Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/InIljJ4yxnNyH4VlW_X3TbAmUtc.roa
File: InIljJ4yxnNyH4VlW_X3TbAmUtc.roa (raw, json)
Hash identifier: 6BumevvZD9p2OkzUSiY0xkye8jIE56vDpxtNcRlgJhE=
Subject key identifier: 22:72:25:8C:9E:32:C6:73:72:1F:85:65:5B:F5:F7:4D:B0:26:52:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 280A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/InIljJ4yxnNyH4VlW_X3TbAmUtc.roa
Signing time: Fri 01 Sep 2023 10:04:52 +0000
ROA not before: Fri 01 Sep 2023 10:04:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.195.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10250 (0x280a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2272258C9E32C673721F85655BF5F74DB02652D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:08:ef:9b:e4:7f:83:88:48:75:ac:7b:7c:63:
d9:80:99:8a:c4:9e:ba:0f:69:0c:38:b6:1a:94:f6:
3e:63:a0:e0:7d:00:70:ac:f4:a4:c1:10:9b:6f:f0:
eb:1c:de:31:4b:dc:5b:ae:a4:4c:0d:8c:43:a5:aa:
76:d4:b0:ab:af:01:56:21:d2:24:20:ed:5d:64:9f:
67:a5:78:9d:8b:be:e2:f0:c3:ec:88:f2:c3:d0:75:
b7:aa:dd:85:cc:a3:51:23:33:99:a8:66:01:7a:eb:
34:35:22:08:5f:22:2e:50:a2:81:b6:df:72:b4:fe:
d5:f5:5b:72:f3:37:6b:1e:ce:84:94:bc:3b:c0:2a:
db:cb:b9:86:ef:f3:43:11:5a:d5:e1:1f:01:e2:44:
aa:85:66:1f:6e:73:39:8a:44:de:5b:48:8d:56:24:
52:9c:2e:52:3f:6e:43:85:2d:30:0f:6a:76:f9:25:
90:92:9a:20:ca:18:31:eb:d6:30:dc:46:11:93:ab:
a8:8a:75:31:db:30:6c:a2:56:80:fa:d7:81:d8:80:
8e:2a:f5:79:e2:4a:41:32:2f:16:6e:c6:f1:16:e0:
95:d0:3f:54:57:04:0f:e2:98:ad:83:21:aa:4c:dc:
be:b7:82:d8:fa:b8:f9:7c:74:34:4d:c2:1d:4c:48:
10:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:25:8C:9E:32:C6:73:72:1F:85:65:5B:F5:F7:4D:B0:26:52:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/InIljJ4yxnNyH4VlW_X3TbAmUtc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/19
Signature Algorithm: sha256WithRSAEncryption
11:71:a3:d5:85:8a:c2:f7:74:ec:f9:c1:ab:83:14:a6:67:f6:
e0:92:4b:c4:16:3b:c4:51:24:08:8a:3a:07:04:c3:c0:9c:aa:
cf:47:87:62:85:a5:df:bb:8b:0e:6a:86:5a:a6:fc:8c:e9:ec:
06:de:83:90:42:e6:a8:d2:91:dd:23:6a:aa:40:2a:65:74:e2:
5d:0e:13:8a:1a:31:af:6f:8a:e9:c8:6f:7f:6e:55:c8:6e:9e:
0a:d7:59:80:43:f4:0b:13:df:1b:ea:5d:21:22:66:3b:eb:e2:
b2:75:a3:84:24:2f:b8:d4:0a:a9:fb:10:14:9e:42:8c:94:4e:
e5:d0:db:97:db:cb:a7:ea:0d:26:21:61:9d:c9:b9:c3:5a:eb:
cd:31:74:7d:80:30:09:83:26:7b:28:a1:da:23:fa:0d:c1:a5:
66:95:83:47:40:92:04:13:fa:ab:68:23:fd:2d:22:00:00:d6:
56:8e:69:a6:1c:7c:e2:67:d5:a9:80:b3:dd:2a:ad:58:d8:c9:
c7:e1:11:2a:c6:31:10:b2:9c:55:ea:fa:be:2c:30:ee:b1:b5:
3a:1e:de:42:42:fb:44:83:cd:88:0b:0c:5d:f5:1e:2f:e5:d5:
ff:a7:28:51:32:d7:a0:ac:82:db:35:85:5b:17:eb:e4:f6:9e:
75:e3:ce:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org