Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JCnB1cqiLzrBxzMtV0ydyDC2iGs.roa
File: JCnB1cqiLzrBxzMtV0ydyDC2iGs.roa (raw, json)
Hash identifier: mjSt0AD60BRN4BjKccxwaRHtgj+c4BlD+jlNA7gsaac=
Subject key identifier: 24:29:C1:D5:CA:A2:2F:3A:C1:C7:33:2D:57:4C:9D:C8:30:B6:88:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 283E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JCnB1cqiLzrBxzMtV0ydyDC2iGs.roa
Signing time: Fri 01 Sep 2023 10:05:06 +0000
ROA not before: Fri 01 Sep 2023 10:05:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.123.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10302 (0x283e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2429C1D5CAA22F3AC1C7332D574C9DC830B6886B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f7:96:50:5e:3b:ba:f4:6c:a2:08:b6:d5:f7:
2f:ea:65:27:54:3b:ce:07:8f:3d:9f:ff:51:0c:36:
e5:4a:6a:d5:ae:fe:1c:24:f0:2d:49:42:a7:c1:be:
34:dd:9f:26:9b:03:27:bf:9c:d8:e5:f3:87:ef:b0:
ce:69:9f:fe:fa:26:89:74:9d:fd:4c:18:5e:93:e1:
ac:65:9d:00:fe:56:c5:5e:e5:69:b2:2f:99:33:14:
6c:0e:55:cd:78:28:b5:7a:0d:0f:d3:c6:44:bb:b2:
4f:26:48:6d:9f:dc:c0:d9:62:da:96:c3:e2:59:5f:
29:b7:3a:4c:f8:27:53:71:e3:25:2e:e5:57:c1:56:
ce:75:6f:18:96:f3:1d:df:55:57:0c:62:fb:40:00:
82:ca:d8:ef:18:2f:44:2b:52:3a:06:74:db:f2:24:
d2:4d:24:96:a4:1f:3c:e3:08:c3:18:a5:cf:19:3e:
85:1b:ed:69:37:bc:a6:de:4e:76:fc:12:bb:f2:d8:
fa:3c:2b:6d:f6:b2:09:48:6e:22:11:be:0c:53:22:
fb:e7:71:92:ee:45:8e:41:76:f3:ee:16:74:7c:06:
4f:1a:76:2d:1b:cb:42:a7:d7:77:09:30:c6:3b:41:
af:f5:f1:46:b9:db:77:16:9b:a0:17:2b:c5:b6:81:
c4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:29:C1:D5:CA:A2:2F:3A:C1:C7:33:2D:57:4C:9D:C8:30:B6:88:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JCnB1cqiLzrBxzMtV0ydyDC2iGs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.128/25
Signature Algorithm: sha256WithRSAEncryption
30:b0:2f:8a:ad:bd:15:14:cd:c1:67:a8:b1:87:fa:b3:e4:5b:
27:98:0e:ef:a1:02:44:1c:12:2d:b6:c7:ee:c9:57:3f:07:d6:
ea:ff:d9:de:a4:50:80:35:e5:86:c8:f7:b4:dd:bc:8c:35:26:
39:47:4f:17:b2:61:5c:88:a7:06:ef:fd:47:5a:86:b6:30:a4:
28:97:fe:40:5e:d8:83:a1:79:14:dd:42:56:f3:5c:a5:5a:d1:
c8:36:6a:e5:7a:19:43:ef:a4:e6:3a:1a:06:ea:c1:2a:a9:a6:
42:3f:b0:44:27:24:02:69:b2:1e:c8:c6:bc:ca:b9:56:f2:39:
68:91:d4:7b:58:c4:a6:e5:b5:b9:ae:21:63:81:4e:d0:88:67:
81:7e:43:a2:29:de:db:5d:27:44:2c:00:01:26:86:59:7f:4a:
d3:f5:a0:9e:c2:41:3f:d5:3b:be:44:3a:21:63:69:8a:43:0d:
47:43:f7:67:14:ad:6a:d4:88:92:23:97:27:29:e9:d1:ea:e2:
ed:84:35:31:d4:ab:1f:93:12:fd:6d:ca:f3:99:a7:39:2a:4a:
90:d9:30:3d:b8:43:43:6c:e3:05:7c:29:c5:7d:e4:c9:f4:fe:
48:f4:d9:69:e4:52:8f:7d:55:11:c6:55:f5:fe:0a:9e:fc:47:
5b:86:0f:f7
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICKD4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDI0MjlDMUQ1Q0FBMjJG
M0FDMUM3MzMyRDU3NEM5REM4MzBCNjg4NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF95ZQXju69GyiCLbV9y/qZSdUO84Hjz2f/1EMNuVKatWu/hwk
8C1JQqfBvjTdnyabAye/nNjl84fvsM5pn/76Jol0nf1MGF6T4axlnQD+VsVe5Wmy
L5kzFGwOVc14KLV6DQ/TxkS7sk8mSG2f3MDZYtqWw+JZXym3Okz4J1Nx4yUu5VfB
Vs51bxiW8x3fVVcMYvtAAILK2O8YL0QrUjoGdNvyJNJNJJakHzzjCMMYpc8ZPoUb
7Wk3vKbeTnb8Ervy2Po8K232sglIbiIRvgxTIvvncZLuRY5BdvPuFnR8Bk8adi0b
y0Kn13cJMMY7Qa/18Ua523cWm6AXK8W2gcTVAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUJCnB1cqiLzrBxzMtV0ydyDC2iGswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pDbkIxY3FpTHpyQnh6TXRW
MHlkeURDMmlHcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQfT
THuAMA0GCSqGSIb3DQEBCwUAA4IBAQAwsC+Krb0VFM3BZ6ixh/qz5FsnmA7voQJE
HBIttsfuyVc/B9bq/9nepFCANeWGyPe03byMNSY5R08XsmFciKcG7/1HWoa2MKQo
l/5AXtiDoXkU3UJW81ylWtHINmrlehlD76TmOhoG6sEqqaZCP7BEJyQCabIeyMa8
yrlW8jlokdR7WMSm5bW5riFjgU7QiGeBfkOiKd7bXSdELAABJoZZf0rT9aCewkE/
1Tu+RDohY2mKQw1HQ/dnFK1q1IiSI5cnKenR6uLthDUx1KsfkxL9bcrzmac5KkqQ
2TA9uENDbOMFfCnFfeTJ9P5I9Nlp5FKPfVURxlX1/gqe/Edbhg/3
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org