Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MMxoDGTJ_k9WAJQ2AhkQ6LXcQ7s.roa
File: MMxoDGTJ_k9WAJQ2AhkQ6LXcQ7s.roa (raw, json)
Hash identifier: Yl5AEvkmhUYjlmTuR5V80sQsK0vDDQ1jVNfrOU0cyMg=
Subject key identifier: 30:CC:68:0C:64:C9:FE:4F:56:00:94:36:02:19:10:E8:B5:DC:43:BB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AEF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MMxoDGTJ_k9WAJQ2AhkQ6LXcQ7s.roa
Signing time: Fri 01 Sep 2023 10:08:27 +0000
ROA not before: Fri 01 Sep 2023 10:08:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.192.0/19 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10991 (0x2aef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=30CC680C64C9FE4F56009436021910E8B5DC43BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:cf:63:da:09:c5:0e:75:86:98:5e:af:97:
eb:bc:7c:fd:10:0a:8d:c6:64:05:61:f0:40:4c:24:
ea:6f:31:ae:44:d5:d3:9a:0b:a9:fb:d2:56:55:b3:
3c:b7:12:5c:50:ce:c7:04:0e:f9:b3:65:99:bc:0c:
87:20:2a:af:d0:01:a1:90:12:e4:fe:0d:84:31:4e:
d5:76:5b:c4:9d:31:31:b8:52:e6:76:16:10:ef:2f:
bd:bc:9c:40:d8:85:42:d6:5b:27:03:81:32:67:ad:
21:95:1e:5c:c0:bc:25:0c:06:13:a0:c6:6f:09:18:
8d:93:79:95:05:a0:07:82:ca:34:79:39:a0:66:ef:
ee:a4:6e:b5:90:61:a6:62:77:c0:4c:71:4e:62:55:
4d:50:fb:ef:de:47:fd:43:a7:24:2d:3f:89:b8:b9:
6e:81:65:05:3a:e6:00:b0:24:15:dd:f3:ef:64:1c:
82:75:88:da:37:84:2b:c8:2e:ab:68:7c:51:a8:f9:
25:9d:d5:aa:99:ec:ae:8d:50:52:8c:d1:d2:37:88:
5d:bf:88:0d:29:4a:61:59:e5:6a:05:24:e4:d3:a2:
9c:af:d9:e8:32:7a:f9:df:05:75:ec:61:9f:2b:55:
54:62:93:5f:68:64:a3:58:98:fc:85:fd:7e:2a:b2:
3c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CC:68:0C:64:C9:FE:4F:56:00:94:36:02:19:10:E8:B5:DC:43:BB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MMxoDGTJ_k9WAJQ2AhkQ6LXcQ7s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:4e:27:48:c4:40:8e:58:78:a4:b1:b0:62:b7:6c:3c:92:5f:
e6:62:90:67:21:9d:08:fc:3f:61:76:a6:23:52:fb:4d:0e:4d:
17:33:54:52:e8:a5:c0:af:1b:f1:56:da:b7:23:81:1b:7d:f5:
59:b6:40:cf:4c:3f:41:73:79:5b:ac:e6:86:7b:99:f2:34:81:
ed:15:8f:fc:d3:d5:c4:c5:fd:8a:ac:1f:a0:ce:e6:d5:86:27:
ff:8d:c5:1e:c6:21:80:53:bf:cc:3a:2a:f0:05:87:12:66:50:
f1:51:1c:2b:fd:0e:ff:12:ad:fd:b8:5a:47:9e:37:9b:a6:59:
7d:c4:cd:0c:b5:6a:85:c0:63:8b:c8:d4:01:06:a1:62:b9:9b:
b2:fb:33:18:a2:54:08:e7:b9:91:56:49:e8:0c:e2:2a:79:4f:
b8:6f:6d:e2:a6:61:8e:6c:de:49:bb:81:3a:04:83:28:a1:ff:
c9:4a:90:af:3b:f8:52:ff:cb:c9:18:bb:d1:15:3c:cc:50:c5:
53:58:90:6b:c9:d6:75:e8:34:c7:26:9e:40:9c:eb:2c:8a:cd:
c5:80:2f:ae:39:2d:d7:80:80:ff:05:77:a0:76:77:9b:2e:53:
99:26:8c:d7:ac:22:4f:80:11:69:30:cc:72:6a:ea:07:3d:87:
79:97:75:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org