Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BjQD9rP0FP2mnuEsXCJJ9rZp8BQ.roa
File: BjQD9rP0FP2mnuEsXCJJ9rZp8BQ.roa (raw, json)
Hash identifier: Q5fOfOIFAngyZfPm7YahmwNVpfMGrKCQJOJhWpOtYqU=
Subject key identifier: 06:34:03:F6:B3:F4:14:FD:A6:9E:E1:2C:5C:22:49:F6:B6:69:F0:14
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AFB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BjQD9rP0FP2mnuEsXCJJ9rZp8BQ.roa
Signing time: Fri 01 Sep 2023 10:08:31 +0000
ROA not before: Fri 01 Sep 2023 10:08:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.16.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11003 (0x2afb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=063403F6B3F414FDA69EE12C5C2249F6B669F014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a7:95:fc:dc:1e:91:64:e1:74:4c:9f:b0:af:
e2:05:9a:26:51:84:c4:9d:7a:83:83:81:69:41:1c:
a0:0d:9b:aa:4e:88:93:a8:73:ca:29:94:5b:27:08:
a7:6a:72:9f:40:7c:d5:6f:5e:ec:f1:a1:fd:a0:57:
a8:8e:f8:dd:e2:ca:6d:20:e1:28:1d:67:dc:76:f8:
4d:f5:25:76:6c:3e:35:ed:1a:bf:31:bc:4d:89:7f:
73:d7:84:b3:24:37:9b:11:c8:43:18:a0:5e:92:e5:
7f:98:03:89:c9:ed:14:3c:1d:5f:16:ce:7e:cb:85:
d3:18:79:d9:50:99:7f:29:b1:2a:51:71:62:e0:98:
9c:f1:76:ce:ce:33:0f:e0:e2:f8:33:f2:c5:c7:4a:
c6:21:1c:ec:5d:5e:48:a5:6f:c1:90:c1:e2:12:7d:
eb:ab:ad:e0:26:58:66:0f:33:a4:40:4a:6c:d0:be:
3e:e7:26:04:24:fa:0e:6f:11:73:c0:54:f3:76:62:
a6:9f:f4:a5:0b:3c:d7:d3:f1:16:d4:6b:b1:c1:9a:
69:d8:b5:ab:18:8a:a9:f1:70:77:47:d3:52:b9:20:
61:86:c0:10:b0:90:ed:e7:ee:4b:9b:c4:74:c5:25:
14:b5:d2:b9:28:6f:c2:05:30:52:22:8c:d6:d9:7a:
22:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:34:03:F6:B3:F4:14:FD:A6:9E:E1:2C:5C:22:49:F6:B6:69:F0:14
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BjQD9rP0FP2mnuEsXCJJ9rZp8BQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.16.0/20
Signature Algorithm: sha256WithRSAEncryption
47:b3:5d:a5:6f:7b:65:d0:84:73:11:e7:c1:17:29:58:82:e6:
5d:59:6d:26:f3:98:aa:71:c9:f8:0c:3f:f1:9d:08:95:29:25:
76:69:3a:3e:83:ef:c7:af:04:df:01:5b:05:f8:c2:0e:6c:8a:
41:16:c0:39:81:45:7d:f3:2c:14:5b:86:24:6c:a0:8b:da:8a:
b5:40:6b:f8:1a:fd:11:2d:53:db:46:31:51:96:6e:07:2d:da:
df:4b:6c:9d:0e:b7:a3:49:49:e2:d8:b5:44:4d:d1:f1:3c:bd:
86:95:b1:f3:6f:24:21:eb:0e:84:bb:75:33:98:83:59:90:b2:
45:23:29:3e:e6:20:e1:f8:ef:e7:f9:69:fe:b7:9c:65:ef:85:
e8:a6:29:f7:ca:42:ac:2b:87:0a:6b:da:a9:da:88:83:92:39:
40:5f:eb:75:60:87:d0:8e:10:c9:d3:26:d8:51:37:02:cf:3d:
a9:4b:71:f8:29:8f:16:95:21:ef:13:e7:d6:18:59:34:e7:b5:
e1:b6:6f:53:f5:55:92:db:a7:4e:74:12:63:35:c9:d5:95:3e:
6f:0a:db:53:1e:34:ac:fb:d1:d7:e2:c4:fc:9f:b4:eb:48:07:
22:6c:51:a7:9e:22:6b:82:1b:1a:a7:f6:87:56:a9:72:bd:7d:
39:c4:46:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org