Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6jbUnISsz1IAoIfAezVn3PhgKVQ.roa
File: 6jbUnISsz1IAoIfAezVn3PhgKVQ.roa (raw, json)
Hash identifier: UHwr3gDF08TWbrs5CeIKi7DXzZqNekQVidYwOiva6JY=
Subject key identifier: EA:36:D4:9C:84:AC:CF:52:00:A0:87:C0:7B:35:67:DC:F8:60:29:54
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2856
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6jbUnISsz1IAoIfAezVn3PhgKVQ.roa
Signing time: Fri 01 Sep 2023 10:05:14 +0000
ROA not before: Fri 01 Sep 2023 10:05:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10326 (0x2856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EA36D49C84ACCF5200A087C07B3567DCF8602954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:e5:ea:47:c5:84:59:ef:fd:35:54:f6:96:
6a:a3:8c:82:6d:ce:f1:20:cb:1a:b7:eb:bc:21:26:
a7:96:bf:f1:31:9e:89:27:0f:f6:03:b1:39:3d:1b:
e9:cd:4a:c4:2f:76:75:b2:01:64:d3:2a:d3:7c:1a:
f8:38:03:59:9b:b6:37:f8:13:df:b9:6c:80:8e:dd:
fa:17:39:31:38:26:da:ef:29:ca:f1:5a:82:12:e7:
a7:c1:2b:c0:30:1f:e8:9f:89:1c:dd:73:89:c9:7c:
a4:18:4b:f1:59:4a:a1:0a:34:37:fd:74:40:9f:7c:
2b:2c:4a:1b:78:20:1c:3a:b7:d6:f9:0e:63:60:76:
1a:54:c0:fe:88:9d:98:fa:b6:f9:de:2d:55:55:86:
01:13:58:dd:1c:ed:cf:e8:b5:66:70:2d:92:46:49:
0c:bd:cc:74:88:08:30:12:5a:2a:e5:24:01:ae:71:
ac:34:c6:03:96:f7:2a:2c:a4:6e:0e:18:55:4d:b2:
7e:b3:ea:f2:73:a4:fb:94:82:c7:43:00:aa:f2:40:
76:4a:f2:09:70:89:2c:8e:69:02:c1:37:59:cc:ae:
f3:18:6c:3a:b3:44:b4:8c:92:e4:d6:2b:7b:c0:ad:
96:fc:aa:8d:c7:b0:f4:ad:30:5f:c0:03:37:81:1f:
87:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:36:D4:9C:84:AC:CF:52:00:A0:87:C0:7B:35:67:DC:F8:60:29:54
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6jbUnISsz1IAoIfAezVn3PhgKVQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:f0:0f:64:83:2a:c4:59:ef:5c:b4:4d:60:d8:3b:05:6a:88:
3e:11:86:b5:cb:c7:23:db:0b:3d:30:bd:35:a6:19:0b:f1:c2:
b0:35:79:29:02:90:b7:77:05:66:ec:7c:a9:0a:10:a7:94:a0:
24:6b:5d:82:db:68:1e:ed:8d:4b:36:a8:40:de:70:d2:3e:10:
8b:78:58:ef:3c:31:80:57:07:bf:2f:4d:99:3d:24:9d:14:b9:
55:c7:b5:31:07:57:1d:fb:ba:f0:1e:a3:fa:0b:95:0d:5f:e9:
e0:62:f2:d7:84:71:03:92:3f:45:2c:8b:c0:1d:a6:8b:77:db:
d9:30:cd:e5:31:bd:ce:33:90:0c:11:7e:f1:51:20:2c:47:1c:
70:1e:3a:5a:9e:e1:d7:39:1f:44:c5:82:74:90:61:7f:84:ad:
8a:d0:e2:82:d2:39:e7:0e:42:37:7e:8d:7e:b6:dd:3f:24:ba:
94:94:e0:7c:7b:8c:c0:79:c2:24:73:34:78:91:d0:f5:5d:01:
d3:a2:60:71:9f:fe:57:11:8a:96:9e:1a:4e:2e:59:af:fb:c1:
9b:0d:d6:57:5f:74:e3:7a:92:68:5b:ac:8b:2e:d0:26:5a:42:
36:2c:be:6b:4f:f4:ef:75:72:65:c8:fe:19:9e:1a:d2:f7:ca:
a9:2f:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org