Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IeUDSVTTA0JqS-t58qWT_FWk7Mk.roa
File: IeUDSVTTA0JqS-t58qWT_FWk7Mk.roa (raw, json)
Hash identifier: 91jzzhDIvX/TdphboKrY3gCU6zksOUf3Xe5sEnI7Fds=
Subject key identifier: 21:E5:03:49:54:D3:03:42:6A:4B:EB:79:F2:A5:93:FC:55:A4:EC:C9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IeUDSVTTA0JqS-t58qWT_FWk7Mk.roa
Signing time: Fri 01 Sep 2023 10:05:47 +0000
ROA not before: Fri 01 Sep 2023 10:05:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10447 (0x28cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=21E5034954D303426A4BEB79F2A593FC55A4ECC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1f:ff:b1:fa:54:69:d9:3e:29:4a:02:e9:2b:
88:c3:72:7e:1b:eb:06:ae:a5:b9:57:e8:46:23:dd:
b5:02:07:b2:27:22:4b:f4:e4:46:62:1e:b0:a9:40:
a4:78:18:d1:b8:0d:3f:43:46:ad:14:cf:1a:02:79:
81:01:42:3a:f1:ae:39:60:fd:80:ef:43:df:da:36:
bd:a7:d9:5a:c8:c5:35:4f:28:2f:70:37:0d:c0:7a:
9a:b1:c0:dd:2a:d1:b3:5b:59:68:2f:9c:32:d7:8c:
46:92:d8:13:f6:1e:fe:e7:f3:6f:ca:80:da:d9:fd:
8c:d9:0e:ec:69:e1:12:76:00:e1:95:38:94:a8:e8:
fa:43:a9:c2:b5:31:50:9c:0d:cd:af:d4:e6:f2:78:
09:77:54:ed:ff:2d:b5:ce:0e:b2:1f:f1:50:37:75:
d0:ea:19:ea:b8:aa:85:3c:9f:24:97:81:24:4b:76:
72:4a:99:03:15:99:e9:29:9e:1f:e5:b7:4d:cb:fd:
a1:3e:28:62:ac:c3:d2:5b:06:79:41:24:ad:1c:3c:
6b:22:ae:2f:6a:fa:c2:06:fb:5f:04:fc:c8:e6:5f:
d0:dd:c5:c8:c0:7e:9d:ef:8e:59:8c:59:57:af:d8:
0c:c0:c7:e2:bb:69:3f:b5:cc:d8:54:2b:19:0a:c7:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E5:03:49:54:D3:03:42:6A:4B:EB:79:F2:A5:93:FC:55:A4:EC:C9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IeUDSVTTA0JqS-t58qWT_FWk7Mk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.160.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:9c:fa:18:05:f6:58:8d:9d:fd:1f:57:90:a2:7d:79:eb:30:
18:8a:6f:7b:e7:33:9d:b4:3c:f5:35:d3:d6:d1:4b:60:71:90:
d5:27:be:cf:26:65:40:dd:e1:b2:a1:86:df:bb:5e:29:2c:89:
a3:f9:3b:6b:26:13:07:28:98:b7:c3:a0:f8:7e:78:84:b8:61:
41:d5:94:2c:84:a7:09:5c:79:ae:51:4f:e7:b0:5d:0e:d2:d0:
1c:d2:b3:16:1f:d1:11:a8:ec:3f:07:80:ee:00:61:1c:29:b9:
41:a6:90:da:29:aa:26:fb:a3:60:b3:10:1c:b7:97:67:51:7f:
6f:a5:cf:82:8a:98:65:7c:ce:8c:e9:a3:b3:65:a3:af:6d:eb:
c9:3e:06:c9:d5:7f:9a:b0:b4:bc:1a:6a:96:a4:d8:a7:11:a2:
c3:95:d6:0c:c3:4f:19:48:9b:53:ba:1a:12:fc:53:e2:34:ec:
47:79:2e:b4:b8:81:d0:41:e4:e8:8b:22:fa:09:91:5c:1d:37:
3a:bc:69:47:01:7c:2b:a9:d2:65:69:ff:f3:d1:8b:c7:ee:81:
e6:e4:df:e3:06:e0:c2:59:53:53:f9:cf:a8:60:1e:d9:91:70:
8e:b7:40:92:2d:db:f0:5b:f5:87:8e:da:70:80:3e:de:aa:1b:
57:ed:db:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org