Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K_ECWNTN9iSr8hio9OXVl45S4pA.roa
File: K_ECWNTN9iSr8hio9OXVl45S4pA.roa (raw, json)
Hash identifier: N/jtlF2trKLi3lDi49jo5v5ArcKLAPVKM5oUBlxJsO0=
Subject key identifier: 2B:F1:02:58:D4:CD:F6:24:AB:F2:18:A8:F4:E5:D5:97:8E:52:E2:90
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A2E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K_ECWNTN9iSr8hio9OXVl45S4pA.roa
Signing time: Fri 01 Sep 2023 10:07:35 +0000
ROA not before: Fri 01 Sep 2023 10:07:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10798 (0x2a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2BF10258D4CDF624ABF218A8F4E5D5978E52E290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:79:08:20:db:37:58:c3:99:e8:56:32:27:06:
fa:62:60:17:bd:06:35:d4:60:8c:d9:f6:25:b7:72:
4a:ce:35:2a:64:b7:d7:a7:d1:ae:83:9d:31:b2:5a:
14:e7:07:ca:6f:ea:f0:b0:c3:ee:75:d3:9d:74:d6:
51:a2:d1:50:55:71:32:8b:f9:fd:84:a4:67:13:e3:
14:de:c6:99:8a:18:f3:5c:00:7a:9e:e7:5b:7c:60:
8d:e9:95:6c:f0:a3:47:c8:99:c6:ce:c9:b5:0e:80:
ab:95:b9:40:51:7d:cd:a9:13:89:47:3b:08:20:24:
db:e9:8b:27:ca:cd:4f:5e:5d:96:88:28:b4:0b:00:
cb:24:d4:80:2c:b2:78:40:20:5c:c6:44:ed:2d:55:
e3:c0:c4:b5:2b:75:48:6c:70:aa:cb:48:72:61:34:
25:e1:17:52:01:ec:bd:e8:5a:a8:ff:d9:a5:05:c6:
49:20:60:6d:0d:72:d4:ce:97:4e:ae:52:63:bb:3b:
51:1a:e5:28:fb:0c:ff:ea:8b:43:50:72:f5:c6:b5:
4c:5d:a0:e5:14:e5:6b:a8:2e:37:6d:58:d3:4c:6a:
e1:1e:66:36:1c:06:81:b8:da:ce:79:99:33:d8:07:
b5:7c:33:03:a2:5e:4e:4c:8c:c2:e9:d1:45:5c:27:
90:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F1:02:58:D4:CD:F6:24:AB:F2:18:A8:F4:E5:D5:97:8E:52:E2:90
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/K_ECWNTN9iSr8hio9OXVl45S4pA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.172.0/22
Signature Algorithm: sha256WithRSAEncryption
84:8c:30:00:29:7e:85:5a:1b:d7:70:44:e3:a0:d3:7a:ae:b5:
7d:d2:66:e4:d4:3c:6c:61:fd:bf:33:3a:16:da:8d:f9:44:53:
ea:ce:42:df:8c:c3:8e:53:1b:aa:e0:d0:e1:5f:2b:07:86:85:
27:9b:76:91:95:da:60:1d:fd:4f:ad:41:7e:6c:16:ea:9f:f0:
51:4a:77:1f:5b:b1:e5:bd:07:78:4a:4b:33:21:80:00:94:43:
37:f3:d6:8e:9a:6c:66:8c:1c:b4:ac:25:79:45:ab:46:1a:33:
30:24:ba:d5:5a:f2:c9:c6:a6:47:45:8c:57:20:6b:ad:13:df:
7c:10:cd:99:71:64:6b:8f:50:d5:f4:9a:e0:92:73:a1:44:7a:
d6:71:ea:58:77:1a:47:11:13:b8:a2:d7:94:b0:f7:2a:b4:c5:
50:88:70:09:f8:1e:34:4b:fe:1c:af:0a:f1:b8:30:a0:d4:44:
d7:ca:16:89:b5:c4:ce:3d:40:32:e5:ee:17:a6:80:52:a6:62:
20:7b:f7:4f:bb:05:e7:a7:e5:c6:0d:95:d9:ec:97:15:2e:a7:
3b:3c:0a:51:c3:4c:a3:7c:c7:3e:7a:b7:3f:31:41:1b:3e:cb:
15:14:68:f4:9f:a0:51:99:a0:1c:28:41:bc:c9:fc:f6:6b:89:
45:27:ad:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org