Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-iGXRa9Eew2rrjOtzstcqw-Hew.roa
File: L-iGXRa9Eew2rrjOtzstcqw-Hew.roa (raw, json)
Hash identifier: 3k1GMk/BPv98fRS+h/w3wrShGLnlPLi/0m2GZsqyeaY=
Subject key identifier: 2F:E8:86:5D:16:BD:11:EC:36:AE:B8:CE:B7:3B:2D:72:AC:3E:1D:EC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28F9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-iGXRa9Eew2rrjOtzstcqw-Hew.roa
Signing time: Fri 01 Sep 2023 10:06:00 +0000
ROA not before: Fri 01 Sep 2023 10:06:00 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.192.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10489 (0x28f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:00 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2FE8865D16BD11EC36AEB8CEB73B2D72AC3E1DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:4c:31:9e:dc:9a:f1:7e:18:38:2d:32:3a:
75:b8:f0:03:c4:76:55:a7:fb:d4:13:29:10:ec:83:
55:41:0a:01:cd:f9:b2:35:44:05:ba:31:e2:9e:a7:
c6:c3:b8:6e:36:db:61:b3:46:de:46:fa:4d:1b:db:
6d:8a:13:81:a1:79:d2:ce:15:0b:3b:52:d3:cd:62:
ea:4a:6a:e2:19:c9:0d:37:c8:50:6b:5d:4e:5f:4f:
91:c2:d6:dc:73:7c:85:fc:79:cd:66:34:87:d0:8e:
12:61:9b:ab:ea:1f:2c:9e:0b:ad:81:bf:56:ff:37:
4e:5d:e5:90:c8:4f:19:79:e7:29:be:4b:70:83:24:
8f:b5:46:de:1e:97:b3:35:ad:7d:d5:1b:60:07:d1:
43:63:d8:a3:23:3d:6e:c7:cd:ab:63:9b:68:1d:39:
e6:67:16:b6:d8:18:7d:ce:21:f4:ac:b3:56:a6:4a:
74:9e:30:cf:c8:fb:12:7a:aa:e5:fa:39:88:3c:c0:
c3:ce:4f:85:9f:e4:59:22:6b:47:4d:e7:1c:53:44:
18:6a:35:7d:ec:cc:f3:38:c7:80:3c:ed:53:13:d3:
6d:91:22:fc:ab:5d:28:b6:33:b2:77:58:f3:50:7a:
74:7f:ec:6a:40:73:26:0c:fb:b0:c6:f5:7a:32:1b:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E8:86:5D:16:BD:11:EC:36:AE:B8:CE:B7:3B:2D:72:AC:3E:1D:EC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/L-iGXRa9Eew2rrjOtzstcqw-Hew.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/24
Signature Algorithm: sha256WithRSAEncryption
79:79:dc:42:48:fb:d0:ca:c5:b3:6d:d2:fe:df:70:91:7c:0b:
0b:26:4a:af:66:86:6d:6a:30:82:3d:c2:67:85:97:3a:c0:0a:
91:02:4e:36:a2:b9:1c:65:54:b3:9b:a8:e8:dc:63:dc:a7:dc:
4d:48:4f:6d:f6:b7:d5:af:70:48:be:b9:1c:c4:a6:20:26:45:
9b:2a:ef:9c:5c:06:5b:9b:a7:57:52:ff:e8:83:89:6a:6c:27:
8c:b5:21:e7:b9:00:53:65:d4:9b:00:29:f8:77:02:14:7f:8b:
84:6f:55:43:ad:ea:2f:ac:02:ef:e6:a3:12:90:c3:9b:cd:6b:
ef:89:b2:85:ed:90:e6:22:1d:21:e1:38:7a:01:4c:ae:df:56:
d5:db:68:88:8a:6c:f6:54:c7:ec:2b:f5:d7:2c:ce:47:58:97:
72:49:7c:97:63:7b:f7:5f:c0:3d:0d:8e:d9:5c:31:b1:49:d1:
25:ed:7c:5a:2f:9e:fc:f5:f8:cb:42:b5:89:04:14:00:40:84:
07:89:32:1e:c4:5d:f5:42:37:5e:5d:17:23:80:5a:90:71:e2:
70:72:25:ad:75:cc:76:e3:2e:11:c1:1d:24:ea:26:e5:88:09:
72:23:93:50:00:71:f2:98:70:45:a6:28:7e:ac:45:6c:cc:0b:
0e:a3:9d:93
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKPkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2MDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDJGRTg4NjVEMTZCRDEx
RUMzNkFFQjhDRUI3M0IyRDcyQUMzRTFERUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDTakwxntya8X4YOC0yOnW48APEdlWn+9QTKRDsg1VBCgHN+bI1
RAW6MeKep8bDuG4222GzRt5G+k0b222KE4GhedLOFQs7UtPNYupKauIZyQ03yFBr
XU5fT5HC1txzfIX8ec1mNIfQjhJhm6vqHyyeC62Bv1b/N05d5ZDITxl55ym+S3CD
JI+1Rt4el7M1rX3VG2AH0UNj2KMjPW7Hzatjm2gdOeZnFrbYGH3OIfSss1amSnSe
MM/I+xJ6quX6OYg8wMPOT4Wf5Fkia0dN5xxTRBhqNX3szPM4x4A87VMT022RIvyr
XSi2M7J3WPNQenR/7GpAcyYM+7DG9XoyG6NtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUL+iGXRa9Eew2rrjOtzstcqw+HewwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0wtaUdYUmE5RWV3MnJyak90
enN0Y3F3LUhldy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wJAwDQYJKoZIhvcNAQELBQADggEBAHl53EJI+9DKxbNt0v7fcJF8CwsmSq9mhm1q
MII9wmeFlzrACpECTjaiuRxlVLObqOjcY9yn3E1IT232t9WvcEi+uRzEpiAmRZsq
75xcBlubp1dS/+iDiWpsJ4y1Iee5AFNl1JsAKfh3AhR/i4RvVUOt6i+sAu/moxKQ
w5vNa++JsoXtkOYiHSHhOHoBTK7fVtXbaIiKbPZUx+wr9dcszkdYl3JJfJdje/df
wD0NjtlcMbFJ0SXtfFovnvz1+MtCtYkEFABAhAeJMh7EXfVCN15dFyOAWpBx4nBy
Ja11zHbjLhHBHSTqJuWICXIjk1AAcfKYcEWmKH6sRWzMCw6jnZM=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org