Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzNhug0_Lynjuv9AmS441_71aK0.roa
File: NzNhug0_Lynjuv9AmS441_71aK0.roa (raw, json)
Hash identifier: cI/sQwL5KBbObEeDUv8XERbHBcoSPnaayACXvYaBeyE=
Subject key identifier: 37:33:61:BA:0D:3F:2F:29:E3:BA:FF:40:99:2E:38:D7:FE:F5:68:AD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2889
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzNhug0_Lynjuv9AmS441_71aK0.roa
Signing time: Fri 01 Sep 2023 10:05:27 +0000
ROA not before: Fri 01 Sep 2023 10:05:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.204.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10377 (0x2889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=373361BA0D3F2F29E3BAFF40992E38D7FEF568AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:43:69:a3:d3:4f:fe:97:51:b5:54:33:c6:3a:
95:2e:6f:94:fc:e4:30:bf:6f:7a:03:7c:21:e0:9b:
02:5f:df:f2:98:68:0e:a4:0f:65:3f:31:70:4b:14:
fe:26:16:88:db:96:f7:b1:95:59:bb:11:59:b9:a2:
93:e6:17:ff:02:73:b3:db:dd:66:ae:76:98:a1:20:
5e:8e:61:07:b4:ee:5f:9f:7b:32:0d:b7:a7:11:6e:
71:66:c3:8d:8e:ce:8f:9d:5e:8c:f6:15:d7:2b:9e:
22:53:15:8a:71:04:56:28:1e:7b:b8:98:f0:b9:3f:
46:08:66:89:a2:e9:02:e5:b7:62:88:da:35:0a:c4:
d6:30:4b:ba:2c:eb:47:a6:aa:ca:43:9f:5f:38:9b:
3b:8e:50:8f:80:98:ca:be:72:3f:88:4f:cd:59:ec:
c8:d7:1f:1b:47:89:1c:0c:4d:fc:6d:5f:09:91:5b:
5f:54:86:4e:42:ad:0a:5a:39:6d:c0:4f:ce:6c:c3:
ee:ca:c3:53:47:62:df:05:21:76:3f:4c:f0:1f:a4:
22:e4:87:a6:ed:28:a2:68:cf:ea:24:f2:44:75:a1:
14:4e:b5:26:3a:6d:01:7e:bc:e0:87:80:ec:3a:e1:
95:66:4c:01:82:dd:65:88:b2:31:74:23:97:92:64:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:33:61:BA:0D:3F:2F:29:E3:BA:FF:40:99:2E:38:D7:FE:F5:68:AD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/NzNhug0_Lynjuv9AmS441_71aK0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.128/25
Signature Algorithm: sha256WithRSAEncryption
9f:6d:76:a6:8f:1e:a9:a2:08:f5:b8:30:27:d3:51:3d:ff:a0:
70:84:e4:b3:ec:ab:cb:7c:2a:5b:8d:3d:37:64:d7:9b:41:47:
b9:81:6c:53:fa:83:94:a5:77:17:78:b9:73:06:78:90:9f:20:
0a:41:91:9b:a8:4f:cf:a4:5f:78:00:25:ea:31:72:3e:b1:da:
86:91:de:14:ae:aa:35:ab:3a:1c:b7:32:8a:67:a4:76:e3:66:
b4:b0:98:91:cd:1a:c6:1b:e0:f6:bf:1e:8b:4b:0c:e4:4b:d5:
41:1f:f3:ae:23:11:9f:a4:14:f4:44:46:91:51:cd:04:0d:b5:
58:ac:53:fa:7f:b1:7e:e5:6b:49:c1:ff:b4:16:a9:06:be:d5:
6e:86:ce:41:d0:7f:9e:3a:46:c4:6a:a8:67:c4:26:4f:5f:87:
a7:ed:4f:22:28:5f:1c:96:c5:f4:22:2a:45:6f:a9:81:a3:ef:
ba:ae:aa:fa:7c:63:34:6f:a5:73:00:4a:f0:8e:01:e0:2c:4d:
65:fb:7e:87:cd:a2:74:39:d3:bf:2b:d1:23:3a:48:e6:11:99:
de:18:b3:94:cf:e1:0c:61:44:0b:e8:83:65:56:25:13:7f:c3:
a1:4a:93:39:f3:53:2e:16:01:0b:11:3c:20:14:1b:09:2b:e1:
14:17:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org