Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7httDOlK0rUwHekamYj6maj2Mo.roa
File: E7httDOlK0rUwHekamYj6maj2Mo.roa (raw, json)
Hash identifier: k5ib0PNyZ5HBdq5brwxOfUiTvTaeA68Toup0aeCoYD4=
Subject key identifier: 13:B8:6D:B4:33:A5:2B:4A:D4:C0:77:A4:6A:66:23:EA:66:A3:D8:CA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2814
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7httDOlK0rUwHekamYj6maj2Mo.roa
Signing time: Fri 01 Sep 2023 10:04:55 +0000
ROA not before: Fri 01 Sep 2023 10:04:55 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.193.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10260 (0x2814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:55 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=13B86DB433A52B4AD4C077A46A6623EA66A3D8CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:47:fa:e4:4a:66:a3:1f:56:52:97:55:f9:
1c:3e:79:02:28:b3:c6:c5:5c:1c:c1:e1:3e:76:05:
71:23:58:fe:a9:fa:98:6b:f4:0a:4e:8d:26:01:14:
92:9f:ac:21:74:38:c6:e5:12:a3:71:31:59:06:19:
cc:5e:6b:06:38:e3:e0:ae:46:2c:ed:e9:e0:77:be:
75:64:c3:79:e8:5d:fc:15:86:84:65:bf:c4:20:f8:
3a:2b:d7:e0:74:47:f2:0a:55:fe:33:40:70:45:1b:
e2:01:c9:8e:2f:da:74:ed:de:4e:6c:ac:44:d3:1a:
9f:16:d5:2e:e6:ac:77:52:7e:0d:8c:59:02:34:93:
82:c0:a0:db:d9:b9:13:37:92:3e:02:d4:6d:5b:17:
68:98:12:07:4a:96:98:e5:10:ee:0d:d8:dc:34:69:
41:b2:43:c9:32:e6:77:c3:6c:4d:1d:a4:1b:71:35:
cf:a3:9f:10:d7:07:bb:5e:60:b6:8d:62:f6:62:5d:
d1:15:97:4e:6a:eb:9d:79:c2:67:a7:5d:f4:35:59:
d4:b8:e5:39:a2:1b:82:72:e7:2b:9b:50:4d:bc:c1:
1b:a7:99:66:18:f7:8d:26:5a:18:a2:9a:fa:bf:b7:
02:ce:d2:c6:05:2d:db:76:7f:e2:ab:98:87:06:08:
58:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B8:6D:B4:33:A5:2B:4A:D4:C0:77:A4:6A:66:23:EA:66:A3:D8:CA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7httDOlK0rUwHekamYj6maj2Mo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
ba:de:f3:49:0c:f8:1a:f0:63:42:37:fb:93:01:a7:82:3d:34:
15:af:ab:a0:ee:72:35:27:7d:54:91:9f:b0:2f:aa:f1:f6:02:
d3:24:ec:6a:78:94:9a:b5:5f:a7:d4:62:86:cd:4d:04:99:79:
9f:e8:96:8e:e1:fc:92:3a:a3:6c:ad:80:28:c3:b4:e4:24:5f:
6a:4d:c2:60:06:d1:17:73:8d:83:e1:64:0d:51:c3:ad:b4:f6:
4b:f5:d7:56:f7:ca:d9:8c:d0:f4:36:8b:33:59:51:1b:56:88:
94:3f:d7:f7:8f:c9:bd:05:6a:4b:3e:a1:2d:8c:c9:6e:bf:16:
2e:98:0d:ff:ed:10:f8:7a:69:c8:5d:98:0a:45:3d:03:85:a3:
ab:8a:a6:5f:4f:3a:d3:41:be:ea:fd:5f:7c:ec:bb:cd:59:e7:
54:7d:63:ed:ec:c3:f8:28:a0:ed:44:01:87:45:2f:71:e3:0b:
41:65:db:c7:84:4f:09:b2:2e:16:e9:a6:6b:ff:96:f8:c0:8d:
7f:9f:e0:52:4c:02:24:18:54:fc:35:57:a5:7f:54:6c:19:05:
29:92:a1:de:fd:f2:f1:a5:99:5f:dc:2e:f3:13:eb:2f:11:8b:
26:a6:d8:65:80:d8:5c:61:9f:a3:19:0a:f5:97:04:f9:e9:0a:
2e:de:4e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org