Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ai5-QGJ_RbHIgXro1m7sH9uQAzw.roa
File: Ai5-QGJ_RbHIgXro1m7sH9uQAzw.roa (raw, json)
Hash identifier: YRyc1Sa7yAhCWNii0HLryJx2HUlCn46ze3NsVGMBrUQ=
Subject key identifier: 02:2E:7E:40:62:7F:45:B1:C8:81:7A:E8:D6:6E:EC:1F:DB:90:03:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2847
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ai5-QGJ_RbHIgXro1m7sH9uQAzw.roa
Signing time: Fri 01 Sep 2023 10:05:09 +0000
ROA not before: Fri 01 Sep 2023 10:05:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10311 (0x2847)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=022E7E40627F45B1C8817AE8D66EEC1FDB90033C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:71:01:41:78:d8:6d:7b:62:9e:f9:d9:c2:
d5:cd:5c:e1:51:e6:ea:83:bc:56:7b:f6:6d:e3:a9:
de:6d:34:da:97:45:e5:e4:35:90:d9:54:24:db:2c:
9f:c7:8d:e5:9c:67:7c:6d:b5:b3:00:9c:56:e7:74:
7d:c6:cd:b5:f1:7e:0b:d8:27:ad:33:e6:18:a6:9d:
b1:f7:9b:b8:0c:45:c0:9e:be:b9:86:eb:bf:20:07:
5b:3e:07:ce:01:8b:2f:7d:97:e8:f1:19:f7:48:f5:
97:1f:76:13:9f:bb:3e:cd:ce:e1:62:ea:ff:09:52:
63:90:14:21:8f:3d:15:b7:9d:fe:78:19:e3:af:f3:
2a:e8:b7:c5:aa:cd:c7:f0:51:11:37:66:e8:8a:87:
13:97:6d:a4:d5:79:c6:19:c6:c1:5d:24:2a:2e:4a:
f2:f7:df:76:8f:f3:5e:2f:5e:db:ae:5b:7e:f1:9f:
9d:40:b1:3a:f4:0b:5f:41:60:40:aa:2f:e5:a2:42:
5b:a8:fe:66:3b:c2:5a:ae:12:f5:db:f4:1f:3d:2a:
e7:f7:52:cf:8e:1f:07:03:73:12:29:c8:18:81:99:
ac:f2:b7:68:46:76:17:bd:dd:9e:13:2b:05:60:16:
1e:ac:23:4f:35:db:f4:fa:65:7c:0f:86:27:61:20:
3a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2E:7E:40:62:7F:45:B1:C8:81:7A:E8:D6:6E:EC:1F:DB:90:03:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ai5-QGJ_RbHIgXro1m7sH9uQAzw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.48.0/21
Signature Algorithm: sha256WithRSAEncryption
23:e4:57:df:90:da:0c:60:b7:df:bc:c1:cd:df:8a:b3:14:be:
1f:74:9a:47:7f:4f:4b:8e:0d:f5:c0:62:dd:c1:9d:24:07:62:
f6:9f:90:09:8f:d6:b7:3f:61:e2:b4:e2:d9:53:3f:6a:1d:b2:
b6:ac:f4:e9:8f:40:8b:f6:b2:2d:03:4c:45:a8:ab:1b:19:47:
f2:21:37:e6:b7:30:97:56:1a:50:39:76:94:ea:61:5f:59:99:
0a:60:5d:13:5b:e7:ca:db:b4:2a:14:ba:b8:e8:40:62:c9:6b:
2d:f2:c0:95:cf:b5:ca:04:a5:0f:3b:9e:6a:39:89:76:85:dc:
96:61:70:32:67:73:94:f8:dd:63:cd:e0:cc:f8:af:4c:6d:8c:
27:97:7e:c5:96:2d:09:3b:9c:57:05:d7:3d:f3:a2:6d:67:e6:
60:6d:5d:26:f4:d9:d3:ed:1c:f7:fd:e0:9c:69:d7:89:4c:73:
9a:c4:dd:f7:b4:b6:d7:6c:62:eb:d9:53:e9:69:a6:30:f6:0f:
62:b0:e3:25:84:e5:dd:60:f4:b1:d6:4d:00:a3:fd:ef:68:47:
b9:07:89:6b:6a:47:d6:31:5e:61:51:2a:89:e9:3c:a4:aa:0f:
25:d3:03:eb:f3:27:48:c1:25:d2:15:59:69:b1:88:ee:b1:52:
c1:50:93:a3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDAyMkU3RTQwNjI3RjQ1
QjFDODgxN0FFOEQ2NkVFQzFGREI5MDAzM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1bXEBQXjYbXtinvnZwtXNXOFR5uqDvFZ79m3jqd5tNNqXReXk
NZDZVCTbLJ/HjeWcZ3xttbMAnFbndH3GzbXxfgvYJ60z5himnbH3m7gMRcCevrmG
678gB1s+B84Biy99l+jxGfdI9ZcfdhOfuz7NzuFi6v8JUmOQFCGPPRW3nf54GeOv
8yrot8WqzcfwURE3ZuiKhxOXbaTVecYZxsFdJCouSvL333aP814vXtuuW37xn51A
sTr0C19BYECqL+WiQluo/mY7wlquEvXb9B89Kuf3Us+OHwcDcxIpyBiBmazyt2hG
dhe93Z4TKwVgFh6sI0812/T6ZXwPhidhIDq9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUAi5+QGJ/RbHIgXro1m7sH9uQAzwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0FpNS1RR0pfUmJISWdYcm8x
bTdzSDl1UUF6dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wTAwDQYJKoZIhvcNAQELBQADggEBACPkV9+Q2gxgt9+8wc3firMUvh90mkd/T0uO
DfXAYt3BnSQHYvafkAmP1rc/YeK04tlTP2odsras9OmPQIv2si0DTEWoqxsZR/Ih
N+a3MJdWGlA5dpTqYV9ZmQpgXRNb58rbtCoUurjoQGLJay3ywJXPtcoEpQ87nmo5
iXaF3JZhcDJnc5T43WPN4Mz4r0xtjCeXfsWWLQk7nFcF1z3zom1n5mBtXSb02dPt
HPf94Jxp14lMc5rE3fe0ttdsYuvZU+lppjD2D2Kw4yWE5d1g9LHWTQCj/e9oR7kH
iWtqR9YxXmFRKonpPKSqDyXTA+vzJ0jBJdIVWWmxiO6xUsFQk6M=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org