Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IRN71tlMZOv7k0XJcvO8XuGRSL4.roa
File: IRN71tlMZOv7k0XJcvO8XuGRSL4.roa (raw, json)
Hash identifier: 0BJDSSc/X2kOyd9TvtINxn5IVHJz8RGQEG3UFudyrFQ=
Subject key identifier: 21:13:7B:D6:D9:4C:64:EB:FB:93:45:C9:72:F3:BC:5E:E1:91:48:BE
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2927
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IRN71tlMZOv7k0XJcvO8XuGRSL4.roa
Signing time: Fri 01 Sep 2023 10:06:13 +0000
ROA not before: Fri 01 Sep 2023 10:06:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10535 (0x2927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=21137BD6D94C64EBFB9345C972F3BC5EE19148BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a9:cf:09:e0:b7:b4:37:20:00:9b:d2:b3:ff:
24:8a:69:7e:06:4a:18:02:3e:f6:9f:d3:1f:f1:de:
73:e8:74:2d:d1:f7:91:7e:08:de:cd:e5:28:a2:a8:
06:71:48:86:b2:c2:6d:26:62:2e:53:b1:8c:2e:6a:
a5:5b:6a:21:3c:d4:b9:98:7e:ba:6e:1a:8d:f2:f7:
06:67:0e:60:e9:81:2f:31:f8:bd:5d:42:b1:2d:df:
d0:1b:9a:48:bb:63:31:6f:10:44:2f:6e:00:3b:36:
47:68:91:24:6b:f6:b8:17:0c:8e:4a:d6:9d:92:25:
4d:05:86:d5:8d:96:c6:92:71:85:88:6a:3d:28:de:
7a:0a:d3:ce:be:30:fb:87:47:11:97:b1:0a:c3:15:
87:28:4f:1d:e9:86:42:de:6a:32:29:91:fd:85:f6:
2a:25:c0:a2:7f:2f:98:f3:ce:b6:c6:54:bc:07:56:
8b:69:83:b2:96:bb:2e:00:41:6c:8b:0a:cc:2c:18:
3d:d6:3f:04:5a:61:fc:f8:c5:b6:12:38:df:31:01:
33:2b:19:f5:d9:09:e8:51:70:62:c1:c8:c2:76:41:
1a:01:d6:c6:4a:ab:3d:7c:23:5d:fa:98:1a:6d:a1:
02:fc:81:41:bc:0d:0d:8a:da:27:fb:b0:89:ef:d7:
8d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:13:7B:D6:D9:4C:64:EB:FB:93:45:C9:72:F3:BC:5E:E1:91:48:BE
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IRN71tlMZOv7k0XJcvO8XuGRSL4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.64.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:fa:df:6a:8a:6b:15:71:6e:55:63:fb:7c:00:f2:8c:77:30:
65:ac:7c:bc:08:82:83:fc:bc:7c:96:b8:ac:8b:5c:0e:39:6d:
69:d9:b2:7b:58:7c:2d:5c:b0:c4:5e:c5:6e:1c:ce:db:92:2f:
41:1e:e6:d1:a9:49:bb:7e:e8:11:7a:1d:d2:9f:54:c3:0c:a0:
1a:e7:68:74:a5:f2:bd:14:df:33:89:58:ee:84:6a:56:e9:39:
e3:f9:43:fe:60:2a:7a:c5:46:9f:5f:66:9d:81:c7:43:98:83:
a7:f1:b8:f5:e2:f6:f9:2b:44:d7:e6:35:36:51:aa:07:98:5b:
6e:59:89:38:d0:31:90:ce:53:39:be:e1:35:6c:67:18:e2:4e:
50:74:c5:65:8e:93:7d:62:0a:85:db:40:11:ea:6c:2a:f8:0f:
44:4a:97:58:9b:50:7f:2f:eb:c3:c4:11:60:8d:19:29:5d:f0:
e2:97:62:1b:0f:eb:d0:44:39:cd:b9:81:a9:fa:76:8d:c5:9b:
57:4b:70:b7:70:27:0b:91:42:63:fb:d6:72:4c:61:ac:a5:eb:
6f:c9:1c:69:83:1e:d2:f4:db:7b:9d:8c:57:20:e9:d3:5f:b0:
8c:ab:4d:a7:f6:48:ee:48:4e:a3:4b:fe:69:55:ac:97:27:ed:
2c:15:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org