Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HnnOU3Kr6QsY0o3QAMULfs6PqZg.roa
File: HnnOU3Kr6QsY0o3QAMULfs6PqZg.roa (raw, json)
Hash identifier: gOJzWm+jcyCuperTmbjIUhOldw0/mOpOcOaMvA/+rEc=
Subject key identifier: 1E:79:CE:53:72:AB:E9:0B:18:D2:8D:D0:00:C5:0B:7E:CE:8F:A9:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B1C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HnnOU3Kr6QsY0o3QAMULfs6PqZg.roa
Signing time: Fri 01 Sep 2023 10:09:51 +0000
ROA not before: Fri 01 Sep 2023 10:09:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11036 (0x2b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1E79CE5372ABE90B18D28DD000C50B7ECE8FA998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:41:fb:a0:39:83:5a:9e:e5:50:88:fe:e5:
a3:93:1b:c2:c4:9b:32:89:0c:ad:ae:f3:69:ca:72:
03:43:2f:5c:4e:27:d7:97:d4:03:57:36:17:3b:df:
49:c7:37:ee:42:eb:d1:79:7c:3c:4f:03:f3:4c:fe:
7e:02:bd:68:f6:90:1c:0d:b2:57:1b:89:40:cb:ce:
c3:b1:4b:84:04:1f:8e:69:f7:36:67:63:e5:e5:20:
c5:98:10:1d:27:25:a8:3a:18:80:a9:ae:13:93:b0:
fd:28:7b:d4:4e:6d:4b:5c:c8:98:36:bd:b5:f9:a6:
16:8a:a6:a7:40:74:2d:f5:c6:ab:7a:41:2f:9f:99:
7e:ac:76:fa:84:97:09:2e:b5:94:65:36:af:53:2f:
1a:85:f1:07:a2:57:c6:45:d5:76:44:ec:d6:11:4e:
8d:e8:81:4a:27:30:79:fc:ee:cd:b0:3c:30:5f:08:
d1:9c:97:4e:9c:4a:31:9b:5a:21:22:7a:30:b1:0f:
74:2e:b1:ef:13:fd:b4:8f:ea:22:bb:2b:b6:e4:d9:
f0:9a:73:e0:17:eb:b3:4c:6e:21:72:71:1d:bf:93:
95:a1:81:09:7f:29:16:bc:97:c1:ac:8e:9d:22:15:
83:64:b4:d5:a3:e6:45:fb:41:07:30:59:8b:76:17:
f8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:79:CE:53:72:AB:E9:0B:18:D2:8D:D0:00:C5:0B:7E:CE:8F:A9:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HnnOU3Kr6QsY0o3QAMULfs6PqZg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.40.0/22
Signature Algorithm: sha256WithRSAEncryption
02:fa:f5:23:75:c0:dc:b2:ed:cb:29:d3:c7:c2:1c:8e:fe:d4:
c0:66:ae:27:2b:60:05:e2:f6:21:ba:f8:14:3c:4b:0a:8f:7a:
12:50:71:24:f6:21:48:39:8d:c2:1b:b5:b9:c1:62:67:51:dd:
97:a1:4e:70:2b:6c:fb:d9:7b:07:0d:82:4f:6b:aa:a1:a8:74:
29:56:68:50:68:a6:bf:0a:c3:5d:ed:97:aa:98:e3:fe:50:c7:
42:6e:d5:3d:4c:ef:8d:97:41:42:a7:f5:1e:f5:f7:17:e8:c8:
de:16:46:e0:fc:8a:55:7b:c1:6a:e5:6c:05:5e:be:5f:70:9a:
87:d6:7b:11:2d:17:76:a6:a4:25:a5:14:c3:81:72:ce:64:c6:
dd:17:ad:7e:aa:27:90:b3:d7:73:84:c0:26:bd:58:d3:38:7c:
39:b2:95:44:fe:b8:26:66:ef:3c:30:a2:a9:76:c0:c3:de:6f:
62:d0:80:33:2a:45:30:8a:f4:de:31:9d:84:82:32:51:20:15:
ac:96:c6:88:be:13:e6:13:c8:7e:ba:4e:f6:5c:5f:c8:19:63:
5c:70:97:e4:c7:14:46:80:8b:55:47:04:90:c8:21:58:50:55:
a4:87:bf:bb:ea:f1:16:52:99:b8:3c:ce:18:5f:30:14:ba:5b:
93:d3:fe:e9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKxwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA5NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFFNzlDRTUzNzJBQkU5
MEIxOEQyOEREMDAwQzUwQjdFQ0U4RkE5OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdmEH7oDmDWp7lUIj+5aOTG8LEmzKJDK2u82nKcgNDL1xOJ9eX
1ANXNhc730nHN+5C69F5fDxPA/NM/n4CvWj2kBwNslcbiUDLzsOxS4QEH45p9zZn
Y+XlIMWYEB0nJag6GICprhOTsP0oe9RObUtcyJg2vbX5phaKpqdAdC31xqt6QS+f
mX6sdvqElwkutZRlNq9TLxqF8QeiV8ZF1XZE7NYRTo3ogUonMHn87s2wPDBfCNGc
l06cSjGbWiEiejCxD3Quse8T/bSP6iK7K7bk2fCac+AX67NMbiFycR2/k5WhgQl/
KRa8l8Gsjp0iFYNktNWj5kX7QQcwWYt2F/jLAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHnnOU3Kr6QsY0o3QAMULfs6PqZgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hubk9VM0tyNlFzWTBvM1FB
TVVMZnM2UHFaZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wCgwDQYJKoZIhvcNAQELBQADggEBAAL69SN1wNyy7csp08fCHI7+1MBmricrYAXi
9iG6+BQ8SwqPehJQcST2IUg5jcIbtbnBYmdR3ZehTnArbPvZewcNgk9rqqGodClW
aFBopr8Kw13tl6qY4/5Qx0Ju1T1M742XQUKn9R719xfoyN4WRuD8ilV7wWrlbAVe
vl9wmofWexEtF3ampCWlFMOBcs5kxt0XrX6qJ5Cz13OEwCa9WNM4fDmylUT+uCZm
7zwwoql2wMPeb2LQgDMqRTCK9N4xnYSCMlEgFayWxoi+E+YTyH66TvZcX8gZY1xw
l+THFEaAi1VHBJDIIVhQVaSHv7vq8RZSmbg8zhhfMBS6W5PT/uk=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org