Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EcSbUr24ZkKP0-vmqwFk74UF-oE.roa
File: EcSbUr24ZkKP0-vmqwFk74UF-oE.roa (raw, json)
Hash identifier: UFhZ6myx9uHUTj8ZElli0kK/+obek+9uv0+TPb6JSSs=
Subject key identifier: 11:C4:9B:52:BD:B8:66:42:8F:D3:EB:E6:AB:01:64:EF:85:05:FA:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 280D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EcSbUr24ZkKP0-vmqwFk74UF-oE.roa
Signing time: Fri 01 Sep 2023 10:04:53 +0000
ROA not before: Fri 01 Sep 2023 10:04:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10253 (0x280d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=11C49B52BDB866428FD3EBE6AB0164EF8505FA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:3b:f3:b2:72:d4:4f:d3:e4:ef:d0:0a:90:
dd:98:60:f5:0f:c1:d6:5f:00:23:87:ac:ed:3d:8b:
5f:35:94:ec:8e:1e:4a:5e:84:12:9a:7e:87:9d:93:
77:77:d7:13:96:ff:8e:53:fa:ec:4d:7e:a4:47:48:
f3:dc:8a:04:83:a6:6b:9a:9f:6a:9d:83:c3:45:52:
4a:a9:72:7f:ac:34:3c:71:5b:41:8c:88:e8:8d:09:
7d:3e:33:2a:3c:b5:16:ef:da:bb:62:02:1e:35:82:
9f:82:ce:6d:62:75:20:ca:b3:40:4f:2d:bd:38:1f:
65:8b:fa:30:5f:49:7d:cc:f4:a7:62:50:9d:de:29:
38:69:0b:e1:4d:6f:9b:f4:e9:29:67:c3:4f:0d:a0:
10:a3:59:03:de:61:50:0d:6c:11:48:13:a4:c7:4e:
45:3f:f9:3c:2b:4a:5f:34:39:d0:50:ad:b6:df:a0:
20:d2:2d:4c:18:e4:9f:4b:42:12:ef:c4:87:49:c1:
02:fe:ef:0d:06:83:51:bf:48:4f:60:57:71:18:17:
45:74:62:c5:07:75:53:66:f2:c8:51:5c:fe:c9:0a:
5a:40:da:9f:50:14:33:b6:53:c1:fd:f7:01:f3:17:
31:4c:7f:7e:39:58:44:7b:7a:26:ef:48:f6:2d:83:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C4:9B:52:BD:B8:66:42:8F:D3:EB:E6:AB:01:64:EF:85:05:FA:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/EcSbUr24ZkKP0-vmqwFk74UF-oE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/21
Signature Algorithm: sha256WithRSAEncryption
72:7a:00:c9:53:8f:88:e5:98:ce:77:b9:da:69:5b:5d:0a:2d:
73:bc:ce:2e:0b:ea:1a:4b:c4:67:c3:26:05:c6:d7:34:0f:50:
3b:1b:81:6a:30:10:14:6a:f1:3f:c6:5f:71:88:f0:47:7e:31:
4f:e9:4a:b0:d9:2b:49:75:71:67:25:7d:77:40:30:04:c7:33:
06:ff:60:e9:70:61:12:ca:58:83:2b:c3:e4:d2:b3:f2:4f:f5:
3c:1a:c3:87:16:fa:b1:98:b2:0e:98:dc:de:0f:62:1d:91:d7:
cf:77:bd:52:39:b4:42:a5:62:0c:d8:c0:41:99:e5:3b:69:b7:
55:03:7a:72:27:64:03:c7:3d:69:90:2f:8f:1d:56:3f:3e:42:
59:84:97:4d:a0:18:6b:5f:f9:11:be:62:51:4a:1b:94:7b:82:
50:fd:04:ba:81:a5:cd:ee:76:af:32:c0:3e:b1:84:ed:8f:37:
c2:89:05:ab:b8:dd:49:9a:95:ab:bd:1e:99:4a:0a:8b:24:9a:
37:fe:05:84:a2:ad:a6:73:0f:37:4c:3a:dc:08:65:7f:0d:85:
b4:c8:22:d7:69:ef:e0:0e:9e:52:70:c2:1b:09:c2:49:12:4d:
6b:3c:c5:c9:7a:42:fe:e3:72:cf:0c:c8:5a:4c:dd:88:32:ae:
01:d0:ca:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:17 2024 by rpki-client on console-ams.rpki-client.org