Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7-zM1c4lg-zsWxonaLs5PmBs54Y.roa
File: 7-zM1c4lg-zsWxonaLs5PmBs54Y.roa (raw, json)
Hash identifier: uaG8rZ40W/d9fg18UCgHedl4T3Tv8awIKTTNmKbMmU8=
Subject key identifier: EF:EC:CC:D5:CE:25:83:EC:EC:5B:1A:27:68:BB:39:3E:60:6C:E7:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2883
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7-zM1c4lg-zsWxonaLs5PmBs54Y.roa
Signing time: Fri 01 Sep 2023 10:05:25 +0000
ROA not before: Fri 01 Sep 2023 10:05:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.88.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10371 (0x2883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:25 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EFECCCD5CE2583ECEC5B1A2768BB393E606CE786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:68:f8:a5:90:01:b0:73:da:64:aa:fb:04:
af:3c:f1:8d:a2:a4:b6:fc:24:da:45:e5:c1:6e:d1:
c4:05:4c:73:9e:c6:4a:7f:8e:47:64:e0:2e:1b:98:
17:bd:1b:f8:72:f8:bd:80:4e:30:a0:a6:82:b2:0a:
24:e5:f4:96:87:11:6e:33:0d:91:9e:83:f7:42:f8:
94:97:d6:8c:ca:6f:29:7d:57:ca:52:2b:83:ae:15:
fe:4a:69:88:c6:62:26:dc:b5:d7:b0:cc:f3:ad:20:
63:cd:f2:e7:eb:c7:cc:2e:38:b7:fc:db:39:68:72:
cb:d8:7c:cb:6e:de:e1:cc:cf:e4:a7:49:4a:73:bd:
82:27:61:39:0b:10:5d:45:aa:97:c7:a3:21:8b:3d:
ff:d4:f9:95:5b:b6:c5:2c:05:4a:53:55:b2:42:4c:
c2:99:96:3f:1c:21:09:2a:32:bc:da:a2:01:6c:01:
73:f6:91:aa:53:c0:24:28:55:38:10:8e:7d:cf:d4:
63:38:5c:50:6f:2c:d0:fd:d9:39:fd:21:c4:a6:c6:
6d:03:c4:6d:be:a9:00:7d:98:d0:4d:23:c8:9f:0b:
ea:f9:39:7a:45:84:23:d3:bf:25:6e:ad:ac:9f:dc:
2c:fe:95:47:ed:a5:ab:7a:b8:ce:cf:45:ab:89:81:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EC:CC:D5:CE:25:83:EC:EC:5B:1A:27:68:BB:39:3E:60:6C:E7:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7-zM1c4lg-zsWxonaLs5PmBs54Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.88.0/22
Signature Algorithm: sha256WithRSAEncryption
22:9f:7f:27:aa:2e:d0:c0:7f:36:01:eb:e2:20:e3:ad:2f:01:
44:96:60:d6:45:77:c7:ed:0a:6b:f1:f6:f2:6d:8a:b1:03:38:
91:a0:13:08:2b:6d:37:c8:f6:66:ca:d4:49:a7:13:5e:57:4e:
1f:3b:8c:5c:b8:19:ee:24:6e:76:ca:34:07:fd:42:de:71:63:
61:d1:39:a3:42:e0:5c:87:35:a5:9f:4d:cf:e4:ad:4f:4c:27:
d2:84:52:5d:d9:85:8d:95:95:fb:c2:51:88:ef:3f:98:49:2a:
7c:99:d1:33:8b:3c:6e:0d:7b:b6:bc:4e:af:23:29:b6:83:de:
48:77:ce:96:47:6c:79:91:01:97:88:b0:14:58:36:40:00:35:
2e:6e:b2:e4:fd:37:ff:ca:b8:ce:c5:66:ea:f9:9d:8b:71:44:
b2:f3:06:2b:15:6b:2a:8e:16:97:8c:97:d4:2c:aa:74:6f:c2:
01:1b:0e:06:f4:28:50:8a:46:19:2c:f0:a4:e5:6e:0e:33:9e:
46:74:07:92:b2:e0:9c:9b:d5:90:c2:61:29:f8:f9:fc:97:6a:
40:43:b6:2b:ea:12:94:b5:a8:d7:5d:c2:9f:f9:9e:f8:d9:9d:
3a:a1:76:d4:f6:27:89:89:8a:11:dd:42:c1:c7:4a:6e:91:f8:
5e:19:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org