Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EXM7OrtbnrUYYwh4DDMHZOAaEL0.roa
File: EXM7OrtbnrUYYwh4DDMHZOAaEL0.roa (raw, json)
Hash identifier: ruaGn3YORATHne3puaTXvba0XX1WnwYCTNFEfEDsWA8=
Subject key identifier: 11:73:3B:3A:BB:5B:9E:B5:18:63:08:78:0C:33:07:64:E0:1A:10:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A1D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EXM7OrtbnrUYYwh4DDMHZOAaEL0.roa
Signing time: Fri 01 Sep 2023 10:07:31 +0000
ROA not before: Fri 01 Sep 2023 10:07:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.100.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10781 (0x2a1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=11733B3ABB5B9EB5186308780C330764E01A10BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:b6:6b:e4:a4:ce:63:10:7a:b0:c8:29:ff:
e3:27:04:48:76:12:24:a2:97:16:be:8f:3f:40:39:
1b:27:d6:d1:4c:e9:89:49:8a:76:d6:11:5f:53:37:
6e:41:a6:4b:68:88:8c:81:82:6f:51:37:7f:f0:9b:
92:6a:ba:9f:41:9c:23:a2:90:ab:70:51:05:76:87:
1f:29:50:5f:8f:64:da:97:37:81:b7:ed:bc:aa:16:
a2:79:ca:f6:1e:ad:e7:05:64:51:22:be:e3:df:13:
17:17:c2:03:96:2d:62:28:be:22:14:9a:aa:40:49:
3e:e9:37:56:c3:f2:5b:92:5c:18:f7:93:15:c5:e7:
7e:78:71:95:1f:df:81:92:c1:53:84:1d:45:39:c9:
0a:fa:c4:04:f1:e6:ed:b9:7d:28:50:ff:be:76:c8:
1c:c5:2a:ee:54:d2:12:b8:d0:ea:57:67:4a:fc:bc:
1b:fe:2f:db:58:91:9e:02:d3:59:f1:f5:37:5c:43:
c4:73:d9:ab:08:42:b0:15:5a:99:32:0c:85:7b:8b:
ff:48:9e:c6:ec:22:22:6e:df:0f:47:63:97:e6:26:
25:14:1c:e5:5c:d1:dc:a9:a4:1d:2c:39:34:e5:69:
de:3a:ad:32:22:db:2b:4b:f4:b3:c1:0a:67:0a:51:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:73:3B:3A:BB:5B:9E:B5:18:63:08:78:0C:33:07:64:E0:1A:10:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EXM7OrtbnrUYYwh4DDMHZOAaEL0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:06:d4:a6:a0:13:6e:b0:b1:46:51:e2:a9:bd:61:97:b0:03:
88:51:40:34:00:51:62:7f:7c:5a:08:b4:f2:f6:e2:73:6e:a6:
0f:fa:80:20:77:8e:d8:10:df:56:5d:db:5d:3a:e1:77:92:86:
7f:d5:ff:9c:be:0b:68:b3:19:db:be:71:28:9d:38:50:a9:c7:
73:34:e7:f2:9e:d7:e4:21:f2:84:c5:4a:ba:1b:d5:c1:f1:85:
6d:6d:a4:b0:37:ce:5a:10:53:56:61:fa:c8:61:99:f9:db:82:
57:8b:c6:99:89:13:82:ca:ba:0c:25:01:b3:2d:3e:81:12:94:
f3:99:22:12:03:48:6b:53:f4:c0:bd:7e:0d:1a:4a:db:0c:ce:
e0:f3:f5:f3:19:b5:a9:ff:55:19:aa:e0:5d:be:69:ee:e6:2a:
fb:5f:8f:b2:b2:85:6b:43:15:5c:d2:f5:c0:5c:8e:0c:ee:30:
4b:df:33:0b:f8:9f:44:3f:6d:a7:af:f6:3e:7d:52:b4:8d:44:
2c:e8:b5:11:36:c2:18:e1:a2:e2:50:6b:37:9f:a3:db:54:10:
66:a4:fc:6b:a2:17:5d:f5:b6:b4:9e:86:e1:b3:59:02:c8:72:
7d:1c:82:4c:16:c4:50:c3:c0:ad:73:03:ab:ae:be:ef:ff:d7:
5e:74:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org