:EC:76:AB:5E:28:07:9F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/67p2jU8cX1kd1G5AfOx2q14oB58.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.136.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:44:3e:ab:24:6a:b7:b3:e2:3d:90:00:cb:c0:3b:d5:3a:2c:
a3:a1:c0:28:af:6b:46:63:ac:9b:2e:c3:d8:7d:66:91:29:56:
71:01:a9:32:31:40:a8:fd:1d:42:00:e7:c0:08:8d:b2:00:1e:
e2:1a:f5:c5:0e:62:8c:27:66:7d:4e:3d:03:be:87:fa:ed:17:
44:c2:82:21:77:52:cd:e4:24:02:7c:19:68:06:dc:c4:f9:8b:
93:65:cd:80:09:69:8a:9a:9c:e6:06:4e:80:ee:80:db:91:b9:
27:a3:f2:b9:3d:92:ce:00:d2:03:3e:6f:2b:c9:ef:e7:71:39:
ca:10:55:2f:3e:10:d0:cc:e8:80:91:cf:a0:a5:0f:46:44:e0:
3a:b0:40:29:17:1e:ce:4a:01:57:38:26:70:17:89:e1:7e:b1:
38:65:a6:3d:5e:b3:c5:2c:60:9e:b2:51:6e:ba:f7:36:07:20:
04:34:0c:ee:e8:4c:c1:40:e5:40:44:29:56:94:25:db:0a:ef:
6d:97:f4:e8:2a:20:8e:40:43:41:ea:05:2b:a5:60:4e:b8:51:
e8:03:cd:b1:60:e2:51:bf:be:e6:b6:91:03:4d:53:16:3c:e5:
59:17:2a:e1:0c:08:be:72:04:2a:64:db:e2:a5:a1:95:60:20:
93:5d:56:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org