Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M4C2N2rftWTORyWuz6fjOcBmbwg.roa
File: M4C2N2rftWTORyWuz6fjOcBmbwg.roa (raw, json)
Hash identifier: fuKzhhluBP9JfV5HLGwypPfYH1uOnlaCvlE22Xfa5+I=
Subject key identifier: 33:80:B6:37:6A:DF:B5:64:CE:47:25:AE:CF:A7:E3:39:C0:66:6F:08
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A9C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M4C2N2rftWTORyWuz6fjOcBmbwg.roa
Signing time: Fri 01 Sep 2023 10:08:06 +0000
ROA not before: Fri 01 Sep 2023 10:08:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10908 (0x2a9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3380B6376ADFB564CE4725AECFA7E339C0666F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c9:a6:ea:d3:5d:73:2d:a0:3c:51:0a:fd:2c:
9c:04:b3:80:73:04:20:5a:9b:75:12:8d:81:7c:c1:
93:91:43:62:a4:a9:89:15:64:ea:fe:03:45:3f:08:
cc:22:d3:2f:4f:30:47:c6:26:d5:42:aa:ad:61:3f:
a3:17:23:d4:c4:8a:f9:db:6d:77:36:70:d9:f5:17:
bd:81:8d:61:d1:d4:20:7e:43:1a:8a:cc:c5:82:27:
71:92:62:a7:6d:a0:43:07:c1:21:bf:67:17:1e:e8:
0f:72:d4:42:5b:f4:9b:b9:ea:d1:f4:74:ac:e8:ad:
82:64:97:cb:fd:bb:7f:fe:6f:9a:d0:a4:c8:fd:94:
06:c1:b1:fd:c9:a4:de:d9:4c:ae:48:89:80:ef:6d:
e3:80:00:c2:70:1d:af:6a:c9:83:2b:7d:2b:29:4e:
91:e7:b6:0d:21:bd:8d:be:c0:b4:b9:33:ad:f0:95:
23:83:b1:b6:38:02:6c:3b:dc:39:c8:7e:c6:33:76:
a0:3e:a5:00:0b:94:e0:51:b1:35:ba:fb:db:1b:4a:
50:c6:79:35:fe:bb:4c:55:a5:c6:05:65:6a:82:ae:
c2:00:40:73:70:a3:48:0a:72:36:25:48:e1:96:09:
85:70:7f:9f:65:b8:a8:66:4d:ae:cb:2d:85:ff:76:
09:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:B6:37:6A:DF:B5:64:CE:47:25:AE:CF:A7:E3:39:C0:66:6F:08
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M4C2N2rftWTORyWuz6fjOcBmbwg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.96.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:14:b6:c2:43:89:64:43:c9:49:a7:40:ac:e1:9d:a2:5c:5a:
46:d6:15:bb:1d:df:e7:0a:bb:fa:85:04:d6:9b:14:11:70:33:
7d:c6:69:ba:f7:eb:d0:72:39:05:95:b4:04:b6:f8:39:d1:07:
0a:7f:82:b0:30:7b:6b:a3:c1:6d:62:40:e9:84:44:3d:03:c4:
be:99:ad:a9:84:86:26:bd:5f:98:27:c7:90:0d:dd:a2:dc:2d:
b8:8f:82:49:57:55:14:12:5b:ac:8e:5c:fc:e2:a8:89:0e:34:
93:1f:f0:10:f0:24:10:4b:98:50:79:dc:8d:e8:76:cc:71:19:
fc:10:b4:f0:a3:51:4b:4d:21:f0:5b:10:fe:43:33:a0:93:b4:
73:12:49:1d:ab:dc:67:81:18:b1:19:75:c3:3f:95:b6:54:ff:
2c:e8:7d:0e:e2:b1:55:93:ed:ca:6b:49:2e:bd:0b:7f:f5:b4:
5a:bf:f8:7b:d3:3a:f7:7b:ee:f6:04:27:ba:23:e7:1b:90:0f:
a5:14:d5:c7:09:d9:1d:be:5a:19:bb:4e:86:f2:bb:6c:85:f0:
46:45:ff:87:c9:34:81:35:90:dc:67:74:87:be:6d:a6:3a:c9:
41:97:fc:d8:da:51:f1:a8:b9:2a:22:c7:e4:72:67:82:e9:f5:
6e:b1:aa:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org