Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DgKzZdo8NgAhtre4CKYEYw1xy1U.roa
File: DgKzZdo8NgAhtre4CKYEYw1xy1U.roa (raw, json)
Hash identifier: 0Bxzj7D1Q9hr0Mbl2tcIHl3rzXtUo1PiRMxqV9vxetQ=
Subject key identifier: 0E:02:B3:65:DA:3C:36:00:21:B6:B7:B8:08:A6:04:63:0D:71:CB:55
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29AC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DgKzZdo8NgAhtre4CKYEYw1xy1U.roa
Signing time: Fri 01 Sep 2023 10:06:54 +0000
ROA not before: Fri 01 Sep 2023 10:06:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10668 (0x29ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0E02B365DA3C360021B6B7B808A604630D71CB55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:6c:96:11:b0:62:79:63:1f:82:40:76:94:
e4:08:90:78:01:40:83:2a:7b:52:60:21:76:f0:5b:
fb:01:b0:4b:35:27:b1:d6:90:16:cc:0c:d3:55:e5:
0e:04:2b:a2:84:4c:93:1e:1d:c9:51:3b:4a:08:06:
c1:e0:c3:d2:85:c5:bb:ce:73:f8:8e:2e:2a:5f:ea:
82:30:a1:6a:24:33:eb:31:5f:5b:69:e8:74:29:7d:
87:20:e6:90:2b:81:0d:7d:26:de:c5:c0:58:16:34:
8b:96:b6:ea:b2:c4:01:1b:7a:73:df:04:d6:22:2a:
69:f7:db:10:52:51:f3:06:e7:5d:90:06:63:7f:bf:
8b:4d:06:d4:a8:45:6e:95:9f:4f:29:9f:1e:28:22:
f4:b4:1d:67:9f:77:2e:f4:59:d2:28:3d:ee:8f:17:
58:f7:92:cd:20:f6:21:88:c4:fc:fe:4f:79:90:d7:
6f:73:8c:a9:a1:8c:ff:43:29:07:bf:66:c7:38:46:
f4:1a:c3:13:b5:f4:6d:93:bd:93:32:a7:9d:16:a3:
a4:1f:2e:1d:7b:0f:d9:83:80:36:07:bc:48:85:d5:
73:f5:5d:c4:97:46:70:0e:9e:11:50:fb:11:5a:1c:
7b:d2:9b:bf:44:c5:8e:06:9f:51:80:c8:f2:eb:b9:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:02:B3:65:DA:3C:36:00:21:B6:B7:B8:08:A6:04:63:0D:71:CB:55
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DgKzZdo8NgAhtre4CKYEYw1xy1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.88.0/21
Signature Algorithm: sha256WithRSAEncryption
51:11:e8:83:05:08:f3:13:73:6e:cd:d6:33:05:14:d1:f4:72:
69:ab:9b:e3:59:e7:a6:dd:91:67:58:23:76:45:c7:d9:b6:eb:
60:0c:16:ad:b8:78:4b:3c:35:fb:38:b5:64:8f:da:fd:3d:94:
bb:f6:e8:d6:7d:c8:7c:d9:9a:7e:7c:a9:28:e2:c9:dd:df:48:
e5:b1:29:16:93:5c:27:b4:40:00:c5:f8:d0:6c:f8:56:f2:d1:
dd:db:1a:cd:f5:3e:4b:50:99:64:84:0b:8a:64:24:ea:ee:f0:
a3:7f:80:33:fc:f9:ce:07:df:90:a3:9f:e6:7f:e5:4b:a7:7f:
9c:78:77:d9:ff:cc:ab:e4:7d:a7:b3:51:08:fc:94:2e:d4:01:
35:b1:d0:1e:78:ed:79:ab:c3:2a:61:45:84:74:7f:9e:43:e7:
18:e6:75:9f:14:a7:da:f6:8d:09:30:6b:45:2e:a7:31:38:0a:
88:48:a1:b3:b8:b8:52:51:b0:0b:ad:79:4b:54:d0:ae:01:08:
4e:f7:8f:e2:65:2c:12:8f:e8:f6:ca:e1:ff:ae:e3:94:21:15:
c4:61:20:17:d1:9f:9f:2e:a2:5d:85:d3:49:ff:a7:1a:1a:71:
37:56:32:f0:1d:85:5f:2b:d3:4a:89:81:b8:72:a2:f6:9e:57:
dc:ff:ae:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org