Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmG73axvxJS1aVZXGQeSlXBD_Xw.roa
File: HmG73axvxJS1aVZXGQeSlXBD_Xw.roa (raw, json)
Hash identifier: vxj7hfNROSDr6ulQNfTUM7bk3YVnv38VF3tWz1ni/Fo=
Subject key identifier: 1E:61:BB:DD:AC:6F:C4:94:B5:69:56:57:19:07:92:95:70:43:FD:7C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2943
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmG73axvxJS1aVZXGQeSlXBD_Xw.roa
Signing time: Fri 01 Sep 2023 10:06:19 +0000
ROA not before: Fri 01 Sep 2023 10:06:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10563 (0x2943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1E61BBDDAC6FC494B5695657190792957043FD7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:fa:2a:3b:2a:2e:78:49:ff:31:19:97:a9:
ae:8b:45:2f:a8:20:85:01:99:31:f2:58:69:4c:4c:
82:01:74:e1:60:29:55:71:4f:2e:b9:0c:e3:f8:6a:
de:2f:44:d1:02:30:ca:c2:61:3d:a1:16:37:24:5c:
5f:a3:6d:07:0a:ab:aa:dc:8c:cd:15:33:ba:fa:ff:
bc:ba:18:4d:69:4d:0f:bb:71:b9:44:75:05:4c:88:
79:14:1c:5c:34:6a:b4:da:e1:8f:7b:2c:7a:34:ed:
53:6e:dc:18:2b:2d:a8:5a:76:7e:3c:90:81:85:7a:
ae:da:87:87:4c:6c:7c:38:0d:dd:a9:0d:62:a1:b0:
20:c7:50:d8:54:f9:d6:9c:68:82:fb:69:f4:bc:e5:
7e:9c:46:e5:2a:96:22:b9:17:71:43:1e:a8:96:d0:
a0:39:af:16:24:c4:dd:cf:3c:2a:01:45:68:e9:83:
40:35:23:0c:1f:da:35:ca:b6:5d:a1:0b:94:08:52:
95:81:c6:7c:0c:93:61:29:1d:a2:b3:c0:4f:fb:7e:
35:1c:63:a5:97:66:43:bb:f2:61:ae:83:fe:69:3d:
95:93:0e:16:78:d9:d8:6d:ff:65:cb:eb:34:95:dd:
c5:c0:02:4d:ab:b2:04:e4:d8:fa:a7:6d:2d:36:67:
dd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:BB:DD:AC:6F:C4:94:B5:69:56:57:19:07:92:95:70:43:FD:7C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HmG73axvxJS1aVZXGQeSlXBD_Xw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.40.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:a0:f4:b0:ae:07:b9:e8:32:d3:43:d4:a1:e1:57:a0:d7:27:
f8:a9:e9:ad:04:32:51:1f:24:36:8f:72:18:85:48:c8:58:01:
60:15:77:aa:9e:d6:93:8b:a0:b5:4f:4a:b6:d2:42:bf:82:de:
dc:62:4f:f1:2c:55:94:ca:fc:ae:74:6b:b3:8a:ef:38:4a:f6:
d8:a7:6a:d5:5d:13:ea:71:db:93:69:93:bd:38:92:f6:69:7d:
0c:56:8a:1f:92:fd:cf:7a:76:54:27:4b:aa:61:2a:f2:ad:92:
2d:ef:66:6a:d8:e0:9a:46:00:f2:a5:42:35:25:3b:1e:15:7b:
eb:4e:17:b2:94:2d:90:1d:86:dc:13:88:1f:2e:e0:01:36:3b:
35:a3:d7:e4:c1:72:5d:c6:ed:ba:b2:d5:b6:72:fe:0b:3b:a8:
59:a7:e0:b0:b1:a5:7c:74:2d:3d:58:7c:76:51:b0:9e:31:8d:
95:a7:3e:ab:7a:cf:27:5a:11:94:0a:93:af:50:e8:9d:3e:73:
4d:64:23:4d:09:89:74:a3:4d:44:1c:92:db:15:41:1c:e0:6d:
5c:f6:d9:d4:16:e9:d4:a8:61:15:bd:2d:4d:21:ce:52:02:74:
cc:59:ff:8c:90:ea:87:11:46:93:55:b3:b7:d5:f8:40:34:68:
8e:05:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org