Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LTx_C0cZBkAtW91-XfMYZNjViT4.roa
File: LTx_C0cZBkAtW91-XfMYZNjViT4.roa (raw, json)
Hash identifier: piJd6LnYDUmf06S5vmrrY6jxo72VFO4CB7n8zShuIqE=
Subject key identifier: 2D:3C:7F:0B:47:19:06:40:2D:5B:DD:7E:5D:F3:18:64:D8:D5:89:3E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29B6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LTx_C0cZBkAtW91-XfMYZNjViT4.roa
Signing time: Fri 01 Sep 2023 10:06:58 +0000
ROA not before: Fri 01 Sep 2023 10:06:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10678 (0x29b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2D3C7F0B471906402D5BDD7E5DF31864D8D5893E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:41:1e:14:b5:79:1e:88:3e:46:0c:a8:cd:
76:d8:52:30:55:82:22:1d:b5:c9:1e:e4:44:08:e0:
ff:66:c4:0d:b1:85:7c:3a:41:25:04:15:c7:d5:5a:
d7:0b:a3:92:c4:bd:83:80:d3:44:51:5b:06:a1:48:
9a:1f:02:74:1a:1c:9d:59:58:68:cc:73:0c:f2:a6:
4e:48:58:a9:d3:b8:56:77:fb:af:7c:5d:b6:8f:df:
31:e8:67:b9:db:f7:08:b7:94:60:77:08:d3:ea:64:
53:9e:94:82:52:30:88:c0:fc:b7:d1:71:22:b8:e9:
9e:ba:97:36:83:9e:74:4c:db:f1:92:65:33:41:bc:
5a:20:05:6a:72:7f:96:2c:1c:a8:3a:25:bf:34:72:
b0:59:d2:c1:a0:db:aa:23:a4:4b:c8:0f:47:b2:09:
59:70:86:1f:dc:40:b9:08:c4:d7:10:dd:2b:c8:a1:
a2:93:87:b5:3b:3b:75:b5:85:91:5d:bd:45:74:41:
1b:22:2c:4e:cf:b1:c4:d1:97:38:25:8c:0b:6c:2c:
08:30:83:05:3b:ca:3a:f8:8b:b7:0c:82:2e:28:ab:
0e:f0:fd:af:7d:4b:b6:76:ff:05:c4:b6:fd:a3:6d:
57:fc:87:00:40:fd:da:93:a5:e8:ee:3e:ca:ce:5d:
dc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3C:7F:0B:47:19:06:40:2D:5B:DD:7E:5D:F3:18:64:D8:D5:89:3E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/LTx_C0cZBkAtW91-XfMYZNjViT4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:e1:31:97:0d:fa:20:39:15:46:9a:ea:af:ef:94:bf:4b:b2:
9b:c3:c2:61:ba:3a:82:d8:6c:1e:e1:3c:c1:1e:76:f5:b7:73:
72:48:c6:6e:64:22:84:05:c3:eb:c8:d5:6e:85:03:51:8b:0e:
c2:f7:95:5c:00:d1:33:da:55:a7:84:71:21:95:32:18:51:b1:
88:ec:12:f6:d3:35:7e:99:56:ca:11:4f:60:8a:6e:b3:ac:db:
c2:bf:97:97:7b:00:ca:ea:04:e7:c7:cb:92:e7:3d:a2:6f:8d:
ed:c2:81:72:88:59:24:20:61:48:11:89:e8:29:55:24:25:61:
11:cd:c7:b5:c0:93:85:36:67:a7:7b:06:73:c7:cf:39:43:fb:
68:d6:96:8e:77:ba:4b:c4:79:fa:0a:3e:c5:b3:c1:e7:23:a8:
a6:10:3c:3e:12:d8:ba:c3:62:a3:dd:ab:d4:c0:2a:31:3c:f6:
af:ae:5c:e7:5e:fd:0d:ff:f2:49:fb:a1:53:6e:61:53:cb:ba:
d7:89:42:61:29:cd:da:0c:71:82:3d:f0:da:48:01:86:f7:8b:
82:fd:36:13:cc:35:a0:e5:e3:6e:6e:ea:9d:36:e3:51:1f:7d:
1d:87:00:63:76:00:4a:7f:b3:97:52:62:b5:c5:75:3d:5a:cb:
ac:6b:36:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org