Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MdH6B0ftPExgQn9q15jntC1x5JE.roa
File: MdH6B0ftPExgQn9q15jntC1x5JE.roa (raw, json)
Hash identifier: sYa5PS83LXyvN1mMmXzK7sWXxfamr82kesh7ZJHnmVs=
Subject key identifier: 31:D1:FA:07:47:ED:3C:4C:60:42:7F:6A:D7:98:E7:B4:2D:71:E4:91
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MdH6B0ftPExgQn9q15jntC1x5JE.roa
Signing time: Fri 01 Sep 2023 10:05:39 +0000
ROA not before: Fri 01 Sep 2023 10:05:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10413 (0x28ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=31D1FA0747ED3C4C60427F6AD798E7B42D71E491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:82:af:7e:a5:e5:b4:ec:18:54:47:3c:46:ab:
44:66:60:c1:45:86:13:2a:7d:61:55:71:00:0f:a8:
39:9d:5f:88:48:3b:9d:5f:df:25:0e:06:62:04:ba:
16:97:ba:ba:0c:02:25:8c:f1:52:75:8e:9a:be:63:
7f:e1:91:c9:28:40:25:f8:39:c7:28:59:69:01:c2:
0a:3f:d6:6d:35:a5:35:7e:6c:ee:12:09:f5:67:38:
34:16:fa:05:72:eb:5d:0d:ae:a1:60:07:e8:ce:c6:
03:65:f5:c2:75:9d:6c:8f:22:8f:69:a9:79:7b:5d:
01:32:a1:4c:12:a1:b1:85:37:e1:11:a3:6c:19:99:
32:ab:af:cf:05:fe:91:47:8a:97:97:c8:09:85:da:
53:9a:3b:c7:ee:9c:92:dc:aa:00:9e:75:82:70:e4:
89:d5:94:91:e8:03:37:06:66:1e:c5:97:3e:ef:62:
a8:ed:6b:fe:e0:d8:4b:cd:e8:2c:da:30:ca:6d:b0:
a8:d8:cd:fd:0d:b4:4d:8d:f7:5d:cb:41:ec:ac:29:
0e:a5:56:78:dc:84:20:6c:95:65:13:d3:d1:cb:e8:
98:5b:8d:56:c7:45:26:a8:8d:08:8b:5e:4d:13:94:
16:dc:9f:b6:35:9b:48:ee:2b:2d:62:b7:2f:31:5a:
df:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D1:FA:07:47:ED:3C:4C:60:42:7F:6A:D7:98:E7:B4:2D:71:E4:91
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MdH6B0ftPExgQn9q15jntC1x5JE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.144.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:f0:75:b8:68:f4:40:82:4a:da:22:46:c9:ad:71:41:39:b4:
29:f7:c9:0e:7c:af:d5:e0:7c:17:a2:1c:f3:99:e8:04:75:98:
0f:63:dd:f8:11:77:ba:60:5c:e4:be:5b:db:bc:b9:e1:98:3d:
18:05:4c:f1:d4:7f:57:50:5e:d9:78:51:40:29:c6:a1:75:07:
5c:56:55:66:a1:f1:1b:5c:8c:e6:0f:a5:4d:d4:09:20:a1:c7:
4a:a4:09:59:c9:a1:04:7d:4a:f9:59:48:70:e7:b8:37:ed:18:
a8:83:9b:5c:2d:c7:03:9f:64:86:a0:7b:e8:a7:41:e8:1c:92:
f6:64:e2:27:64:01:f7:96:32:97:fe:3e:13:80:f6:31:25:2f:
b4:a9:c3:ee:5e:f4:24:a1:a5:70:22:09:75:96:c3:e1:30:bc:
db:87:0f:ab:84:16:d1:87:13:a6:60:1f:7c:98:05:db:6c:a7:
fd:a3:d0:ac:05:63:c7:61:7c:74:5b:82:ba:74:1d:fd:04:32:
f0:36:b7:96:75:a9:92:96:32:57:e3:2a:09:37:52:7e:8e:68:
6d:83:31:6b:70:2f:45:a9:d8:6b:49:79:b2:82:32:80:c1:b7:
25:d9:4d:56:3c:17:7a:45:8d:7d:ac:ac:f2:c3:85:23:8b:14:
b8:34:36:c6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKK0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MzlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDMxRDFGQTA3NDdFRDND
NEM2MDQyN0Y2QUQ3OThFN0I0MkQ3MUU0OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMgq9+peW07BhURzxGq0RmYMFFhhMqfWFVcQAPqDmdX4hIO51f
3yUOBmIEuhaXuroMAiWM8VJ1jpq+Y3/hkckoQCX4OccoWWkBwgo/1m01pTV+bO4S
CfVnODQW+gVy610NrqFgB+jOxgNl9cJ1nWyPIo9pqXl7XQEyoUwSobGFN+ERo2wZ
mTKrr88F/pFHipeXyAmF2lOaO8funJLcqgCedYJw5InVlJHoAzcGZh7Flz7vYqjt
a/7g2EvN6CzaMMptsKjYzf0NtE2N913LQeysKQ6lVnjchCBslWUT09HL6JhbjVbH
RSaojQiLXk0TlBbcn7Y1m0juKy1ity8xWt81AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMdH6B0ftPExgQn9q15jntC1x5JEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01kSDZCMGZ0UEV4Z1FuOXEx
NWpudEMxeDVKRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wpAwDQYJKoZIhvcNAQELBQADggEBABvwdbho9ECCStoiRsmtcUE5tCn3yQ58r9Xg
fBeiHPOZ6AR1mA9j3fgRd7pgXOS+W9u8ueGYPRgFTPHUf1dQXtl4UUApxqF1B1xW
VWah8RtcjOYPpU3UCSChx0qkCVnJoQR9SvlZSHDnuDftGKiDm1wtxwOfZIage+in
QegckvZk4idkAfeWMpf+PhOA9jElL7Spw+5e9CShpXAiCXWWw+EwvNuHD6uEFtGH
E6ZgH3yYBdtsp/2j0KwFY8dhfHRbgrp0Hf0EMvA2t5Z1qZKWMlfjKgk3Un6OaG2D
MWtwL0Wp2GtJebKCMoDBtyXZTVY8F3pFjX2srPLDhSOLFLg0NsY=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org