Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DCgxND35xz0SVuATCdNzRw2TAX8.roa
File: DCgxND35xz0SVuATCdNzRw2TAX8.roa (raw, json)
Hash identifier: vFJXS7MufohatDuAax6/JxO5XknLGWmhs7jcvLOmJa8=
Subject key identifier: 0C:28:31:34:3D:F9:C7:3D:12:56:E0:13:09:D3:73:47:0D:93:01:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2897
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DCgxND35xz0SVuATCdNzRw2TAX8.roa
Signing time: Fri 01 Sep 2023 10:05:32 +0000
ROA not before: Fri 01 Sep 2023 10:05:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.237.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10391 (0x2897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0C2831343DF9C73D1256E01309D373470D93017F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:1d:9d:64:ad:19:76:80:42:9e:d3:ae:e1:
32:56:a3:c0:96:8b:1a:95:3c:96:bf:2a:2e:38:28:
8f:c0:c6:91:09:c8:96:68:b7:d7:2b:09:76:52:ee:
65:57:c1:77:58:20:42:b8:ba:30:39:ff:c7:75:5e:
e5:b0:b1:4c:f6:81:66:a0:13:2c:3b:f4:67:c6:90:
b4:d6:0e:c1:70:13:6c:3e:ba:21:e0:44:43:4f:8d:
2f:ca:4a:09:26:57:bc:cf:f2:fd:12:59:c4:66:8a:
d9:49:be:51:09:5f:18:41:e2:ad:9d:6b:52:ab:ae:
d1:62:d0:cc:a4:11:26:65:82:a9:e4:be:25:94:1a:
68:47:b9:2b:bc:89:47:5f:d5:31:44:68:99:cc:d9:
5e:6c:83:cb:11:41:07:ca:b0:7d:d9:a4:8e:97:a8:
48:d5:31:0a:b1:64:ae:19:b0:07:ad:83:68:83:bb:
fe:b3:1c:53:87:d2:ec:db:a6:01:72:57:19:30:e6:
f6:0b:2d:8a:5c:14:b3:49:6b:de:2b:65:9a:3e:da:
bd:c7:18:ee:a0:7d:e3:12:80:d0:97:f7:21:7c:a2:
fa:70:e7:91:48:24:3a:5f:7c:87:cd:4f:18:83:8e:
e6:32:ea:a5:c3:2f:21:0b:91:9f:ff:58:cc:dd:77:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:28:31:34:3D:F9:C7:3D:12:56:E0:13:09:D3:73:47:0D:93:01:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DCgxND35xz0SVuATCdNzRw2TAX8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.237.128/25
Signature Algorithm: sha256WithRSAEncryption
a1:be:6d:08:88:13:4e:30:a4:9c:7a:02:de:72:30:0b:4d:e9:
75:f8:f9:09:19:e7:c1:0a:bd:7f:ea:2a:01:56:79:5e:8e:f8:
80:33:c7:58:0a:92:13:f9:3e:4e:fe:52:60:cc:b4:ec:8f:87:
dc:8e:d7:92:5c:c4:fb:54:e5:75:a7:f1:9a:a9:4e:e1:fc:4d:
4c:c2:54:77:09:d6:4d:93:db:4a:88:1f:49:ce:9c:67:08:d8:
ba:4a:ed:eb:62:97:ad:ba:e9:0f:ca:53:f6:25:0c:57:98:e5:
c7:a2:18:7f:7c:5e:e7:f0:f2:9d:9d:a5:5d:a2:e4:c4:c5:9a:
44:a3:98:46:50:dc:d3:78:c0:19:1f:26:b9:1f:ee:71:37:12:
be:7b:72:ee:66:22:a5:d9:5d:d0:a0:ea:a2:b1:d8:43:e8:9e:
3b:06:98:56:2a:a1:84:eb:87:dd:4e:70:ca:9c:b0:41:a4:84:
b1:96:fa:62:56:bf:e8:95:47:df:87:3f:f3:a1:d8:09:fe:fe:
09:07:f2:94:32:77:19:bc:2e:59:3a:42:9b:78:6d:d8:f1:a4:
e3:90:4f:51:88:c3:9b:4c:f2:ce:ff:f1:05:71:01:1e:90:9d:
17:7a:b8:f9:c5:69:a8:24:33:8f:0b:97:fd:cf:0d:30:f4:70:
9c:3f:06:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org