Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWlBCDiQ4zWOdA4wVdWmuN454dg.roa
File: DWlBCDiQ4zWOdA4wVdWmuN454dg.roa (raw, json)
Hash identifier: pyq0mxn/pIoSS6qjmNCpxV3ylHAGE0MEJ6Zzmdz7lLo=
Subject key identifier: 0D:69:41:08:38:90:E3:35:8E:74:0E:30:55:D5:A6:B8:DE:39:E1:D8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AC9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWlBCDiQ4zWOdA4wVdWmuN454dg.roa
Signing time: Fri 01 Sep 2023 10:08:17 +0000
ROA not before: Fri 01 Sep 2023 10:08:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10953 (0x2ac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0D6941083890E3358E740E3055D5A6B8DE39E1D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:9f:3a:f0:74:89:6b:6a:31:96:de:a0:4e:
59:aa:19:1f:42:05:c8:79:10:35:08:53:3c:33:7c:
65:c1:d6:6f:5a:1a:30:11:73:03:05:8d:7d:b5:8a:
0f:3c:64:8e:22:dc:bb:ea:93:66:2b:05:6f:f6:80:
9f:ce:37:9b:6a:d1:64:17:db:1c:db:7a:e9:bb:a7:
27:a6:83:59:af:5f:d1:42:3b:e1:d7:70:8f:dd:74:
63:50:99:b6:99:51:f4:a4:0c:39:0e:d3:7b:8d:a5:
26:d2:b0:07:a4:b1:61:3c:02:eb:47:e2:85:26:b2:
b2:f4:a3:ed:df:49:97:75:8d:4c:d8:13:05:07:b8:
db:17:06:24:5d:7c:a4:14:5c:57:52:99:b7:98:ab:
f1:52:ae:7a:a0:d0:55:35:db:93:ee:84:d5:76:66:
88:f2:bf:8d:ba:f9:ee:33:b7:d2:89:e2:4c:22:8e:
d3:d2:8b:4c:6b:3e:50:24:8d:61:d1:d6:5f:61:4b:
72:79:77:dc:20:ff:48:95:b3:71:74:e9:fe:17:a7:
8f:72:a3:4f:a9:4b:d2:2b:54:77:81:76:5a:96:f7:
f5:d1:2a:ba:53:76:fe:ff:c6:99:bc:d7:d8:87:84:
4b:ea:66:33:67:47:57:a9:5c:a0:ad:6c:c0:37:55:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:69:41:08:38:90:E3:35:8E:74:0E:30:55:D5:A6:B8:DE:39:E1:D8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DWlBCDiQ4zWOdA4wVdWmuN454dg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:52:1a:a2:d2:83:11:a7:bf:ee:42:bb:8e:3c:25:34:33:2f:
c1:2f:5b:e2:24:ab:c0:4c:5f:eb:86:bb:a7:32:8d:c3:70:c6:
4b:76:0b:c6:0b:76:48:8b:73:b3:d2:0b:26:2a:ff:2d:6d:d5:
0f:23:3f:40:02:e1:08:3c:b5:5c:4a:58:0e:e0:1f:a1:e5:c3:
94:b0:e9:fe:46:04:c0:4b:85:06:1a:4d:35:6c:04:21:71:ea:
cd:57:3a:f1:b5:ab:30:83:4e:7f:30:74:d3:73:64:db:0d:f2:
b8:79:61:b5:a0:8a:5c:d0:05:99:54:47:f1:71:76:db:55:ac:
37:76:90:63:e3:8b:be:56:ac:66:6a:b4:85:04:e0:fe:50:f9:
99:5c:69:70:67:60:b6:a7:75:e8:62:c1:61:cd:ba:30:9c:dd:
ba:44:a8:08:5f:2b:d2:48:26:c0:41:27:1b:42:ba:d1:6d:59:
d3:91:ce:5b:2d:de:0b:22:fa:e1:9c:98:35:3b:31:62:ea:d7:
e9:87:df:6a:ce:e7:fe:59:5d:ae:50:be:72:d8:ac:a8:74:6f:
4d:77:35:17:19:63:f9:91:8c:cd:2a:a4:4a:84:c1:1c:ab:21:
f3:5c:7d:fd:07:d3:cc:88:1f:56:90:2a:db:ae:03:a5:79:a8:
03:9c:78:47
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKskwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MTdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBENjk0MTA4Mzg5MEUz
MzU4RTc0MEUzMDU1RDVBNkI4REUzOUUxRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1IJ868HSJa2oxlt6gTlmqGR9CBch5EDUIUzwzfGXB1m9aGjAR
cwMFjX21ig88ZI4i3Lvqk2YrBW/2gJ/ON5tq0WQX2xzbeum7pyemg1mvX9FCO+HX
cI/ddGNQmbaZUfSkDDkO03uNpSbSsAeksWE8AutH4oUmsrL0o+3fSZd1jUzYEwUH
uNsXBiRdfKQUXFdSmbeYq/FSrnqg0FU125PuhNV2Zojyv426+e4zt9KJ4kwijtPS
i0xrPlAkjWHR1l9hS3J5d9wg/0iVs3F06f4Xp49yo0+pS9IrVHeBdlqW9/XRKrpT
dv7/xpm819iHhEvqZjNnR1epXKCtbMA3VVu9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDWlBCDiQ4zWOdA4wVdWmuN454dgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RXbEJDRGlRNHpXT2RBNHdW
ZFdtdU40NTRkZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wswwDQYJKoZIhvcNAQELBQADggEBAIpSGqLSgxGnv+5Cu448JTQzL8EvW+Ikq8BM
X+uGu6cyjcNwxkt2C8YLdkiLc7PSCyYq/y1t1Q8jP0AC4Qg8tVxKWA7gH6Hlw5Sw
6f5GBMBLhQYaTTVsBCFx6s1XOvG1qzCDTn8wdNNzZNsN8rh5YbWgilzQBZlUR/Fx
dttVrDd2kGPji75WrGZqtIUE4P5Q+ZlcaXBnYLandehiwWHNujCc3bpEqAhfK9JI
JsBBJxtCutFtWdORzlst3gsi+uGcmDU7MWLq1+mH32rO5/5ZXa5QvnLYrKh0b013
NRcZY/mRjM0qpEqEwRyrIfNcff0H08yIH1aQKtuuA6V5qAOceEc=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org