Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GxDvtOnNZvLTN5J8PkJsYyZ0GIo.roa
File: GxDvtOnNZvLTN5J8PkJsYyZ0GIo.roa (raw, json)
Hash identifier: 97b1nYgf0Zxcok+0CMU7jDM2LPDEeHZCJhhYKWaBFbo=
Subject key identifier: 1B:10:EF:B4:E9:CD:66:F2:D3:37:92:7C:3E:42:6C:63:26:74:18:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2833
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GxDvtOnNZvLTN5J8PkJsYyZ0GIo.roa
Signing time: Fri 01 Sep 2023 10:05:04 +0000
ROA not before: Fri 01 Sep 2023 10:05:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10291 (0x2833)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1B10EFB4E9CD66F2D337927C3E426C632674188A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:41:06:79:fa:73:3f:cc:10:b5:4b:ab:e7:
e8:a5:ad:8b:ab:ca:45:3b:8e:8c:d9:4c:4a:b7:07:
a6:5c:65:cd:74:5f:7b:b9:4e:9e:ad:d8:29:54:c3:
66:5a:06:58:87:93:1e:2a:74:2f:4b:5c:c4:18:71:
3b:33:29:05:a2:cd:0b:91:00:08:81:5e:25:36:de:
3b:0c:21:8d:f4:43:4f:f4:f9:1d:d6:75:f4:dd:81:
6c:b8:db:e0:6a:6a:3b:27:b3:d7:3c:30:f2:29:31:
36:73:d2:14:31:78:92:b1:b4:56:03:e1:84:e2:5a:
d3:8d:5f:9c:4c:c8:b6:ad:8d:91:9a:12:50:e7:8d:
cd:1e:a6:c8:80:70:a7:b6:43:46:aa:0d:10:54:6d:
0b:1c:62:34:58:e0:82:d1:0c:20:40:80:d9:fd:3e:
f7:d6:e8:3f:5c:7a:ae:28:d2:cf:5f:69:ac:b8:9f:
66:c3:84:52:8f:17:80:a9:8a:bf:45:12:05:15:d6:
0a:9b:b8:77:a0:89:66:4c:16:bd:ed:69:e1:49:bb:
83:1b:bb:bf:a9:2c:af:9f:4c:91:a3:5a:be:87:e2:
59:f6:b7:16:7d:85:ee:5b:47:09:e8:8e:b0:e0:fe:
b5:c1:2b:da:5e:b5:92:17:5c:dc:24:ef:1d:aa:11:
f7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:10:EF:B4:E9:CD:66:F2:D3:37:92:7C:3E:42:6C:63:26:74:18:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/GxDvtOnNZvLTN5J8PkJsYyZ0GIo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.128.0/21
Signature Algorithm: sha256WithRSAEncryption
40:e6:51:62:5e:9c:0a:b0:ae:4e:c4:e1:d6:fb:af:c9:b9:5d:
96:7d:76:0d:5f:d6:58:48:a1:63:8e:d7:95:f3:c9:f8:b3:c3:
40:64:8e:68:96:d0:c0:b9:f6:ac:55:77:77:39:e2:2b:9a:53:
84:97:69:35:37:c5:33:9c:49:61:7e:70:c1:27:f7:bf:2d:c3:
4a:f7:44:24:10:eb:97:54:e4:ee:07:7a:b0:e8:85:ca:7c:65:
3b:35:a8:e5:05:d7:45:5c:3f:f7:a9:f8:8d:4b:07:b2:a5:fd:
b4:8c:e0:e6:52:69:be:16:9f:aa:40:9f:ba:9b:10:1c:f7:21:
50:2f:43:e3:e9:d9:22:01:00:ad:00:5c:43:e2:b1:ba:4a:dd:
54:e7:6d:d7:0b:aa:ee:3c:e9:9e:17:83:38:d0:13:f9:70:4a:
49:9d:e3:f2:06:3f:97:94:7e:61:48:3d:d8:7b:31:c8:41:66:
b3:14:f9:53:33:2b:32:39:db:56:0c:bb:94:32:15:bb:68:e8:
ac:ac:91:b6:2e:66:74:7b:db:75:cc:dc:be:a8:59:b9:b4:33:
00:3d:af:33:8a:40:16:ec:77:a0:bf:c6:c2:b2:a9:af:d3:78:
fc:d0:a8:a8:c8:00:a1:dd:92:3b:bc:f3:eb:e7:7c:d5:4b:2c:
aa:29:a0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org