Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mi1vnuJB9LTEuqrHQwjeq4p7LE8.roa
File: Mi1vnuJB9LTEuqrHQwjeq4p7LE8.roa (raw, json)
Hash identifier: tAxvYh8ttqJK7GNkepMvYiC5gMdP+ssrqAZzaUJYjTg=
Subject key identifier: 32:2D:6F:9E:E2:41:F4:B4:C4:BA:AA:C7:43:08:DE:AB:8A:7B:2C:4F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B19
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mi1vnuJB9LTEuqrHQwjeq4p7LE8.roa
Signing time: Fri 01 Sep 2023 10:09:51 +0000
ROA not before: Fri 01 Sep 2023 10:09:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.24.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11033 (0x2b19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=322D6F9EE241F4B4C4BAAAC74308DEAB8A7B2C4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:42:40:70:5d:06:6b:77:e0:02:17:b5:45:ac:
23:2c:ae:d4:40:48:53:cc:6f:10:2e:5d:71:c8:6e:
c4:0c:44:ad:f5:a8:b0:0f:99:75:bb:5b:69:66:3a:
da:3c:9f:9b:a1:0a:30:c8:a4:bc:ee:0c:d9:cc:9d:
e2:70:aa:ce:3b:30:c6:04:db:03:59:54:e7:8f:ed:
8d:91:04:bf:4b:aa:21:8a:3f:47:a6:64:e2:28:f3:
07:a0:26:ff:2a:b7:06:6a:47:84:34:bc:bd:c4:02:
5c:b2:a3:5b:cf:47:4c:d5:fd:a6:89:d5:4a:11:8f:
89:e8:0e:be:d2:4a:31:00:ba:8d:25:ba:5e:14:e8:
98:d3:39:98:be:cd:ac:8d:54:76:16:72:0b:0d:ee:
7f:0d:d3:a3:c2:f0:8a:c7:68:c4:35:52:e6:2b:2c:
ba:5e:57:8c:d3:f6:b8:a0:df:2c:0b:18:f8:70:a1:
2c:12:6b:24:da:70:6c:37:b9:ac:27:6e:ac:26:0d:
af:50:95:b7:4e:51:eb:bb:a9:fa:6f:56:42:52:1c:
bf:19:aa:8c:28:85:5d:31:01:81:5a:d2:2c:10:d2:
27:62:8e:9b:49:1b:60:9c:71:a4:8d:54:ca:cd:ec:
93:20:d8:2d:92:ab:aa:cd:c9:c1:f3:2f:e0:3a:af:
fe:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2D:6F:9E:E2:41:F4:B4:C4:BA:AA:C7:43:08:DE:AB:8A:7B:2C:4F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mi1vnuJB9LTEuqrHQwjeq4p7LE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.24.0/21
Signature Algorithm: sha256WithRSAEncryption
28:4a:bb:e8:80:a0:06:19:4e:c6:00:df:51:09:f5:17:27:34:
b3:26:d9:19:4e:32:04:1b:95:ed:a9:fd:93:e5:54:50:15:ae:
e2:0b:fc:c5:f9:84:71:30:fe:b6:b1:61:70:12:7b:b4:08:3b:
03:0d:4f:5d:47:ec:8a:0b:e6:80:ef:fb:af:7f:a9:99:9c:b4:
fc:38:a8:fa:5b:6f:95:cb:89:c6:48:59:8f:8c:4d:38:6b:01:
df:39:e5:ff:13:8f:80:50:e9:f4:b7:c8:03:ae:b6:6a:37:a8:
51:c7:98:aa:fb:95:72:57:27:1f:90:2c:fd:04:fe:99:b8:f3:
e8:ac:8c:47:24:46:f9:0f:4b:9e:a6:09:07:ac:12:a9:d8:24:
aa:d7:0d:21:1e:d6:a6:06:bd:ba:7b:e7:4a:32:03:f1:25:5d:
d3:9e:d6:27:01:55:ff:55:20:70:47:14:13:99:2d:9b:93:47:
3f:0d:37:21:26:08:e4:cf:11:ce:0c:fc:d9:5b:3a:7c:ea:14:
86:c7:0b:ae:d9:c9:35:c2:62:35:49:77:f1:57:29:82:89:6b:
b5:09:1c:9d:e2:73:50:99:bc:3f:f1:0c:22:67:e2:4f:bb:c5:
02:00:d2:a7:43:05:0f:8c:23:3c:c8:d2:85:10:82:12:f9:5a:
13:b3:61:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org