Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NtGj_n42wHNP8bLRbfoFvKScLfs.roa
File: NtGj_n42wHNP8bLRbfoFvKScLfs.roa (raw, json)
Hash identifier: huM9Ww1IQz2qhkp8WQKxndqH/zLGxZIos+z4Yly2SP4=
Subject key identifier: 36:D1:A3:FE:7E:36:C0:73:4F:F1:B2:D1:6D:FA:05:BC:A4:9C:2D:FB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2820
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NtGj_n42wHNP8bLRbfoFvKScLfs.roa
Signing time: Fri 01 Sep 2023 10:04:58 +0000
ROA not before: Fri 01 Sep 2023 10:04:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.195.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10272 (0x2820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=36D1A3FE7E36C0734FF1B2D16DFA05BCA49C2DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:0a:be:35:ff:46:98:35:e9:8f:44:e1:45:
80:55:45:be:2c:6e:99:9a:3f:76:1f:ec:cb:db:7c:
c8:76:d2:12:3d:61:12:7e:3c:5c:f7:7e:ca:aa:31:
41:89:34:78:10:8f:2c:0e:97:2e:a4:f1:ce:ea:aa:
60:be:42:0a:7a:d6:f1:b9:58:b9:6c:13:23:98:97:
b9:f9:10:d5:8c:ab:c1:be:46:5a:1d:34:9f:4e:0b:
d0:3c:49:7e:cd:b4:0d:0e:65:af:25:5e:47:79:d9:
80:57:f2:ad:b9:25:22:da:55:b0:dd:7f:df:bc:fc:
9a:a2:d4:5f:bc:6b:3b:e9:23:9f:50:e5:0c:ee:ef:
cd:29:02:b6:7a:87:03:0f:12:fc:9b:2d:16:ab:ad:
78:32:4a:57:14:d0:e6:68:85:2a:b4:4a:08:80:6b:
2d:44:c5:c8:f4:4c:3c:9b:a4:98:c4:6c:98:ea:ba:
7d:77:63:1e:ec:90:ff:ad:41:04:7d:f3:7e:d6:41:
44:c2:ad:87:8e:48:42:38:ad:08:dd:02:f6:8e:1a:
0b:78:8c:a7:6b:94:b5:b0:7d:27:ba:86:89:26:9f:
a2:18:51:e0:2f:64:cf:04:b1:f3:54:75:14:63:d7:
a7:38:52:00:74:dc:03:ef:df:2c:52:43:b0:84:0f:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D1:A3:FE:7E:36:C0:73:4F:F1:B2:D1:6D:FA:05:BC:A4:9C:2D:FB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NtGj_n42wHNP8bLRbfoFvKScLfs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.192.0/19
Signature Algorithm: sha256WithRSAEncryption
48:54:42:e1:ea:42:47:82:e1:32:35:6b:20:32:2b:92:23:bf:
2b:35:da:ca:c9:01:7c:d9:54:48:3c:24:d6:98:57:3f:d8:e7:
db:5b:86:7b:63:6c:9f:cb:19:ee:0f:43:76:66:6a:c5:19:d2:
72:c3:16:55:07:0a:5a:b4:85:59:20:dc:e8:42:64:3c:de:14:
40:5d:ca:a1:83:29:f8:26:ee:8c:c7:e8:1c:b2:f6:51:ac:6c:
47:d1:a0:b1:04:cd:25:30:0d:56:87:a4:28:e9:82:4b:b3:eb:
ac:01:21:cf:49:7a:38:d4:55:0c:78:f6:3e:47:e9:be:7e:d0:
04:7f:6e:0a:fa:27:e5:11:5e:bd:3f:ac:b9:98:8c:c5:01:f0:
c4:a6:69:f5:0e:88:6e:16:4a:1a:42:65:8f:f5:ff:f5:fb:99:
43:30:c4:a0:0f:c9:47:83:99:f9:9f:76:1f:3d:40:8b:3a:c9:
15:2f:8a:69:2a:48:1c:f5:c4:0e:df:16:9e:38:8b:52:a8:8d:
47:05:55:49:d6:b9:b5:36:ff:0c:78:26:40:a6:8b:92:2b:aa:
75:9a:69:4b:c2:34:bf:1b:74:59:88:fd:e0:13:69:db:eb:8e:
c9:aa:3f:c7:31:32:5a:f5:cf:c8:12:67:87:2c:46:3b:a3:7e:
d1:4d:e2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org