Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GCIXYSTJsr1uXwBPeGguX114qMQ.roa
File: GCIXYSTJsr1uXwBPeGguX114qMQ.roa (raw, json)
Hash identifier: C85oTOh1auAssrCzSHGXbrCVrMqZfCn14bC1r4UvIP4=
Subject key identifier: 18:22:17:61:24:C9:B2:BD:6E:5F:00:4F:78:68:2E:5F:5D:78:A8:C4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A4D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GCIXYSTJsr1uXwBPeGguX114qMQ.roa
Signing time: Fri 01 Sep 2023 10:07:44 +0000
ROA not before: Fri 01 Sep 2023 10:07:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10829 (0x2a4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1822176124C9B2BD6E5F004F78682E5F5D78A8C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:0a:2f:be:86:3e:e2:d7:6d:25:4b:06:6d:
ac:04:c6:bb:ef:8a:d2:1b:68:03:e2:d4:d5:57:d7:
15:1c:dd:4e:1a:94:eb:31:7b:55:03:11:d9:a8:b1:
7f:e5:95:e8:93:ec:cf:87:f3:cd:d3:77:69:42:f1:
99:5c:29:9e:14:6b:ec:9e:89:b9:80:6c:69:71:ee:
b5:46:56:d1:7e:04:fb:9f:35:b5:7e:ff:30:f4:41:
bc:34:d8:fd:f7:de:02:ab:e4:01:43:9e:3f:f3:92:
09:f6:c7:ef:b9:34:18:50:e8:68:38:27:34:5a:f8:
40:dd:2d:31:33:5b:39:22:37:80:87:fa:bd:b7:71:
10:6e:f4:48:7c:dc:da:2b:6a:85:35:cd:d5:84:92:
8f:4f:f1:d2:12:c8:a3:1c:ce:05:07:23:59:11:1d:
82:e8:a6:37:3a:df:c0:aa:58:70:d9:b7:3b:3c:fb:
30:96:58:b2:63:f5:d4:95:48:9e:82:ae:a4:64:ec:
d8:d9:97:6e:15:1e:81:bf:69:e9:02:a8:d4:e9:d0:
3e:09:e8:7f:75:9d:14:16:32:4c:28:da:e9:3f:7e:
35:3e:5d:13:0c:9b:93:d0:29:dd:61:e2:87:56:53:
80:cd:d3:c6:75:78:54:4d:f9:b9:aa:40:96:74:14:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:22:17:61:24:C9:B2:BD:6E:5F:00:4F:78:68:2E:5F:5D:78:A8:C4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GCIXYSTJsr1uXwBPeGguX114qMQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:77:68:e7:0c:01:e8:11:02:09:e7:10:59:a9:90:1a:51:c4:
bc:6e:0a:da:1e:b0:db:9e:ce:68:5d:e9:43:3e:96:97:03:f6:
bb:e8:3b:7e:66:0a:c6:07:ee:46:1f:a4:0a:2b:54:fc:cf:0a:
fe:3d:57:31:24:bb:8d:3b:df:f5:a6:31:49:32:e5:b9:73:1a:
a2:a8:ce:30:f0:d9:8b:1f:10:e6:12:8f:73:5a:20:70:fb:06:
c1:66:f9:98:32:ff:d3:8a:c8:5e:2a:e3:b6:c3:7f:a6:3a:66:
8d:b5:f5:07:a2:5a:e3:2c:a7:5a:96:9a:dc:17:07:8a:a7:89:
fc:57:91:6b:9e:6f:e6:4e:da:60:a5:d0:60:19:0b:4e:3d:c1:
d8:48:1b:50:84:09:d9:ac:3e:91:53:bc:54:db:5b:dd:37:b8:
cd:aa:ac:76:ae:4b:f2:84:31:7d:62:e3:c2:ea:cf:ab:57:1b:
5f:46:a1:7b:16:38:da:ac:c7:66:97:e2:96:10:2d:d4:7c:69:
56:e1:7e:88:9a:2b:e9:dc:74:53:bb:c0:0c:47:fb:dd:43:69:
5e:cb:00:a2:2c:cf:8f:17:ca:2b:d1:07:23:50:34:88:b8:88:
d9:c7:d6:91:05:78:ff:8e:08:1d:85:29:2a:f1:44:a5:0d:db:
8d:b2:f7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org