Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LEy_3_YHe1OC7YhD7L4Otn5x_z4.roa
File: LEy_3_YHe1OC7YhD7L4Otn5x_z4.roa (raw, json)
Hash identifier: WaQ7JvL28i5+zz60gTusD7VxdnxGg+OSbQvCwj9uVJc=
Subject key identifier: 2C:4C:BF:DF:F6:07:7B:53:82:ED:88:43:EC:BE:0E:B6:7E:71:FF:3E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 293C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LEy_3_YHe1OC7YhD7L4Otn5x_z4.roa
Signing time: Fri 01 Sep 2023 10:06:18 +0000
ROA not before: Fri 01 Sep 2023 10:06:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10556 (0x293c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2C4CBFDFF6077B5382ED8843ECBE0EB67E71FF3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f8:ef:08:a5:dc:0d:bb:c6:e4:57:22:28:96:
ea:6c:50:81:c7:b6:35:82:8e:ed:ca:55:01:f3:0d:
e9:36:d0:c8:b5:00:bb:53:d2:35:cd:54:16:e6:63:
84:28:64:a7:82:52:d4:37:76:c4:ce:17:88:fc:a0:
32:82:e4:71:50:c8:40:00:a9:c7:f3:34:8e:24:1e:
3e:67:de:df:bf:2f:e9:cf:26:bb:1d:16:6b:6f:68:
32:b4:b3:d7:1a:4c:90:a5:b1:5d:a1:ec:cb:cb:73:
5c:c0:38:df:d2:b1:0d:fc:6a:8b:f5:30:0c:c2:4a:
c0:3e:ba:19:dd:d9:a0:e8:00:7b:b0:55:38:79:3a:
da:35:76:c6:9e:8d:49:5d:01:0f:19:92:24:3b:05:
35:82:ef:d1:a0:b6:11:8d:5e:75:e4:ce:cb:22:f0:
87:5f:ca:7a:d3:28:fb:8e:0a:0a:ec:e6:43:d4:b2:
6a:f8:26:a6:9b:db:b1:bf:38:ab:f4:23:a9:35:01:
29:a5:78:77:ea:83:26:5c:49:81:14:1c:a5:f0:40:
98:a8:1f:f9:40:3a:17:d2:3f:72:d9:f1:c0:0e:eb:
5e:d6:7c:b4:dc:ba:de:b1:29:d4:42:8b:dd:0c:48:
9d:4f:d6:0f:6f:2e:64:16:1b:0e:80:35:bb:f8:55:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4C:BF:DF:F6:07:7B:53:82:ED:88:43:EC:BE:0E:B6:7E:71:FF:3E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LEy_3_YHe1OC7YhD7L4Otn5x_z4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.64.0/21
Signature Algorithm: sha256WithRSAEncryption
40:c8:65:1f:43:0d:58:3f:2d:3d:55:b9:4c:26:55:a9:d3:0e:
bd:1a:e7:48:8f:88:35:0a:61:b6:8b:5f:5e:ea:e2:26:e3:e3:
57:97:ec:26:f4:14:05:0b:42:6d:e7:3c:96:83:62:dc:43:5c:
1b:c1:21:c1:25:c4:ec:18:71:26:93:d3:9d:17:8b:11:69:0b:
30:6a:83:56:da:50:e9:41:f2:fc:2c:58:3a:ff:a9:62:82:13:
cf:84:4b:f6:91:ed:09:0a:d2:ac:db:31:56:c9:82:5b:6e:be:
dd:e5:44:25:d3:2d:a3:4c:4b:fd:95:e0:47:0b:72:f6:30:b2:
5a:53:1d:e3:9b:c2:10:02:75:72:18:af:16:f3:5d:13:ee:0e:
7d:27:28:c1:4b:0c:20:84:1b:09:bc:56:c3:51:fa:4c:50:d6:
62:a5:f9:ea:51:90:18:82:2e:a3:9d:22:32:23:f3:94:3e:ff:
bb:f8:63:98:e5:26:53:ac:b2:37:ea:24:dc:c8:c1:66:a8:32:
91:aa:48:7e:fc:ed:8d:48:1a:7a:81:67:18:77:c9:d4:de:3f:
4a:82:de:d4:16:0c:15:99:07:b1:89:90:8f:f4:42:8a:03:41:
17:e5:d0:34:8f:81:80:1c:f0:46:25:9c:ad:6c:dc:15:ce:82:
eb:c8:30:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org