Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M8IUJv-p8gg6GGCj0SC-3vM02-s.roa
File: M8IUJv-p8gg6GGCj0SC-3vM02-s.roa (raw, json)
Hash identifier: h1GiUcAmhkVwFxhGXtb72eJ8o6V/CyBcy5fLafD8Xkk=
Subject key identifier: 33:C2:14:26:FF:A9:F2:08:3A:18:60:A3:D1:20:BE:DE:F3:34:DB:EB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M8IUJv-p8gg6GGCj0SC-3vM02-s.roa
Signing time: Fri 01 Sep 2023 10:07:02 +0000
ROA not before: Fri 01 Sep 2023 10:07:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.192.240.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10690 (0x29c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=33C21426FFA9F2083A1860A3D120BEDEF334DBEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:4c:f6:11:5a:95:14:b3:fb:51:12:8d:41:
1c:c3:f7:01:57:9f:09:3f:e9:b7:6c:34:cf:5e:57:
e7:63:cf:55:ab:e5:98:16:5f:83:26:30:db:3d:57:
df:26:d7:18:59:fd:1e:18:0c:5d:8d:58:9e:f7:b4:
45:e0:ef:93:0f:da:1b:77:1d:8d:4d:82:a6:9d:cc:
4e:c9:89:e0:cd:17:2c:a2:3d:dd:21:44:fd:f3:51:
ce:e7:b1:ac:c3:e9:d5:1d:f7:43:ea:4d:7e:03:4d:
69:43:30:60:38:72:1f:47:49:1f:a6:15:44:1d:60:
aa:3f:12:0e:47:8b:aa:db:a5:e8:db:77:c0:ee:75:
a4:6c:3d:66:17:05:14:c7:24:68:fe:39:8a:fa:78:
f9:bc:e6:16:ee:92:7c:84:48:0b:87:1d:47:b0:3d:
c7:b1:ee:21:8e:a1:88:86:df:97:96:53:62:ba:4f:
79:5f:4c:bb:2f:00:a9:5d:e5:2e:25:06:39:ba:7f:
68:73:a5:db:cb:6c:47:d4:7d:9e:6c:51:9f:0f:41:
77:ac:4e:d5:f2:d5:af:a0:9a:e9:04:a0:ce:c6:78:
42:6c:a2:40:cc:83:30:96:7f:2d:bb:f6:b5:d0:6c:
3b:0e:bf:7b:67:46:8a:db:ad:bd:de:18:d4:a5:1b:
92:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C2:14:26:FF:A9:F2:08:3A:18:60:A3:D1:20:BE:DE:F3:34:DB:EB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/M8IUJv-p8gg6GGCj0SC-3vM02-s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.240.0/21
Signature Algorithm: sha256WithRSAEncryption
95:e4:08:46:79:a4:12:6a:2a:f8:4f:68:b5:5c:cf:da:4a:3c:
09:5a:e4:2f:b4:d9:a0:2d:65:40:13:29:80:32:c6:59:50:24:
37:12:8d:12:2c:5e:69:95:65:d2:b3:d1:09:d1:1c:97:37:18:
55:ea:25:09:89:a4:54:f9:17:8e:42:3a:56:66:fa:10:cb:7e:
92:47:8b:9f:f6:3b:0a:31:7f:fc:8a:62:02:56:44:8d:0b:25:
3f:88:37:f5:3a:81:6b:fa:b5:4b:68:a0:94:d4:42:34:6b:1d:
3b:98:d3:13:61:0b:ba:42:1c:72:ed:e4:c9:fe:cc:3c:ed:be:
00:8a:83:45:77:96:05:1f:89:63:a8:e8:d3:02:00:c9:20:2b:
9f:7a:c0:35:f5:cb:1b:5e:b6:87:45:77:d8:88:07:9b:00:21:
18:ec:97:e5:cd:90:16:27:e4:b7:c4:3e:ff:c9:08:e0:16:dc:
96:62:df:d2:27:a5:49:82:90:16:9b:7c:16:56:f3:c2:22:34:
4c:05:97:78:46:19:ce:37:c7:df:13:59:ca:83:1a:34:68:ef:
99:9b:7b:b7:23:07:41:5c:17:53:05:c8:5f:9f:c8:a3:47:e2:
8c:0e:00:08:42:84:c7:99:c9:4f:50:33:64:96:d0:ec:8f:a8:
02:5c:eb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org