Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H9VZA1Fm4G1MEvc2cJpPLyjN-yc.roa
File: H9VZA1Fm4G1MEvc2cJpPLyjN-yc.roa (raw, json)
Hash identifier: b/Mczw3zH7WGTl/jl6PIQTon9r8cW0G7VVmE7CXwhzc=
Subject key identifier: 1F:D5:59:03:51:66:E0:6D:4C:12:F7:36:70:9A:4F:2F:28:CD:FB:27
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28B0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H9VZA1Fm4G1MEvc2cJpPLyjN-yc.roa
Signing time: Fri 01 Sep 2023 10:05:40 +0000
ROA not before: Fri 01 Sep 2023 10:05:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.248.0/21 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10416 (0x28b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1FD559035166E06D4C12F736709A4F2F28CDFB27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:f7:84:b4:3c:35:00:58:3d:98:21:aa:b3:
92:bd:66:5f:7a:13:53:82:0b:70:be:f5:71:2d:b4:
10:b8:b7:00:a6:36:17:59:c6:48:c5:41:22:4b:42:
f7:0b:05:fe:3d:2e:23:db:b2:2a:25:04:a8:cb:4d:
07:86:b2:19:8a:b0:89:d4:76:71:d3:24:be:a8:d6:
2e:97:e0:d1:ab:0c:56:d4:69:c9:63:71:97:81:52:
71:cc:79:c8:36:9e:7c:42:b8:3e:2f:9e:37:0a:54:
fe:8c:07:e7:ef:a5:d3:13:61:21:f6:8a:03:c7:f9:
85:e1:35:6b:5f:97:e4:38:7b:32:b7:60:1e:af:90:
a0:e1:8f:52:6e:9c:11:d4:bd:f8:92:82:58:a7:3d:
d6:dd:f4:cc:0e:b9:be:9b:96:57:a1:7f:7c:a2:78:
b8:6c:72:6c:1d:5d:35:22:95:b8:ec:02:64:4d:a1:
68:08:ff:39:bf:38:88:cb:0e:34:14:c4:c0:d2:c4:
f6:18:c9:68:c9:e3:e9:31:e7:b4:6c:46:11:24:21:
a9:42:9c:2a:3e:30:ee:67:25:4e:83:63:33:0d:46:
47:25:05:22:c1:c9:56:2b:a4:65:dd:ed:a7:6c:bb:
54:f7:48:4c:2f:1a:5b:30:43:6b:e3:93:45:73:72:
a8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:59:03:51:66:E0:6D:4C:12:F7:36:70:9A:4F:2F:28:CD:FB:27
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H9VZA1Fm4G1MEvc2cJpPLyjN-yc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.248.0/21
Signature Algorithm: sha256WithRSAEncryption
32:a6:01:8e:73:86:89:d9:04:e5:42:ad:f8:eb:59:6b:47:d6:
91:3b:ca:57:82:f6:99:85:0f:0e:fa:fd:8d:8c:d0:a7:04:ad:
71:ff:9c:38:3f:ab:42:6d:f5:40:ae:73:0d:1b:bf:d7:52:e1:
47:94:d8:7f:28:04:42:a8:d4:ef:6f:a0:18:de:59:19:63:9f:
d7:6f:28:44:53:ea:0e:25:4f:18:ca:cb:12:c2:ab:31:fd:0c:
5c:be:41:30:aa:b0:05:2c:c2:cc:ae:0b:5b:8c:00:7a:ba:be:
f9:1d:1e:a9:2f:aa:08:d5:76:bf:e9:4d:03:77:22:37:8e:a4:
fc:2b:aa:83:f6:2a:a1:f0:42:d0:50:b3:4d:53:b4:c1:61:6e:
17:c9:5e:f8:01:40:28:82:c7:aa:cb:53:ef:3d:14:5b:4d:13:
f7:d6:6c:f3:69:d8:41:2e:1a:d7:25:ce:16:f6:6e:91:5f:6d:
a9:1a:05:06:ca:24:1e:63:c2:ae:fc:98:83:80:9a:aa:b0:3f:
82:69:5a:3a:59:9f:5a:e1:86:5f:68:5f:b0:3b:11:26:07:14:
e2:03:da:66:87:3e:0a:02:8f:8e:24:9d:06:df:6b:af:ed:21:
ac:28:44:0d:6b:84:5a:92:3c:dd:92:41:ae:a4:9f:2b:04:46:
88:3d:d1:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKLAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFGRDU1OTAzNTE2NkUw
NkQ0QzEyRjczNjcwOUE0RjJGMjhDREZCMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxZfeEtDw1AFg9mCGqs5K9Zl96E1OCC3C+9XEttBC4twCmNhdZ
xkjFQSJLQvcLBf49LiPbsiolBKjLTQeGshmKsInUdnHTJL6o1i6X4NGrDFbUaclj
cZeBUnHMecg2nnxCuD4vnjcKVP6MB+fvpdMTYSH2igPH+YXhNWtfl+Q4ezK3YB6v
kKDhj1JunBHUvfiSglinPdbd9MwOub6bllehf3yieLhscmwdXTUilbjsAmRNoWgI
/zm/OIjLDjQUxMDSxPYYyWjJ4+kx57RsRhEkIalCnCo+MO5nJU6DYzMNRkclBSLB
yVYrpGXd7adsu1T3SEwvGlswQ2vjk0VzcqjfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUH9VZA1Fm4G1MEvc2cJpPLyjN+ycwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0g5VlpBMUZtNEcxTUV2YzJj
SnBQTHlqTi15Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wPgwDQYJKoZIhvcNAQELBQADggEBADKmAY5zhonZBOVCrfjrWWtH1pE7yleC9pmF
Dw76/Y2M0KcErXH/nDg/q0Jt9UCucw0bv9dS4UeU2H8oBEKo1O9voBjeWRljn9dv
KERT6g4lTxjKyxLCqzH9DFy+QTCqsAUswsyuC1uMAHq6vvkdHqkvqgjVdr/pTQN3
IjeOpPwrqoP2KqHwQtBQs01TtMFhbhfJXvgBQCiCx6rLU+89FFtNE/fWbPNp2EEu
Gtclzhb2bpFfbakaBQbKJB5jwq78mIOAmqqwP4JpWjpZn1rhhl9oX7A7ESYHFOID
2maHPgoCj44knQbfa6/tIawoRA1rhFqSPN2SQa6knysERog90es=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org