Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C6-g2lSJMnEfGojmEqh-OsVnZ4c.roa
File: C6-g2lSJMnEfGojmEqh-OsVnZ4c.roa (raw, json)
Hash identifier: oFDqWHOGhPeHbTLt1aE0TYD9O0z15W4SolQ7PXiRmRQ=
Subject key identifier: 0B:AF:A0:DA:54:89:32:71:1F:1A:88:E6:12:A8:7E:3A:C5:67:67:87
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2ADC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C6-g2lSJMnEfGojmEqh-OsVnZ4c.roa
Signing time: Fri 01 Sep 2023 10:08:22 +0000
ROA not before: Fri 01 Sep 2023 10:08:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10972 (0x2adc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0BAFA0DA548932711F1A88E612A87E3AC5676787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ab:ae:85:f8:19:d7:6a:15:d7:82:a3:a6:cf:
00:dc:c6:ca:1e:5b:32:bf:1c:78:c6:49:39:70:d4:
07:e0:0b:11:8e:39:fa:2f:63:2b:76:d7:ea:35:45:
e2:43:d6:3c:47:03:7d:43:81:92:cb:a5:a9:8e:86:
01:6e:55:35:46:54:81:5d:9e:2f:72:87:24:53:4d:
d2:95:c4:54:0f:14:69:3f:57:0f:70:a6:93:7a:2e:
76:6f:65:f0:52:fe:f7:8f:17:0e:02:6e:1d:30:4a:
a1:3c:a0:e7:f4:a6:f8:e9:76:1e:d6:ff:3f:56:11:
5b:26:4f:9b:f1:73:81:12:34:38:30:52:62:70:79:
58:f3:68:44:22:14:1c:c8:47:a8:fc:d1:33:5d:53:
53:0e:89:ed:d0:bf:b3:0e:25:f3:41:89:22:29:48:
d3:50:28:c3:f5:75:16:e3:77:7c:f9:67:f1:01:7b:
88:5b:d4:ae:8c:63:95:cb:3e:c5:42:9c:81:27:94:
2b:71:b2:13:75:11:b5:65:01:a0:8c:fc:cd:82:a1:
9b:96:c1:a2:42:44:20:81:66:10:c1:a6:64:3a:e8:
4b:82:8e:12:d3:15:20:af:8a:7c:65:f7:6d:05:58:
a8:2f:18:fe:fd:13:0c:f4:c5:6c:93:8b:62:cb:1b:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AF:A0:DA:54:89:32:71:1F:1A:88:E6:12:A8:7E:3A:C5:67:67:87
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C6-g2lSJMnEfGojmEqh-OsVnZ4c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.192.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:75:e8:64:a4:f0:3f:28:59:85:36:ea:5f:f0:7f:c5:c6:b9:
c0:52:6d:b6:9d:eb:2a:c0:78:9c:a2:03:3e:94:64:e9:40:ea:
3f:ee:76:c5:78:15:a6:2a:f9:f4:51:d7:95:a7:b4:f9:a2:29:
64:0b:ee:87:08:7d:a2:23:16:e8:71:58:35:9e:b1:11:19:fc:
61:f4:f5:ab:54:26:66:29:3c:9c:c4:56:ab:b9:29:43:a0:36:
db:62:a3:e5:84:f2:c6:fa:b8:80:af:9b:00:43:b3:99:6c:2d:
6a:43:d5:93:8b:de:74:48:bc:36:a3:ee:28:71:db:2c:34:7b:
64:aa:69:ee:b1:b8:91:29:ba:d5:19:e3:a2:70:ae:c0:7e:e9:
db:18:92:2e:ea:7a:9f:88:18:a9:e1:22:24:d1:9d:1e:2b:ac:
27:f2:17:5e:02:ca:29:23:ca:b5:15:38:6f:3b:3b:31:a5:ee:
d7:de:07:e9:27:54:90:bc:e8:aa:fe:61:dd:e8:18:bc:6a:0a:
94:aa:25:e9:b1:77:e7:d4:a6:ad:dc:fd:41:f6:ee:00:fa:c4:
93:14:a9:f0:08:43:d8:9e:87:5c:a8:e6:b6:b0:5a:41:a9:fd:
fe:f5:f1:f6:d5:b4:97:c3:0b:63:a5:39:79:c2:48:82:cb:8d:
bf:46:78:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org