Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KtjCiPpRn3qCP-O7dz48yCZGi4g.roa
File: KtjCiPpRn3qCP-O7dz48yCZGi4g.roa (raw, json)
Hash identifier: JLDIT/kMBmicEzpmvDowlA/R45Kk1X14PTCXnc1PUsA=
Subject key identifier: 2A:D8:C2:88:FA:51:9F:7A:82:3F:E3:BB:77:3E:3C:C8:26:46:8B:88
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2806
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KtjCiPpRn3qCP-O7dz48yCZGi4g.roa
Signing time: Fri 01 Sep 2023 10:04:51 +0000
ROA not before: Fri 01 Sep 2023 10:04:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10246 (0x2806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2AD8C288FA519F7A823FE3BB773E3CC826468B88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:49:65:5b:c6:6d:b6:42:a8:01:32:5c:19:
37:65:74:c5:79:b3:38:8c:4d:bc:d6:28:87:6a:44:
f9:7a:45:2d:8b:6c:7e:bb:1b:7b:e0:d7:99:75:43:
34:4a:99:75:a2:bc:9c:28:d6:4d:cc:78:d7:42:08:
0b:ab:4e:fb:95:63:a2:31:6b:6f:83:8c:40:d3:3e:
89:da:d8:f5:14:54:a0:fa:7c:ee:de:a5:96:b7:94:
8a:b0:7f:d2:95:4a:25:9d:f0:33:8c:82:1a:60:08:
6c:6b:a6:c3:4d:9b:51:3b:c9:9d:78:09:15:30:16:
aa:a7:06:a8:cb:fb:7c:66:e3:ba:02:d9:17:6f:95:
12:ba:69:9f:11:09:54:d2:44:66:7d:ad:de:5d:51:
c4:a2:0b:a5:e8:bf:7b:f6:77:52:57:96:39:2d:d3:
5e:bd:60:44:86:6b:2a:14:47:3c:c6:1f:e7:ea:ce:
db:bc:10:2d:b7:ac:76:56:fc:5e:8b:8e:05:b0:b1:
0f:1d:bf:1f:07:cd:d3:c0:6b:28:5f:d6:cb:15:98:
b3:c8:03:5a:26:e8:c8:dc:dc:11:16:98:f3:50:2e:
c1:0e:cf:49:00:6b:e0:0c:b6:0c:df:7e:8e:c1:be:
eb:50:91:9b:a0:33:ce:32:61:59:fe:dd:d1:a7:a9:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D8:C2:88:FA:51:9F:7A:82:3F:E3:BB:77:3E:3C:C8:26:46:8B:88
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KtjCiPpRn3qCP-O7dz48yCZGi4g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.32.0/20
Signature Algorithm: sha256WithRSAEncryption
01:53:a5:cc:4c:e4:02:52:db:4d:90:b2:f7:9b:39:0c:8e:91:
47:81:71:c9:b0:55:04:c9:ee:4f:d3:82:e2:f9:f8:fb:8d:f0:
81:f0:eb:c6:bb:87:bc:eb:ed:d5:c2:f1:fb:5b:12:bc:9b:90:
28:be:97:d6:48:b3:fd:27:15:db:f3:09:49:8b:ee:dd:c4:29:
e4:b0:e8:e0:95:20:fe:39:e6:42:61:e8:d1:46:16:8a:eb:f6:
d8:88:60:bc:4e:9a:80:2b:60:12:66:64:8d:a1:7f:21:90:d4:
74:66:43:7d:cc:8a:bb:bc:a8:67:db:ef:f6:a9:6c:9b:d8:0d:
7f:3f:22:3b:68:fe:55:4a:8f:4e:9c:6f:35:06:b4:7a:00:49:
c4:b0:cb:27:4c:4e:a2:49:95:d1:c7:55:d7:90:aa:c8:05:b3:
27:e4:27:7c:d6:73:b3:e5:2f:2d:2e:4a:73:89:de:cb:f4:20:
84:e6:ac:23:d3:e0:ac:cd:c4:0e:d6:6b:44:d3:1d:7b:34:1f:
3a:62:f2:80:d7:71:c0:27:84:bb:86:14:a7:87:db:18:8d:df:
a8:50:76:28:20:7d:29:f1:34:50:37:80:e5:ad:4c:f7:8d:9d:
20:b3:5e:07:43:6d:47:d9:1a:8d:f9:17:aa:88:86:6b:90:f2:
b3:86:cd:6e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKAYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA0NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJBRDhDMjg4RkE1MTlG
N0E4MjNGRTNCQjc3M0UzQ0M4MjY0NjhCODgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9TUllW8ZttkKoATJcGTdldMV5sziMTbzWKIdqRPl6RS2LbH67
G3vg15l1QzRKmXWivJwo1k3MeNdCCAurTvuVY6Ixa2+DjEDTPona2PUUVKD6fO7e
pZa3lIqwf9KVSiWd8DOMghpgCGxrpsNNm1E7yZ14CRUwFqqnBqjL+3xm47oC2Rdv
lRK6aZ8RCVTSRGZ9rd5dUcSiC6Xov3v2d1JXljkt0169YESGayoURzzGH+fqztu8
EC23rHZW/F6LjgWwsQ8dvx8HzdPAayhf1ssVmLPIA1om6Mjc3BEWmPNQLsEOz0kA
a+AMtgzffo7BvutQkZugM84yYVn+3dGnqQIvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUKtjCiPpRn3qCP+O7dz48yCZGi4gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0t0akNpUHBSbjNxQ1AtTzdk
ejQ4eUNaR2k0Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
wCAwDQYJKoZIhvcNAQELBQADggEBAAFTpcxM5AJS202QsvebOQyOkUeBccmwVQTJ
7k/TguL5+PuN8IHw68a7h7zr7dXC8ftbErybkCi+l9ZIs/0nFdvzCUmL7t3EKeSw
6OCVIP455kJh6NFGForr9tiIYLxOmoArYBJmZI2hfyGQ1HRmQ33Miru8qGfb7/ap
bJvYDX8/Ijto/lVKj06cbzUGtHoAScSwyydMTqJJldHHVdeQqsgFsyfkJ3zWc7Pl
Ly0uSnOJ3sv0IITmrCPT4KzNxA7Wa0TTHXs0Hzpi8oDXccAnhLuGFKeH2xiN36hQ
diggfSnxNFA3gOWtTPeNnSCzXgdDbUfZGo35F6qIhmuQ8rOGzW4=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org