Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6MwUOYuvokp42AZJEpovZxW24T0.roa
File: 6MwUOYuvokp42AZJEpovZxW24T0.roa (raw, json)
Hash identifier: 9sIlgsF9w5PDDyPlXBq0s7vfsJWFg68VXjMVyX46jtU=
Subject key identifier: E8:CC:14:39:8B:AF:A2:4A:78:D8:06:49:12:9A:2F:67:15:B6:E1:3D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2930
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6MwUOYuvokp42AZJEpovZxW24T0.roa
Signing time: Fri 01 Sep 2023 10:06:15 +0000
ROA not before: Fri 01 Sep 2023 10:06:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10544 (0x2930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E8CC14398BAFA24A78D80649129A2F6715B6E13D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:ef:5f:20:d4:d8:32:dd:a0:3b:9e:4c:c4:
5b:2d:12:b6:c2:1c:91:76:ea:99:c3:f2:ed:2c:54:
8d:1a:b7:5c:41:6b:80:8c:de:d8:08:61:d1:06:b9:
9b:e5:71:02:ab:f1:e6:76:52:d1:8f:e5:14:66:a7:
d2:99:e4:96:0f:e3:2d:2d:75:28:2d:b5:0f:93:c4:
06:29:de:19:86:1e:e9:be:c9:fc:db:29:9d:6c:67:
1e:84:f3:c7:5d:2d:36:3a:d1:32:f1:93:6a:47:a5:
f7:f5:9e:8f:a8:ad:91:3c:5c:d2:40:57:ad:52:ec:
2a:64:00:43:c6:04:d0:43:25:ad:06:d7:83:d9:5b:
ea:e7:29:c1:0e:4b:43:2c:c9:41:b8:e5:1e:f8:95:
86:65:42:80:49:eb:b5:4f:54:f7:1b:21:65:20:df:
d2:79:49:4a:da:bf:35:db:9b:48:04:38:bb:97:51:
66:bd:44:9e:b8:8c:94:be:ef:78:3f:a0:7a:3e:50:
ef:60:8e:48:f1:6f:a4:17:79:9b:71:87:0a:84:d1:
e8:21:35:1f:29:ef:04:0e:98:20:76:ef:0c:25:a9:
9b:49:64:0e:5b:7a:47:15:bc:6a:4c:df:fb:b2:d7:
24:c7:4b:ef:90:ce:e8:2b:8c:06:73:ff:10:7f:25:
6d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CC:14:39:8B:AF:A2:4A:78:D8:06:49:12:9A:2F:67:15:B6:E1:3D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6MwUOYuvokp42AZJEpovZxW24T0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.92.0/22
Signature Algorithm: sha256WithRSAEncryption
52:3e:92:c7:fb:1a:83:a4:ab:21:d6:06:d5:3a:6f:3e:ff:a7:
79:b1:2b:75:67:a1:da:91:4c:32:a5:20:b1:39:4b:bf:e0:d3:
00:34:d7:f1:71:0a:1d:9b:0e:92:33:a6:38:f6:72:cb:b3:ee:
d0:99:ab:0f:35:e8:0a:30:54:b7:0b:f8:ba:0b:33:79:06:67:
f3:b4:b8:7e:0d:29:7d:ca:1a:17:5a:d7:f9:ea:8f:76:6f:3f:
51:a0:2e:00:14:fb:4b:d7:c7:8f:cf:5c:63:e5:92:22:d5:f4:
18:d5:64:56:11:78:ca:23:93:95:e8:b8:c3:79:bd:b6:fb:d3:
dc:c7:b4:f0:6d:49:e9:9f:1a:14:38:1f:9d:f7:0b:b3:8e:6b:
da:92:48:3b:1e:ca:25:fd:c5:4b:5b:b3:79:07:c9:7c:b1:b9:
21:22:7e:1d:db:7b:ab:81:a4:11:16:58:a1:18:55:26:c7:d3:
99:cc:6a:a0:c7:7f:ec:81:05:5a:d6:1b:08:a9:64:c6:58:d5:
ce:50:90:87:32:70:d3:a0:65:7a:31:89:0d:dd:48:e1:e6:23:
04:4f:92:67:78:30:03:72:50:c0:e3:58:44:86:79:3e:d3:b5:
39:d0:05:a1:71:1e:c9:f5:72:91:21:80:1d:29:01:d7:ca:d5:
3d:bb:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org