Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LHKJgM5IWS2aA4Cp1_-3phcFiQU.roa
File: LHKJgM5IWS2aA4Cp1_-3phcFiQU.roa (raw, json)
Hash identifier: gZRFfI5yyqLxFozILsURo9TqHFGU+LEY44lFgMqhhpc=
Subject key identifier: 2C:72:89:80:CE:48:59:2D:9A:03:80:A9:D7:FF:B7:A6:17:05:89:05
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28D0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LHKJgM5IWS2aA4Cp1_-3phcFiQU.roa
Signing time: Fri 01 Sep 2023 10:05:48 +0000
ROA not before: Fri 01 Sep 2023 10:05:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10448 (0x28d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2C728980CE48592D9A0380A9D7FFB7A617058905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7a:8d:b8:c9:2d:61:48:cb:ec:6e:25:c5:9a:
fc:3d:8a:7c:e1:ac:ff:86:61:a8:c5:e9:29:eb:51:
a5:b1:80:f3:a3:61:e0:e5:66:c3:57:fc:05:0a:f9:
ec:04:2a:87:24:5e:61:99:34:08:12:5e:c3:80:76:
6e:20:e7:8f:b4:02:3a:83:96:55:26:c4:a0:e9:5c:
6f:52:10:54:45:05:cd:00:4b:5f:e5:7f:c2:58:79:
fd:6c:93:f6:b1:8d:0a:8d:fe:ae:2b:23:f2:53:4f:
31:82:9b:50:21:4f:8a:3f:e1:94:ed:44:d5:ed:1c:
c1:68:74:54:76:88:b0:bb:d3:d2:7a:08:2c:c2:dc:
5e:cf:fd:a2:95:5f:7b:ad:b2:9c:65:39:08:53:0f:
5a:92:dd:f6:d6:3a:5b:b5:b2:7f:12:cf:e8:2f:17:
ab:b8:d4:e4:86:25:6c:0d:d7:0b:a0:d6:03:ae:f9:
2c:3d:c9:02:60:6a:59:e4:b0:7f:16:77:a3:b1:2f:
ff:9c:e0:3e:01:20:f3:4c:26:40:74:3e:9d:17:41:
4a:b0:ff:62:ff:d3:c5:48:4b:34:ce:17:c7:0b:7f:
36:fe:73:a2:1a:c8:0b:c5:40:44:2c:b9:be:64:b6:
4c:8a:d0:ea:b6:ed:21:35:00:5f:b5:fb:f2:68:c6:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:72:89:80:CE:48:59:2D:9A:03:80:A9:D7:FF:B7:A6:17:05:89:05
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LHKJgM5IWS2aA4Cp1_-3phcFiQU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.224.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:7a:d0:29:19:f5:9f:1f:5b:a3:9a:77:50:17:a7:d1:be:c9:
2d:49:9d:2c:3b:34:7b:81:34:ba:6f:c2:78:d5:07:d9:31:a9:
18:d0:64:cd:b7:ab:e8:4c:97:41:ac:aa:29:7f:4e:fb:47:1b:
f0:2f:f8:44:b9:18:09:17:94:9d:56:50:eb:3f:91:a7:74:3c:
89:87:78:83:88:7c:96:04:f4:97:b5:1a:0e:e1:96:01:2d:18:
9a:86:1f:96:78:76:d1:41:24:7f:fa:05:2c:12:a1:e4:c1:ac:
f3:b1:8c:6a:ea:86:29:6d:90:35:c1:23:74:32:b2:a4:81:7c:
64:08:ee:93:4c:07:31:54:f8:cd:79:f0:92:6f:9d:0a:74:dd:
10:8d:14:1a:62:b2:4b:53:fc:cb:0d:f1:8e:44:46:55:5b:ae:
7f:c3:b1:b0:92:26:23:18:f2:7a:eb:1f:26:50:62:a1:2a:d7:
1f:2a:0e:82:62:30:3b:78:e3:4c:16:e7:71:3a:be:e1:52:b8:
eb:51:e6:87:a1:ae:b0:f1:c4:b9:87:98:b7:e8:41:82:d2:c9:
ef:47:18:46:0f:0d:10:ab:db:f2:cf:18:98:32:b3:af:cb:9a:
d0:46:06:b5:ce:c3:55:ab:16:e6:4e:dc:8e:de:8d:52:ee:b7:
cd:39:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org