Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mj2hSOdszpHci4VYNN6DoIDFp9Y.roa
File: Mj2hSOdszpHci4VYNN6DoIDFp9Y.roa (raw, json)
Hash identifier: 6RmCZkrNCq8OydlouMjBLbQ1xrwOs4jh3EeO/S8OfFQ=
Subject key identifier: 32:3D:A1:48:E7:6C:CE:91:DC:8B:85:58:34:DE:83:A0:80:C5:A7:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 289E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mj2hSOdszpHci4VYNN6DoIDFp9Y.roa
Signing time: Fri 01 Sep 2023 10:05:35 +0000
ROA not before: Fri 01 Sep 2023 10:05:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10398 (0x289e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=323DA148E76CCE91DC8B855834DE83A080C5A7D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:34:ed:70:d9:96:12:85:77:43:66:97:4a:
e3:5f:73:73:5c:62:15:ba:42:26:a6:50:95:d7:4d:
f8:56:56:0c:b0:a7:9b:11:6b:ce:6f:81:bc:db:17:
79:db:41:89:31:43:60:4b:de:39:25:a3:0c:fc:df:
c6:5a:5f:4f:e6:00:41:db:94:ae:70:d8:63:a1:91:
53:d0:12:47:44:23:de:94:ed:c1:0f:a6:b1:4b:3e:
b4:bb:94:3d:1e:8b:d1:d5:1b:6c:11:e5:bc:a6:4b:
32:7f:b5:ad:ef:6f:19:a5:38:b8:c1:51:ea:93:68:
7b:db:6a:72:57:13:43:c8:1e:bf:be:b8:19:8b:d3:
87:08:08:91:e2:db:b4:89:bf:23:50:60:92:bf:ed:
11:48:4f:20:07:22:53:2f:62:51:0e:56:17:e2:4f:
9a:a4:46:64:13:18:af:53:f0:52:0c:f3:7b:35:57:
e9:38:08:1e:6c:0a:fe:69:08:49:e7:4b:cf:bb:06:
c3:5b:ea:0b:d6:a6:77:22:46:08:c2:73:dd:c0:8b:
ab:4e:13:6f:5b:e2:01:d5:32:63:57:9b:a7:67:6d:
a6:de:98:33:f8:e6:b8:25:e7:ef:ac:73:13:34:c5:
c9:41:59:8a:9b:21:c1:9d:6f:4b:fd:fb:a9:bf:6a:
c8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:3D:A1:48:E7:6C:CE:91:DC:8B:85:58:34:DE:83:A0:80:C5:A7:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Mj2hSOdszpHci4VYNN6DoIDFp9Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.112.0/22
Signature Algorithm: sha256WithRSAEncryption
92:15:b5:88:cb:cf:15:6d:92:73:a5:3d:6f:ee:05:c3:18:22:
b0:6d:52:33:80:12:e2:6a:8a:0c:fa:b7:09:c4:b8:7d:66:68:
c0:3e:0e:35:cf:ab:36:70:7a:d2:d9:62:e8:65:cf:75:f8:b8:
09:35:78:dd:5f:82:a4:ce:bc:86:62:c7:d7:8f:0d:61:0c:82:
de:d3:17:20:da:ef:34:15:c7:47:76:69:1b:1b:2a:27:47:17:
27:43:06:5e:f5:6b:28:72:6e:66:70:69:05:58:52:9b:1b:68:
7f:fa:dc:52:82:82:02:89:16:01:db:76:ed:4c:88:9b:bb:53:
71:b5:f8:48:0d:c1:3d:f1:6c:5c:f2:8b:38:a3:9c:67:02:94:
7e:62:49:c7:d2:d8:ef:e2:4e:9b:99:3e:3d:2d:ee:84:35:b8:
b6:a7:ec:49:5c:f7:92:d5:a5:d1:d4:17:cf:77:39:29:15:c9:
c9:70:3a:a6:43:56:46:e0:0e:b9:5a:04:7e:e2:c2:4a:fb:f6:
98:22:cd:84:54:85:4f:aa:a3:a4:57:4f:1d:d5:b9:d1:bd:6c:
5e:b2:a9:e7:a3:0d:ee:30:52:21:58:36:71:bc:8b:ed:8a:93:
5a:85:7b:cd:8b:16:b1:fb:1a:13:62:94:24:96:83:6d:1a:35:
3c:f8:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org