Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7f2MXhODukWsV4onzroxy2rYUn4.roa
File: 7f2MXhODukWsV4onzroxy2rYUn4.roa (raw, json)
Hash identifier: i3QZFEtm/9bjBlApsU/gH4OUP7ysC/QAbVPRwwPf+Ok=
Subject key identifier: ED:FD:8C:5E:13:83:BA:45:AC:57:8A:27:CE:BA:31:CB:6A:D8:52:7E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 290B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7f2MXhODukWsV4onzroxy2rYUn4.roa
Signing time: Fri 01 Sep 2023 10:06:05 +0000
ROA not before: Fri 01 Sep 2023 10:06:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.195.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10507 (0x290b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EDFD8C5E1383BA45AC578A27CEBA31CB6AD8527E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:35:de:87:03:07:a5:bf:02:fc:40:1f:4d:
3b:02:2a:96:77:4b:6b:78:26:18:4a:9c:4b:00:f5:
cc:2b:06:1c:c0:f2:18:65:5b:f8:35:a3:d4:d5:18:
8f:5b:e8:17:10:96:81:3a:5e:33:95:df:a7:ff:eb:
a5:3d:1d:02:24:82:a4:8c:82:d9:88:3d:95:66:f9:
b7:80:a4:d7:1b:89:20:ce:44:e6:8c:a1:0a:ab:57:
32:27:05:c6:a8:db:1e:ba:18:15:02:6b:08:b6:6a:
87:d0:ac:d8:d8:e9:54:90:ae:e9:ff:dd:f9:24:c1:
7f:cc:b2:c4:35:0c:8f:d3:82:8a:2b:4c:a2:f7:6a:
e8:96:14:23:84:c4:7a:8e:a6:1b:38:32:8d:ec:d3:
ad:66:16:e6:76:ed:b2:ee:55:d9:82:0b:3e:34:8e:
55:8d:e3:3a:4f:ea:7b:8f:79:79:7b:31:be:f7:17:
28:ef:4f:29:77:74:9d:41:21:75:bf:89:d3:92:73:
cb:27:41:56:3c:eb:8d:4d:56:9a:f2:9d:b1:9a:58:
17:2f:58:6c:ad:35:e0:a3:f7:33:82:21:ab:cb:b4:
1f:20:8f:77:ef:71:bf:a1:c8:5a:98:35:fd:69:85:
73:89:d0:42:be:a4:45:7f:d7:34:25:73:0a:7b:a4:
e3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:FD:8C:5E:13:83:BA:45:AC:57:8A:27:CE:BA:31:CB:6A:D8:52:7E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7f2MXhODukWsV4onzroxy2rYUn4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4c:64:c8:87:14:d3:2a:f3:7d:54:ab:86:69:29:6b:e1:45:79:
42:04:f8:e2:39:d2:8d:08:92:52:6e:5b:f5:97:1b:e4:a3:cf:
13:02:81:b4:84:38:00:43:37:4a:bc:fe:d8:04:2c:7f:75:f7:
e7:69:79:6e:fc:32:1e:1a:2a:b1:f1:68:40:c7:87:68:86:56:
d4:2a:7f:60:ec:cf:27:63:15:0e:e4:63:7a:e2:09:05:80:62:
17:99:85:4b:fd:20:fc:a7:e1:a2:5d:62:2f:da:e2:67:59:5d:
fa:82:ba:c5:1b:3c:ff:07:cb:5d:b9:a3:1f:59:ad:96:69:39:
de:57:7e:bd:87:9e:aa:5a:22:aa:59:be:59:69:f1:e2:72:e9:
2d:cd:47:7c:3e:33:87:9e:d1:ca:88:72:dc:3c:38:4e:64:b9:
1f:4a:8c:88:dc:b4:db:d1:f0:d3:39:aa:db:89:3f:a9:3d:4a:
5a:6f:c6:33:f8:fd:65:c6:cb:88:58:05:ec:0f:66:3e:ff:99:
d2:e7:d1:70:55:1d:9d:0c:02:55:b0:3d:e6:8f:10:44:8f:e9:
53:04:11:b7:fd:b6:95:ac:1a:a0:8f:56:ab:37:db:98:25:21:
15:50:d3:ec:81:36:71:47:67:9e:56:55:fb:29:38:32:0c:97:
20:46:eb:69
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKQswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEVERkQ4QzVFMTM4M0JB
NDVBQzU3OEEyN0NFQkEzMUNCNkFEODUyN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfjDXehwMHpb8C/EAfTTsCKpZ3S2t4JhhKnEsA9cwrBhzA8hhl
W/g1o9TVGI9b6BcQloE6XjOV36f/66U9HQIkgqSMgtmIPZVm+beApNcbiSDOROaM
oQqrVzInBcao2x66GBUCawi2aofQrNjY6VSQrun/3fkkwX/MssQ1DI/TgoorTKL3
auiWFCOExHqOphs4Mo3s061mFuZ27bLuVdmCCz40jlWN4zpP6nuPeXl7Mb73Fyjv
Tyl3dJ1BIXW/idOSc8snQVY8641NVprynbGaWBcvWGytNeCj9zOCIavLtB8gj3fv
cb+hyFqYNf1phXOJ0EK+pEV/1zQlcwp7pOONAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7f2MXhODukWsV4onzroxy2rYUn4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdmMk1YaE9EdWtXc1Y0b256
cm94eTJyWVVuNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ7
w4AwDQYJKoZIhvcNAQELBQADggEBAExkyIcU0yrzfVSrhmkpa+FFeUIE+OI50o0I
klJuW/WXG+SjzxMCgbSEOABDN0q8/tgELH919+dpeW78Mh4aKrHxaEDHh2iGVtQq
f2DszydjFQ7kY3riCQWAYheZhUv9IPyn4aJdYi/a4mdZXfqCusUbPP8Hy125ox9Z
rZZpOd5Xfr2HnqpaIqpZvllp8eJy6S3NR3w+M4ee0cqIctw8OE5kuR9KjIjctNvR
8NM5qtuJP6k9SlpvxjP4/WXGy4hYBewPZj7/mdLn0XBVHZ0MAlWwPeaPEESP6VME
Ebf9tpWsGqCPVqs325glIRVQ0+yBNnFHZ55WVfspODIMlyBG62k=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org