Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KfJNmJdXLRBlvQLZGeO5WOBQOHc.roa
File: KfJNmJdXLRBlvQLZGeO5WOBQOHc.roa (raw, json)
Hash identifier: sA+07uvadS2+zwCTZ8PjJTQ2aIdx3bX+Dm8aZNl8OqU=
Subject key identifier: 29:F2:4D:98:97:57:2D:10:65:BD:02:D9:19:E3:B9:58:E0:50:38:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2898
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KfJNmJdXLRBlvQLZGeO5WOBQOHc.roa
Signing time: Fri 01 Sep 2023 10:05:33 +0000
ROA not before: Fri 01 Sep 2023 10:05:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10392 (0x2898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=29F24D9897572D1065BD02D919E3B958E0503877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:d5:88:67:92:ae:2c:d5:a8:e5:7c:24:db:
24:14:20:71:44:7e:21:fa:0c:e4:8b:36:d9:a0:7c:
c4:18:4c:aa:a7:a5:5b:cb:43:0e:81:ee:b8:24:a2:
fb:a0:f0:27:ac:55:a6:0c:49:71:18:2c:b9:da:10:
72:a2:a6:9c:21:e3:94:4c:38:bd:a1:75:fd:49:24:
25:23:39:69:33:cc:81:0c:99:63:86:e7:fc:17:cf:
95:02:a9:0f:d9:67:b7:1b:91:b7:36:e7:e2:4b:06:
b5:09:cf:07:cf:7c:7b:78:95:4f:f0:cc:11:46:f8:
e6:42:c4:b6:c7:1c:0b:f8:ab:dc:27:3d:99:16:a3:
c6:8a:02:71:47:38:e1:4c:08:df:75:90:bc:0e:6d:
5a:45:5f:8a:88:dd:70:c5:b8:5b:c6:8e:cb:9b:24:
23:d1:b4:6d:d5:9b:b0:93:c1:08:97:c3:c1:23:84:
c6:a4:aa:c4:c8:2b:18:0a:62:d6:3e:3f:bc:14:2e:
79:8f:c7:13:93:53:e4:3d:e4:5d:e8:8c:7c:a0:51:
42:89:b0:84:a7:08:e7:79:a2:c7:99:59:ba:f3:f2:
7f:6f:1e:5e:cf:31:73:ac:e6:90:be:ae:cf:70:21:
1e:ca:92:b6:61:d6:5f:33:fc:8c:62:f9:60:b6:6d:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:4D:98:97:57:2D:10:65:BD:02:D9:19:E3:B9:58:E0:50:38:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KfJNmJdXLRBlvQLZGeO5WOBQOHc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.0/24
Signature Algorithm: sha256WithRSAEncryption
54:50:b0:46:3b:3e:fe:9b:66:3b:45:2a:4b:fe:3c:16:a0:70:
88:10:3a:dd:a9:be:a7:d9:5d:63:91:30:4b:70:be:0b:33:e8:
61:e2:47:1d:b0:df:d0:55:25:bf:c4:b2:b2:bf:4d:ab:11:7c:
23:b9:68:ec:ca:88:13:c4:f9:91:bb:3f:bb:41:a4:6e:ff:d8:
d9:47:ee:81:8a:13:f6:bd:ee:71:59:24:6d:8a:59:5a:92:b6:
1d:1a:77:31:79:4b:10:ce:c5:98:22:7c:ad:83:3b:0e:17:a9:
70:de:2a:db:72:85:cb:35:8b:78:33:cc:fa:5f:5e:5f:a4:bd:
df:8d:c4:ff:c9:a8:ad:d7:d5:2e:0c:53:1b:49:d9:0b:65:ca:
34:f0:75:72:f2:c6:b5:a4:72:8c:06:22:98:25:07:2e:d2:a2:
3c:37:da:d6:2a:25:f9:b8:0f:2b:f7:3b:a1:40:56:6a:7c:3d:
15:25:ad:45:d8:3b:77:21:94:f2:32:04:32:8d:37:ce:eb:c4:
fd:85:2a:e8:35:06:98:61:6e:19:ba:9c:33:ec:eb:00:b4:9f:
7a:75:7d:60:19:37:59:5f:7d:1b:2a:ca:78:db:5d:75:6c:3d:
c7:7c:50:40:9d:39:e4:63:63:96:8e:9c:ff:8b:8b:64:a7:27:
f9:69:42:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org