Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CjBoB3P1LdK15Ctmm1fNhy5f0vM.roa
File: CjBoB3P1LdK15Ctmm1fNhy5f0vM.roa (raw, json)
Hash identifier: SsQ0p8GDcOBqckzxPZoq0EAy0XI0r2BuPJp6C4QQTNU=
Subject key identifier: 0A:30:68:07:73:F5:2D:D2:B5:E4:2B:66:9B:57:CD:87:2E:5F:D2:F3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27FE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CjBoB3P1LdK15Ctmm1fNhy5f0vM.roa
Signing time: Fri 01 Sep 2023 10:04:49 +0000
ROA not before: Fri 01 Sep 2023 10:04:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.104.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10238 (0x27fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0A30680773F52DD2B5E42B669B57CD872E5FD2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8e:ab:a1:a2:12:d1:41:bc:c0:2a:d3:e1:45:
12:5d:d8:13:53:a5:5b:ff:1b:cd:ec:10:5c:cb:f9:
86:6f:17:10:d8:c2:2a:93:4c:97:8d:0b:91:bd:e2:
ad:c9:63:7b:dd:c5:5a:48:df:01:9f:dd:cc:80:c0:
4f:c4:ea:12:8b:27:8a:ca:ce:7f:b0:0d:af:55:58:
4b:99:0c:8d:c5:1e:4f:86:d8:97:b7:30:b9:9e:26:
81:be:2e:ef:23:52:cb:f4:ea:c9:cf:14:0b:77:2c:
91:aa:78:b9:e4:e0:c8:76:57:dc:98:7e:6e:3a:e9:
46:9e:cd:34:a5:34:d2:3d:e2:c1:d1:18:9c:6e:0c:
85:e2:6e:17:61:b0:e4:6b:df:22:38:b8:87:0a:95:
a9:af:36:cc:83:e0:f5:05:72:3d:7e:84:8c:7b:c8:
29:d3:89:85:f2:05:b9:88:9d:04:6d:55:8e:6a:8f:
90:b4:f4:71:48:42:77:c6:fa:fc:cc:f1:be:a7:36:
46:b8:96:e3:32:3c:6e:ae:b0:c6:d6:db:59:a0:f5:
10:1b:1e:ef:19:f2:ce:d9:55:97:c5:77:c4:da:6b:
77:1f:0d:18:e7:de:82:78:fc:95:9f:09:e7:59:de:
a2:9d:ef:50:ff:72:ef:25:ed:14:c4:af:8f:35:26:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:30:68:07:73:F5:2D:D2:B5:E4:2B:66:9B:57:CD:87:2E:5F:D2:F3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/CjBoB3P1LdK15Ctmm1fNhy5f0vM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.104.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:82:20:86:13:fc:4d:3a:0a:06:82:65:e2:cf:74:17:6e:fc:
2f:53:d9:8a:25:de:c3:ee:a5:76:27:71:12:06:17:3c:1e:2d:
4b:fc:55:5a:09:81:e7:2c:38:31:11:83:83:d7:f9:cf:d7:8b:
44:96:14:3e:3a:67:2a:f1:ca:1b:bb:99:e2:34:5e:91:63:cf:
82:d4:d3:ec:91:3b:e8:8a:fe:02:0a:46:d6:4b:3d:84:4b:e0:
5b:0b:82:d4:8c:11:93:40:5a:4d:9e:b8:7e:5e:1c:f0:88:ad:
51:0e:87:5e:c2:08:b0:55:33:39:7e:63:0a:35:85:66:09:91:
de:50:53:68:d9:dd:5b:c7:73:0e:e6:c9:66:64:a7:a5:d9:2a:
1e:68:3a:72:45:1a:5b:41:4e:fe:00:07:28:83:7a:98:3b:08:
9f:53:39:17:04:ea:c7:bd:62:0a:54:ca:bc:d8:c3:c6:c9:09:
a4:c1:83:73:24:02:e6:f5:cb:d5:d8:de:5b:e9:74:cb:2b:55:
17:86:ed:93:5a:f6:d3:1c:ff:cb:d4:f0:36:cc:82:28:a9:91:
15:a1:bc:53:99:c7:6c:b6:31:35:89:01:2a:18:9f:d7:0d:32:
db:56:f0:16:45:64:d7:28:fb:a8:f0:c5:18:5f:d9:f4:dc:44:
cd:77:87:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org