Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9L0L58j9yP7Ay07IUvdJm39CpXM.roa
File: 9L0L58j9yP7Ay07IUvdJm39CpXM.roa (raw, json)
Hash identifier: u+th5/vB/0cEKpbqSoPbBTCQKptQi3tJcKJbNzCxIRk=
Subject key identifier: F4:BD:0B:E7:C8:FD:C8:FE:C0:CB:4E:C8:52:F7:49:9B:7F:42:A5:73
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29B9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9L0L58j9yP7Ay07IUvdJm39CpXM.roa
Signing time: Fri 01 Sep 2023 10:06:59 +0000
ROA not before: Fri 01 Sep 2023 10:06:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10681 (0x29b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F4BD0BE7C8FDC8FEC0CB4EC852F7499B7F42A573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:4f:d1:3b:34:8c:8f:ee:7f:a0:d6:de:8f:
c6:cf:d5:83:b6:8a:d8:b1:32:4e:84:64:55:32:d3:
e6:dd:78:5e:4e:cb:00:21:58:91:a6:c2:4d:f2:2b:
34:8b:3a:40:93:35:ed:5a:da:b2:79:d8:57:ca:20:
45:09:ca:9a:50:62:d8:42:0f:55:eb:ec:c3:82:75:
ee:64:67:24:9f:69:3d:a1:a7:b6:86:dc:0b:eb:5a:
ab:43:3a:18:92:1c:b2:ee:d4:08:e5:24:10:cb:a2:
80:df:a9:07:23:e0:b4:a9:67:d1:2c:22:44:32:c1:
e0:29:80:11:97:7a:c6:c0:14:86:4c:f0:bb:b5:ae:
a6:66:02:0e:e1:db:cc:b6:de:97:60:49:56:7a:02:
a4:ad:bf:1e:09:9d:e1:a2:9c:fe:96:a0:10:f1:d1:
6f:a4:fe:f6:85:15:7c:e8:1e:cf:c3:97:3b:ec:4b:
05:20:9b:ee:4b:60:46:0d:b4:70:4e:63:2a:1e:a7:
a7:05:cb:36:c4:12:ba:2a:bf:dc:f0:d3:83:b0:c6:
d4:7b:b5:e3:e3:f7:ce:b2:48:a3:09:17:c8:ef:4b:
7f:d4:c9:1d:bc:bb:13:76:a1:13:7b:33:c1:92:4e:
c6:c5:53:90:d7:92:c6:69:60:fd:e3:b4:88:80:95:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:0B:E7:C8:FD:C8:FE:C0:CB:4E:C8:52:F7:49:9B:7F:42:A5:73
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/9L0L58j9yP7Ay07IUvdJm39CpXM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.232.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:e1:0a:9d:7e:26:c9:da:41:c0:28:8a:20:20:d3:a2:07:30:
9e:aa:d6:9f:cf:75:fe:45:54:5c:c3:72:b2:0c:c4:8d:61:c9:
1e:96:f4:11:00:f3:d5:37:39:cb:2c:d2:cd:ef:2d:3c:67:dc:
27:fc:e1:25:94:34:2b:05:9a:48:16:03:cd:7f:aa:ac:ae:17:
37:87:61:0a:ab:a4:73:1e:bd:6a:69:32:57:11:dc:d3:90:bf:
62:47:c7:5a:89:c6:d8:be:7c:05:9d:f4:ed:6b:58:22:57:94:
98:b7:1e:00:8f:65:29:c6:84:12:32:98:c9:41:be:83:20:1e:
35:3a:12:a6:cd:22:e8:13:01:2c:30:95:cf:6b:83:58:32:d2:
30:7d:ea:ec:5f:7f:a3:43:76:ae:10:87:5e:b2:c5:d3:3b:9d:
5c:d4:3d:2a:44:2b:53:57:a9:f7:be:e7:31:bb:22:0b:21:c9:
e6:97:b4:15:2e:10:30:ad:99:65:2a:ef:55:9e:92:1d:ca:43:
f1:1f:aa:95:aa:a4:b8:fa:33:57:ca:cc:b0:c7:2d:79:ee:e6:
6c:b1:aa:e2:a4:8a:fd:fb:86:c0:65:44:bb:4a:9f:91:bc:25:
51:8c:6a:a9:dc:5a:f8:c3:56:22:ec:63:d1:4a:93:40:2b:4d:
da:b3:6e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org