Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7mbBcke6DYHeOQXn2CSMOIQnXqs.roa
File: 7mbBcke6DYHeOQXn2CSMOIQnXqs.roa (raw, json)
Hash identifier: E8oKqGS2+GFjq6abudDJnTdxnp/YACnChF7ng/OejbE=
Subject key identifier: EE:66:C1:72:47:BA:0D:81:DE:39:05:E7:D8:24:8C:38:84:27:5E:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AC6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7mbBcke6DYHeOQXn2CSMOIQnXqs.roa
Signing time: Fri 01 Sep 2023 10:08:16 +0000
ROA not before: Fri 01 Sep 2023 10:08:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10950 (0x2ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EE66C17247BA0D81DE3905E7D8248C3884275EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e4:e0:55:7c:d9:a8:35:73:6c:34:1f:ad:44:
c2:71:66:2d:b2:ed:51:53:cf:7b:84:f7:a2:45:a4:
e4:b8:41:87:5f:de:f4:ca:56:a8:28:b5:a2:63:e1:
70:2e:3d:5f:82:15:ae:f7:1d:7c:26:de:d2:d4:39:
8e:00:20:4e:45:16:59:3f:7b:d8:c9:c1:80:25:58:
59:1d:d6:dc:5e:64:d2:3f:2e:d3:ef:9c:d0:52:7c:
4b:07:f3:9a:9b:03:e1:70:ed:e6:ce:31:f8:b2:97:
7e:bb:96:db:19:b3:69:a1:00:97:b3:ef:99:26:1d:
31:74:cb:95:f8:8d:9b:32:59:9f:8a:14:58:33:bf:
42:6b:3d:c3:f0:b5:19:3c:8f:3c:2d:85:90:4b:dd:
9a:50:01:7b:7e:20:b6:41:8b:f5:0c:3c:6c:61:59:
58:8f:de:48:ef:3d:1d:c1:97:8b:25:b0:44:80:a7:
f5:d0:49:2c:d5:c2:0b:94:89:da:f9:b4:f4:8e:c4:
e7:28:97:10:19:b9:d8:b0:92:0f:b6:e5:81:00:71:
9b:c2:8b:8a:51:b3:f8:81:a2:f6:83:6d:9a:56:4c:
49:b9:f8:f0:91:b7:94:9d:75:12:85:12:b9:b9:f4:
5d:9d:e2:85:12:cd:4c:c6:30:a0:ae:6e:5f:56:80:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:66:C1:72:47:BA:0D:81:DE:39:05:E7:D8:24:8C:38:84:27:5E:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7mbBcke6DYHeOQXn2CSMOIQnXqs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.12.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:26:82:87:22:5e:cd:3b:17:74:03:fc:d0:2a:df:35:cf:49:
5b:71:8a:b3:04:a1:66:8d:ae:fe:7d:db:f5:bc:03:b4:bc:7d:
f5:37:52:01:3d:b6:24:81:3d:f8:45:ce:17:7d:b0:a8:d6:2f:
e5:d0:17:43:00:54:fb:b2:c3:44:fe:2e:e0:7b:29:86:29:02:
54:9b:f6:0d:1e:70:8c:29:60:ab:cd:ac:15:da:08:a6:9f:9f:
85:6f:01:9e:3e:08:ba:4b:e8:62:06:f1:83:de:28:50:63:e1:
52:56:30:21:50:9b:14:21:ec:e8:ad:b4:37:c2:0e:29:07:49:
b2:0f:af:24:e7:14:d0:d3:b2:22:46:b5:e9:ec:32:61:58:62:
5f:10:cb:b3:94:7b:d6:94:19:11:bd:8c:d3:b1:bc:1b:ea:14:
d9:bd:33:81:3e:c1:1c:f7:05:b4:66:dc:fd:3e:93:fb:8f:08:
a1:44:a8:31:2e:7d:9b:c7:b5:54:27:dd:01:41:ec:9f:ff:bb:
b8:22:16:ce:0e:37:1f:32:c4:1c:43:86:cc:23:be:71:f5:12:
29:89:97:bb:85:73:76:d7:53:0c:98:64:15:fb:e2:92:c0:1a:
cb:90:e0:72:2c:ad:94:da:ff:50:f1:a3:03:cf:50:c1:2b:56:
a6:41:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org