Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JUG2lI09xB-5WjrdSIOrXCSgrfg.roa
File: JUG2lI09xB-5WjrdSIOrXCSgrfg.roa (raw, json)
Hash identifier: /4LYrIOqWhYuE7meo0tqrIoBTwvvDAMC9G8nXNOY3Ic=
Subject key identifier: 25:41:B6:94:8D:3D:C4:1F:B9:5A:3A:DD:48:83:AB:5C:24:A0:AD:F8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2999
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JUG2lI09xB-5WjrdSIOrXCSgrfg.roa
Signing time: Fri 01 Sep 2023 10:06:48 +0000
ROA not before: Fri 01 Sep 2023 10:06:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10649 (0x2999)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2541B6948D3DC41FB95A3ADD4883AB5C24A0ADF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:6e:79:87:4a:ff:f3:6d:23:eb:d9:2b:77:
9b:4a:f3:78:0b:5f:34:b0:54:4c:4e:a3:40:e6:fe:
2e:c4:58:8b:34:8d:3e:17:ba:ba:7f:93:6a:0c:cc:
65:e9:2c:fd:df:c1:0d:95:5d:bd:c5:c0:03:b9:ae:
df:e0:84:05:c1:60:bf:ad:64:7c:da:13:42:74:0c:
ba:7e:ae:65:1c:22:ab:8a:11:e0:e4:63:5c:62:dc:
4b:f2:af:dd:6d:b4:61:e0:ef:74:6c:ba:c8:bb:63:
d1:30:c1:50:b3:ec:93:c2:52:a1:93:87:2c:dd:f4:
e8:f1:76:e5:76:3e:56:70:2a:ff:6a:35:9b:62:8a:
c4:3e:27:24:5f:f4:e8:17:87:4f:58:a4:31:f0:ad:
a4:ef:41:83:80:34:e9:2a:9b:7b:9c:ed:58:5d:b8:
de:19:f0:72:82:b8:b5:77:e6:69:61:5a:1f:0d:fb:
64:60:1c:93:eb:c2:81:80:df:9d:46:58:29:0a:f7:
b2:36:12:43:cd:c8:7a:d6:a2:ce:0e:53:81:f2:7f:
42:94:d2:3b:ff:91:a1:fb:9e:a2:43:c3:52:cd:01:
7f:18:77:91:7e:48:de:f2:a1:59:87:cc:9e:e0:20:
0f:16:88:f4:94:19:42:37:5c:30:49:c0:d0:d7:f7:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:41:B6:94:8D:3D:C4:1F:B9:5A:3A:DD:48:83:AB:5C:24:A0:AD:F8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JUG2lI09xB-5WjrdSIOrXCSgrfg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.92.0/22
Signature Algorithm: sha256WithRSAEncryption
94:88:af:8a:2a:37:70:05:d3:64:d4:5f:3e:45:e4:4a:3c:c2:
37:89:8b:dd:47:ab:3c:68:35:5a:14:eb:33:63:32:62:a9:97:
58:00:c5:e8:50:35:a9:67:99:e6:be:c4:36:c4:e9:b7:0b:c4:
b1:c2:18:ab:c9:12:85:7f:9e:35:0e:d5:8f:17:87:ea:0d:36:
26:1c:ed:59:24:50:66:0d:6d:ed:40:2e:72:e6:0b:7c:b9:e6:
26:75:1c:48:a6:b2:b4:4e:c1:b6:6c:11:77:91:b8:ed:b6:b6:
66:ca:8c:89:cd:92:48:94:ca:6c:a8:94:34:ef:8e:c2:2e:1f:
da:2b:d2:d9:c5:6f:22:3a:32:2c:4e:de:62:ba:2b:a8:06:d3:
6f:20:74:86:d2:6f:a7:e4:da:fe:30:75:38:e6:68:68:a0:99:
b6:1d:93:8f:97:8e:5c:65:4c:44:df:3f:cf:fc:e6:38:dc:69:
47:45:d6:e6:20:d2:c7:b8:bc:5d:71:e5:8f:a5:d1:92:b1:14:
79:2f:ed:88:a4:fe:8f:80:4e:7b:97:44:7d:14:dd:99:d9:61:
b5:d1:f6:f4:2f:bc:3a:ed:df:86:1f:16:ca:ec:9a:66:4d:a5:
10:8f:f8:23:8d:e6:c1:42:1d:1f:c3:c1:b8:5d:49:f3:1a:3b:
a3:80:09:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org