Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7qKo76kRopxTo3SPiCpXXtwUNrU.roa
File: 7qKo76kRopxTo3SPiCpXXtwUNrU.roa (raw, json)
Hash identifier: ozrkytyjk2GhyarGZSdvvNHnfiPXvloJ1zE1bI8s72E=
Subject key identifier: EE:A2:A8:EF:A9:11:A2:9C:53:A3:74:8F:88:2A:57:5E:DC:14:36:B5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AD5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7qKo76kRopxTo3SPiCpXXtwUNrU.roa
Signing time: Fri 01 Sep 2023 10:08:19 +0000
ROA not before: Fri 01 Sep 2023 10:08:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.193.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10965 (0x2ad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=EEA2A8EFA911A29C53A3748F882A575EDC1436B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:62:e9:22:aa:c0:8e:f8:8b:19:44:d3:c1:
a6:1e:47:6b:f4:c4:c7:e1:07:9a:be:47:7e:d4:0d:
b4:66:e8:2e:70:e2:1c:f4:58:c4:e8:c6:5e:30:85:
98:2b:47:ab:62:14:85:fe:5d:d3:2a:b0:e4:4d:38:
79:89:1f:7f:a2:df:1f:6f:b7:c7:fb:88:4a:2b:72:
70:42:63:94:6d:aa:05:20:5e:55:6b:b3:29:c8:ca:
41:df:2a:01:2a:f8:cd:6b:56:70:f3:d6:76:b1:59:
05:40:3e:2a:79:1c:9f:42:2c:48:9b:87:ad:e0:cb:
90:ee:0d:47:65:e6:d3:c5:19:66:d0:89:b2:60:0c:
0e:11:8d:17:1b:ea:2e:6a:7d:42:8d:a1:c7:50:53:
49:d3:c8:78:a2:f1:2a:a2:02:49:f9:ab:23:60:c0:
10:1e:ca:7e:de:43:9f:54:f0:23:82:f1:1e:8f:7b:
01:92:73:5a:ec:42:e8:1a:32:14:35:ef:72:16:04:
db:67:5c:28:04:e2:c7:75:fc:4a:94:21:51:84:ce:
aa:77:ed:dc:57:0c:41:e7:4d:bd:f2:40:42:99:a0:
7a:3c:82:d0:98:92:aa:80:70:e4:a4:e1:d5:f8:3e:
e7:88:66:27:d9:de:f6:71:51:2c:d9:f7:5d:60:22:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:A8:EF:A9:11:A2:9C:53:A3:74:8F:88:2A:57:5E:DC:14:36:B5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7qKo76kRopxTo3SPiCpXXtwUNrU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.218.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:2b:aa:62:51:ae:a9:22:70:53:0d:e4:0c:57:e6:e0:e7:18:
37:65:84:b5:d5:c9:dd:58:ea:63:8d:9b:1f:fa:18:eb:ee:45:
7d:c1:d5:24:82:03:ee:ab:11:05:96:83:41:0f:1d:fc:0c:b0:
7f:72:b7:ba:39:89:33:ec:2d:b3:90:52:3e:1f:fd:95:1e:d0:
fd:bd:52:a1:53:2e:74:c9:78:c7:e1:69:bd:38:c7:7d:fc:0c:
25:06:cc:9c:3d:bb:60:ef:a5:82:16:36:59:01:d7:bd:be:62:
3a:f3:c0:3c:a6:8d:e6:da:4e:76:ac:b5:8c:90:a1:04:b6:1f:
ae:63:49:41:f0:cf:02:a8:b6:b5:18:98:09:42:e6:f2:e7:c0:
86:70:b9:7d:6c:c5:22:50:3a:97:5d:9b:99:16:c4:ef:a8:77:
2b:9b:9c:99:09:9c:8e:62:89:52:22:24:3b:d4:38:79:58:2b:
be:ef:39:93:2a:1d:a0:81:89:85:fc:98:1d:0d:1a:28:1e:5f:
db:03:2a:58:b9:4c:e8:ab:a6:cf:4d:d0:79:87:6c:32:c5:d4:
2c:dd:90:5b:68:7b:a7:2b:4f:01:fe:65:a0:4e:44:bb:17:fc:
19:1a:05:e2:2d:03:00:a0:3b:49:98:8e:95:50:fc:e2:3a:6b:
97:76:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org