Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LP-lL8MDiq7qH5LcZs1yoOceGHc.roa
File: LP-lL8MDiq7qH5LcZs1yoOceGHc.roa (raw, json)
Hash identifier: uOWYF1KWFO49CPIkB9eIKRZRjMoFH8bGYUvOLe0XplE=
Subject key identifier: 2C:FF:A5:2F:C3:03:8A:AE:EA:1F:92:DC:66:CD:72:A0:E7:1E:18:77
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28D5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LP-lL8MDiq7qH5LcZs1yoOceGHc.roa
Signing time: Fri 01 Sep 2023 10:05:49 +0000
ROA not before: Fri 01 Sep 2023 10:05:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10453 (0x28d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2CFFA52FC3038AAEEA1F92DC66CD72A0E71E1877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:77:e2:4e:01:5b:df:f9:98:dc:76:b0:4d:
f6:db:83:84:9c:fb:96:ad:ab:65:59:0f:36:46:90:
2e:c8:3c:f8:0f:3d:92:ec:c6:09:ac:3d:ac:e9:dc:
15:63:01:04:cd:ee:52:6d:ae:b9:a8:2e:88:a7:eb:
70:5a:74:9e:92:ed:d8:74:36:8e:5d:09:fa:0f:31:
ea:91:f9:6d:5b:9f:94:5d:03:78:a5:4f:5e:2a:a9:
04:71:1f:94:f8:9d:ef:53:43:79:49:c9:d3:1c:58:
81:fc:fa:59:01:77:d8:81:d2:97:7b:38:fa:0d:45:
54:38:02:96:6f:bd:9b:6c:a5:4f:d6:63:79:73:b5:
52:eb:f6:19:a3:6e:85:d8:0f:e2:3a:09:a7:b4:c4:
fe:fa:85:6d:91:fc:82:05:e5:af:6e:13:20:97:1a:
a2:33:bc:5e:96:6a:e6:26:1f:75:24:7a:15:0d:f6:
4b:2d:de:7c:24:7c:9a:c5:d2:e1:b2:91:e8:cc:4f:
7a:15:42:e8:b6:f0:a8:9a:ea:a1:e8:e7:5c:3e:1d:
3c:20:8a:2e:86:29:73:7d:ae:1f:23:72:2f:5f:9a:
71:dd:50:c2:b4:7c:b0:8e:33:14:52:7b:18:f7:b8:
d0:65:d1:d7:a6:60:7a:05:3e:0c:2a:62:a7:a5:57:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:FF:A5:2F:C3:03:8A:AE:EA:1F:92:DC:66:CD:72:A0:E7:1E:18:77
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LP-lL8MDiq7qH5LcZs1yoOceGHc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:4a:a8:90:9d:76:9c:ac:56:bf:8d:71:3d:68:de:43:98:15:
89:ef:05:c8:f4:d6:27:db:f3:66:96:b8:5e:06:c9:1a:b7:8d:
7f:96:3b:92:6e:5e:87:eb:c3:5c:e6:8c:d4:ca:fe:b2:7e:a6:
15:c0:cb:aa:d6:c9:3f:59:3d:96:69:09:06:b8:49:4d:a2:53:
9b:e6:3a:36:d5:af:1c:e4:15:47:fb:4c:52:be:15:32:c6:57:
84:ea:4a:5f:18:af:94:4e:14:50:96:1d:85:08:c7:4a:40:4e:
a0:c5:af:e4:ca:24:21:65:68:f3:7f:c2:4f:d2:33:66:bd:6e:
76:83:74:af:be:4e:3f:fc:6f:f3:e5:c9:14:62:d6:bb:94:67:
0f:6d:d9:3c:6c:11:a8:53:a6:1b:94:20:a9:39:2a:d1:18:da:
00:7c:98:ee:48:a4:e2:67:4d:b8:3f:c7:f6:e9:e2:ba:0f:d6:
9f:98:ce:b1:1d:ea:ef:18:81:37:04:68:7c:27:9b:ed:c0:a9:
69:29:48:bd:67:64:0d:3c:48:8b:12:ea:ee:87:32:1d:0a:30:
f0:a1:73:a4:46:36:26:25:13:52:b2:7a:cf:62:9c:30:bd:9f:
96:d6:ba:00:f9:89:38:32:2a:d0:1a:e8:0b:a6:0e:df:fe:ea:
68:76:3a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org