Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dj41YtOYMP3cxoY-gDdFdM4KssE.roa
File: Dj41YtOYMP3cxoY-gDdFdM4KssE.roa (raw, json)
Hash identifier: E1QnuHX+broyngq4wAiPULv7XU0olPcMj+EfTxaRAIU=
Subject key identifier: 0E:3E:35:62:D3:98:30:FD:DC:C6:86:3E:80:37:45:74:CE:0A:B2:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29FC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dj41YtOYMP3cxoY-gDdFdM4KssE.roa
Signing time: Fri 01 Sep 2023 10:07:21 +0000
ROA not before: Fri 01 Sep 2023 10:07:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10748 (0x29fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0E3E3562D39830FDDCC6863E80374574CE0AB2C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:c1:c2:b9:6c:21:9e:d7:2d:65:f8:de:a4:
f6:89:a2:98:2b:ec:d6:e7:e5:97:5e:9c:42:7a:f9:
b7:8b:65:5a:d6:ab:a2:ff:2b:fd:7f:b9:d1:40:dc:
42:f6:70:da:c6:a5:14:ff:3c:ee:36:51:ab:05:6c:
7f:7f:e3:52:8a:a0:54:b4:52:74:a3:71:a1:15:0a:
af:12:11:52:f2:39:85:38:d6:bd:8a:2b:94:dd:41:
80:95:b2:da:dd:eb:90:07:d4:79:b5:78:4f:82:45:
cd:b7:ac:c6:c1:7e:df:3a:96:bc:c4:03:0a:6f:8d:
2e:11:62:b5:08:15:02:ec:9d:e7:a5:af:b8:cd:92:
af:0f:a2:11:1e:c1:7a:ef:71:bc:57:f9:aa:b9:5c:
4a:54:78:cb:45:19:c9:83:5c:f5:cc:82:4a:71:31:
b1:8b:b9:61:01:ff:14:f0:82:4e:83:a4:5c:18:71:
8b:bc:0b:54:31:57:dd:07:3a:c9:e3:56:48:cb:60:
55:23:96:ba:09:0c:95:52:c1:a1:c9:7c:a3:a0:0e:
50:82:a4:af:c3:9b:a3:33:af:4a:a3:01:dd:78:dd:
d3:80:22:a6:2e:4d:ed:7a:38:a5:79:f1:80:6a:e1:
ad:a0:58:21:9d:cf:ea:40:78:31:7a:d0:75:c3:b3:
f2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3E:35:62:D3:98:30:FD:DC:C6:86:3E:80:37:45:74:CE:0A:B2:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Dj41YtOYMP3cxoY-gDdFdM4KssE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:4c:37:e2:0a:82:5e:67:dc:dd:f3:97:10:c8:5c:11:a3:11:
f0:50:5e:b5:43:4a:3d:68:2b:d8:c5:fb:d4:26:dd:19:dd:a9:
5b:fe:04:97:7f:f8:0f:dc:7b:1c:b0:da:08:c5:c4:e0:04:70:
4e:3c:b9:c8:ea:96:27:86:45:7e:e0:ca:4b:6a:a5:e9:ec:6d:
f3:f3:7c:54:a8:d6:11:f9:d0:64:5e:ae:20:d9:9d:f0:c6:33:
74:db:97:a3:42:29:03:6f:e2:71:87:aa:0b:60:8e:ad:dc:75:
53:12:7b:21:f2:58:18:7c:dc:6c:81:7a:c2:52:01:3b:4b:cb:
0f:24:7a:1d:3e:4d:32:ae:90:76:43:ae:e3:91:15:3c:67:3d:
06:f6:aa:61:a1:56:f3:8e:0d:54:71:3e:67:94:aa:2d:35:88:
8d:bc:11:27:08:83:ae:c1:ca:32:2b:a3:a8:8a:f7:0d:02:65:
55:c2:9e:8a:67:cd:45:4f:81:e7:cf:d0:10:79:1b:cc:1e:10:
56:c9:49:77:69:9b:2c:c4:72:d3:d9:86:29:73:b5:06:a8:ae:
c9:03:4b:f8:ff:e6:ed:d0:1f:bd:5b:74:de:17:f8:c3:dd:8a:
2d:38:7d:7d:33:d7:32:99:ab:6a:2c:a8:f7:97:f2:85:ab:c8:
bb:2f:cf:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDBFM0UzNTYyRDM5ODMw
RkREQ0M2ODYzRTgwMzc0NTc0Q0UwQUIyQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCr+8HCuWwhntctZfjepPaJopgr7Nbn5ZdenEJ6+beLZVrWq6L/
K/1/udFA3EL2cNrGpRT/PO42UasFbH9/41KKoFS0UnSjcaEVCq8SEVLyOYU41r2K
K5TdQYCVstrd65AH1Hm1eE+CRc23rMbBft86lrzEAwpvjS4RYrUIFQLsneelr7jN
kq8PohEewXrvcbxX+aq5XEpUeMtFGcmDXPXMgkpxMbGLuWEB/xTwgk6DpFwYcYu8
C1QxV90HOsnjVkjLYFUjlroJDJVSwaHJfKOgDlCCpK/Dm6Mzr0qjAd143dOAIqYu
Te16OKV58YBq4a2gWCGdz+pAeDF60HXDs/KlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDj41YtOYMP3cxoY+gDdFdM4KssEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RqNDFZdE9ZTVAzY3hvWS1n
RGRGZE00S3NzRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wkgwDQYJKoZIhvcNAQELBQADggEBABpMN+IKgl5n3N3zlxDIXBGjEfBQXrVDSj1o
K9jF+9Qm3RndqVv+BJd/+A/cexyw2gjFxOAEcE48ucjqlieGRX7gyktqpensbfPz
fFSo1hH50GReriDZnfDGM3Tbl6NCKQNv4nGHqgtgjq3cdVMSeyHyWBh83GyBesJS
ATtLyw8keh0+TTKukHZDruORFTxnPQb2qmGhVvOODVRxPmeUqi01iI28EScIg67B
yjIro6iK9w0CZVXCnopnzUVPgefP0BB5G8weEFbJSXdpmyzEctPZhilztQaorskD
S/j/5u3QH71bdN4X+MPdii04fX0z1zKZq2osqPeX8oWryLsvz/I=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org