Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DImowtz2Q2DUgq6ssCt8PiKamkA.roa
File: DImowtz2Q2DUgq6ssCt8PiKamkA.roa (raw, json)
Hash identifier: 33EcL8dnpvpzptgJFfqtbn2Al+VB+flmv+3Qxj9zZS8=
Subject key identifier: 0C:89:A8:C2:DC:F6:43:60:D4:82:AE:AC:B0:2B:7C:3E:22:9A:9A:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A43
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DImowtz2Q2DUgq6ssCt8PiKamkA.roa
Signing time: Fri 01 Sep 2023 10:07:41 +0000
ROA not before: Fri 01 Sep 2023 10:07:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10819 (0x2a43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0C89A8C2DCF64360D482AEACB02B7C3E229A9A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:5e:00:a7:37:24:fe:36:c0:6f:42:35:dd:
73:dc:c4:e5:2f:b7:70:d5:16:5f:c9:ee:26:3e:73:
4c:7a:2d:3f:5f:0f:c1:e3:e5:35:a9:83:e2:9c:22:
16:52:e8:77:37:c0:6e:d5:dd:c6:b7:78:5b:b7:39:
f7:95:61:48:fa:08:1b:c2:19:25:f4:f3:7f:34:46:
18:4a:9d:ee:07:49:79:00:21:ed:76:8e:30:72:f5:
fa:79:94:c7:c1:23:a3:f6:56:82:34:57:b7:2d:dc:
80:ec:af:71:ce:61:ec:96:54:98:de:5c:98:22:6c:
ec:b9:bb:d1:ec:4a:1f:4b:24:1c:2c:bf:1b:80:7d:
4a:5c:b9:bc:44:19:46:2b:c2:b6:4a:4e:3f:e6:da:
7b:c9:82:9e:f7:cb:1f:97:f5:5b:5c:a5:48:70:6e:
e8:6e:e6:03:b2:50:e0:b0:43:9b:6c:09:41:18:24:
98:48:1e:99:da:8e:de:3f:2a:6a:e2:31:ea:e1:ee:
65:4b:98:4b:5f:6b:90:a0:7c:e3:48:d8:23:ce:81:
6e:8e:28:74:58:b6:94:3d:38:d5:7f:95:ab:cf:ff:
a9:2c:e3:29:e1:a7:7f:d8:61:d7:e1:5c:bf:52:2b:
c9:c7:6e:7e:3a:ec:0b:91:10:32:44:61:31:46:c1:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:89:A8:C2:DC:F6:43:60:D4:82:AE:AC:B0:2B:7C:3E:22:9A:9A:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DImowtz2Q2DUgq6ssCt8PiKamkA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/14
Signature Algorithm: sha256WithRSAEncryption
66:e1:29:b7:16:1d:b6:35:d3:38:45:4a:2a:6e:36:72:0e:b4:
06:a2:dd:d8:46:73:68:14:dc:de:3b:fb:a3:23:5a:8a:f4:3d:
4b:2d:b6:85:f7:db:f4:0b:07:9c:69:c2:46:9e:02:1c:25:9f:
60:f0:bf:a1:b1:a1:d9:d9:bd:6a:a0:36:d3:63:97:0f:e6:4a:
4e:61:4b:28:f1:8f:6d:40:3d:5d:7c:d8:d0:d4:f6:d8:da:b5:
28:30:01:63:b9:d5:ea:98:7a:ce:d6:77:96:8c:b7:49:70:cd:
b7:fe:b4:e1:20:2a:36:53:77:31:22:8b:af:b8:f5:1f:98:2e:
bb:7c:31:e5:d6:19:d7:db:95:06:f2:a6:07:4f:2a:58:8a:81:
67:90:69:de:b3:3b:31:54:e4:ed:b4:cb:81:f6:6a:34:84:7a:
cf:97:67:d7:51:72:1e:6e:c7:3d:3f:54:a1:d4:9c:63:20:ac:
88:f0:70:d9:eb:60:2a:d4:e5:80:27:68:23:e5:83:e9:90:bb:
da:81:c9:1c:dd:fd:c7:67:d9:04:fc:2f:2c:44:9c:2e:00:97:
77:58:34:e0:e5:3f:d3:a9:5e:6b:7d:9a:43:bd:53:d9:2a:68:
ef:f2:8c:bc:3c:33:d4:f5:2a:8d:ee:f1:e8:29:9e:c6:87:b5:
24:64:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org