Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GSW3u15koUjWYjEA2Q8WZCDEPps.roa
File: GSW3u15koUjWYjEA2Q8WZCDEPps.roa (raw, json)
Hash identifier: 89r+sa6erLk9/Nfrwu6f64PyYJuB0jonAxanaQx7Vh4=
Subject key identifier: 19:25:B7:BB:5E:64:A1:48:D6:62:31:00:D9:0F:16:64:20:C4:3E:9B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28A5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GSW3u15koUjWYjEA2Q8WZCDEPps.roa
Signing time: Fri 01 Sep 2023 10:05:37 +0000
ROA not before: Fri 01 Sep 2023 10:05:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10405 (0x28a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1925B7BB5E64A148D6623100D90F166420C43E9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:ae:22:c3:0c:f1:10:0a:33:2e:92:8e:7c:
79:98:8f:21:3d:fc:ab:8f:71:22:2d:a6:be:28:18:
fb:54:64:cb:72:e1:b6:6d:e5:b7:4c:e4:b2:3f:7c:
92:a8:2b:3c:01:ce:8a:43:60:12:a5:a4:5b:bb:23:
2c:2c:33:17:a2:ab:4b:36:17:6e:9f:f0:5c:1b:16:
90:35:d4:e4:88:be:98:a9:8a:16:82:cb:a5:46:07:
43:da:52:30:2e:fa:10:a7:c9:8c:d2:c4:4e:ba:20:
a7:98:fa:4f:db:1d:bc:cd:19:cf:9e:c9:ca:2a:c4:
8b:b5:40:df:c1:ab:c6:59:b0:02:75:2f:c3:68:59:
29:ae:33:60:13:a7:6d:97:6a:f1:b7:40:72:4d:eb:
eb:10:f6:24:74:37:06:1c:31:ea:cf:2e:9c:d7:54:
e1:28:5a:09:ca:c1:88:ab:e2:2e:25:dd:bf:99:6f:
50:9d:a8:1d:bf:46:b9:7e:6a:41:f0:5f:c1:1d:d3:
69:24:5a:76:6e:15:d3:7b:6e:ef:22:ee:7e:b3:89:
b8:4d:7e:68:9a:39:1f:57:71:f9:29:2f:c2:2d:57:
28:35:c2:7e:a2:01:d8:64:9a:3d:a2:68:07:1d:fd:
81:07:6c:f9:dd:6d:b6:a8:3b:ab:48:51:6c:b3:18:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:B7:BB:5E:64:A1:48:D6:62:31:00:D9:0F:16:64:20:C4:3E:9B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GSW3u15koUjWYjEA2Q8WZCDEPps.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:3b:66:8d:a5:bf:25:3f:9c:44:0c:45:fa:32:a9:ad:41:81:
40:be:f3:1d:17:7f:d4:81:56:f3:81:16:17:cd:73:c1:0f:a8:
f2:49:88:f0:9a:3b:6d:f3:a4:34:7c:6f:53:59:1e:98:75:7a:
2e:46:a0:4c:28:66:42:b6:31:00:00:ba:bb:f4:a8:27:ac:72:
f0:1a:01:16:cd:ca:66:59:0f:c3:e5:a4:2e:98:5a:a7:01:49:
1d:62:5b:33:37:b8:08:4b:c7:d6:f3:d2:d7:2c:59:3f:f6:28:
cc:a6:f1:5e:0d:7b:bc:a0:c0:03:d2:76:f0:ea:e5:b5:6b:8a:
d7:31:e4:de:23:38:88:7d:92:6b:09:e5:8c:fd:ac:33:fa:3b:
87:d7:5d:5f:8f:86:7c:61:65:89:0a:25:a5:77:20:cb:e0:37:
c3:d7:0f:c4:4e:53:eb:a9:0f:9a:6f:4f:e5:ea:2c:28:eb:86:
70:dc:7f:4c:83:41:03:d4:80:e6:d2:7f:01:3b:5c:a6:61:aa:
f7:27:a1:3c:5c:68:74:14:ae:fd:9c:d5:aa:bc:22:a0:bb:ff:
9a:22:40:c1:aa:7c:5d:45:70:9d:ae:07:1b:2d:4a:98:6f:cf:
6b:26:88:bc:3b:5a:8c:e5:0d:24:2e:ba:66:70:59:8a:1f:7f:
07:33:4d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org