Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BqxXtAbh82fFmtpfWVLgC-7F8rc.roa
File: BqxXtAbh82fFmtpfWVLgC-7F8rc.roa (raw, json)
Hash identifier: sAOfW/C3k7XYDxfp4VyRdsxvSY8GJ7iZPhUp1KoRUPc=
Subject key identifier: 06:AC:57:B4:06:E1:F3:67:C5:9A:DA:5F:59:52:E0:0B:EE:C5:F2:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A82
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BqxXtAbh82fFmtpfWVLgC-7F8rc.roa
Signing time: Fri 01 Sep 2023 10:07:59 +0000
ROA not before: Fri 01 Sep 2023 10:07:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10882 (0x2a82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=06AC57B406E1F367C59ADA5F5952E00BEEC5F2B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:35:29:3e:54:3a:45:7a:3d:00:f9:a2:78:83:
26:1c:24:4f:5f:58:e5:77:02:71:8e:01:2b:eb:1f:
e3:43:b9:f5:e0:17:29:f4:2e:af:7a:2a:c1:c6:2c:
9c:cf:f6:40:53:e2:49:ea:00:89:b8:23:23:8d:9a:
7e:00:56:04:8e:62:28:74:85:24:4c:8f:51:98:97:
03:b0:c5:17:25:ae:f7:99:8d:df:a6:64:a0:8f:62:
fb:b0:6f:30:4d:fe:a1:5c:fb:6e:aa:28:96:35:50:
0f:bf:43:d7:e7:5c:a5:57:6e:c8:66:55:9c:2d:10:
e2:39:cf:62:03:7b:4c:dc:7d:bb:e2:b2:d4:b9:ed:
9c:af:dd:8f:32:70:de:64:07:09:a5:de:80:11:cd:
f9:9f:d5:1a:a0:e3:2f:fc:7d:04:64:bf:e7:67:25:
fa:7f:7f:2f:85:cd:0f:f2:3c:1a:0c:37:e6:59:88:
96:44:ef:13:c2:ad:41:4e:94:f3:a8:d9:f3:a2:bc:
02:46:f1:a5:08:fc:0b:b7:c2:bf:68:89:ae:d7:55:
17:68:9e:77:e5:a9:2e:36:5f:c4:1e:d9:f4:ee:6d:
c7:93:ca:50:6e:76:8f:8b:7f:3b:65:4d:19:6c:4f:
e2:5b:b5:7b:88:90:48:ee:02:a5:46:82:69:a6:a4:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AC:57:B4:06:E1:F3:67:C5:9A:DA:5F:59:52:E0:0B:EE:C5:F2:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BqxXtAbh82fFmtpfWVLgC-7F8rc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d9:3d:2a:3c:62:7c:d3:9a:e8:a7:93:4c:99:8e:f4:5a:ba:
ba:eb:f9:44:ba:2d:2c:ff:87:64:6a:6b:3a:ea:2a:eb:4d:f4:
6e:19:ec:f7:11:ac:ef:28:5f:e1:bf:46:4b:0f:64:98:19:84:
62:59:34:ae:8d:c9:9e:bf:52:5f:02:ef:ca:00:6c:87:f4:01:
f2:1c:9d:93:46:60:e4:77:fc:c9:3b:fc:85:ff:b1:4f:44:c8:
06:f2:d6:6f:c6:e9:4a:55:94:a3:c2:ae:78:3e:7f:00:f0:08:
3e:bb:ef:3a:75:ee:93:01:03:64:48:2f:7e:e6:c4:94:a7:39:
f4:c8:e8:6f:d4:a7:61:fa:96:b5:82:54:67:37:e5:88:63:60:
3d:c1:77:83:11:73:32:b5:98:db:49:0c:ca:7d:7c:df:73:a7:
d9:89:3e:67:40:84:53:71:65:8c:a3:89:a5:f6:b3:26:87:92:
3f:7e:74:db:fd:a9:c7:d6:91:85:ad:3c:99:c3:99:a1:19:92:
10:87:22:68:79:1b:ef:6e:8e:de:31:90:cc:73:b8:ca:06:ad:
18:12:eb:67:1d:91:cd:14:e2:69:bc:34:08:b4:dd:ff:67:8a:
4c:fa:43:00:2d:47:8f:8c:c3:28:7c:fb:56:36:aa:3a:9e:35:
c3:7d:1b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org