Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PMooAjvz5kaDoxiaS8ptY6GuIY8.roa
File: PMooAjvz5kaDoxiaS8ptY6GuIY8.roa (raw, json)
Hash identifier: B0BHVLkrXLGQ99IoQaeWjsjzFY6XQr2uYhVel/TCt8s=
Subject key identifier: 3C:CA:28:02:3B:F3:E6:46:83:A3:18:9A:4B:CA:6D:63:A1:AE:21:8F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 290A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PMooAjvz5kaDoxiaS8ptY6GuIY8.roa
Signing time: Fri 01 Sep 2023 10:06:05 +0000
ROA not before: Fri 01 Sep 2023 10:06:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10506 (0x290a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3CCA28023BF3E64683A3189A4BCA6D63A1AE218F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:0f:5c:b7:26:02:b7:86:0e:2b:46:59:d2:
9b:9c:60:08:a6:a5:c0:ac:c4:92:71:6c:8e:c3:8d:
5a:0e:45:6e:c3:96:50:49:ef:b6:93:62:04:a9:0c:
b7:29:20:7d:e0:62:ce:4d:30:c3:68:4c:12:fd:ec:
7c:48:02:cb:81:75:f8:7f:13:ef:0a:1d:cd:ac:61:
e5:14:9a:16:df:64:c6:57:fa:e0:87:61:1b:c8:03:
96:8e:e0:79:b2:29:1b:0b:91:c5:83:bc:8b:66:58:
c7:88:11:2d:5f:b3:37:3d:b9:72:0f:87:af:ab:e3:
ad:d2:30:e7:de:38:1c:22:f4:ab:db:d4:2f:29:6f:
e9:48:2b:40:d2:b8:a1:8d:a9:ce:88:a5:d0:71:1d:
4b:17:80:c7:d2:72:28:ef:e7:94:d5:12:7d:b5:b0:
e9:07:ad:87:ae:2b:29:89:54:d3:fb:b8:c0:d1:21:
7e:f9:50:9a:75:46:71:13:19:fe:ce:35:bb:42:11:
a9:79:b4:da:b4:23:53:53:b5:ae:db:54:b9:a4:4d:
7e:55:84:ed:99:45:23:07:2f:dc:82:1a:65:d7:56:
92:76:bd:df:32:e5:a8:26:93:70:8a:2a:a4:c3:44:
02:fe:02:13:c3:a2:1b:58:1c:3c:1b:93:b5:94:2d:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:28:02:3B:F3:E6:46:83:A3:18:9A:4B:CA:6D:63:A1:AE:21:8F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PMooAjvz5kaDoxiaS8ptY6GuIY8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.176.0/22
Signature Algorithm: sha256WithRSAEncryption
09:c1:d0:2c:7b:c5:76:47:db:8c:37:2e:64:31:24:e5:b0:41:
e7:a0:54:a4:da:23:e5:71:1c:81:66:e9:f2:f8:45:16:62:0f:
99:28:4c:d0:3e:0a:ac:f0:10:28:d9:45:38:cb:1a:81:e0:d8:
19:e2:e9:bb:1c:be:06:05:15:cf:c1:04:eb:9e:55:a2:e5:f6:
f8:31:f6:5a:e9:cd:50:43:a4:c1:7e:bc:b6:be:23:a3:ad:8a:
b0:35:11:f0:3a:ff:1a:4a:d6:1b:55:2b:95:b8:7b:2c:ee:e2:
f1:30:4a:ec:f6:07:83:53:a2:33:fe:de:e1:15:64:ef:0d:ad:
fc:e0:25:ba:55:b9:7a:d5:af:4f:a4:fc:03:ee:86:95:ac:76:
c6:37:b6:c3:19:d3:5b:88:91:01:00:10:86:39:15:9b:4b:cd:
4f:5a:da:2b:7e:2a:18:63:8f:97:7b:03:ee:97:5e:c7:1e:3c:
6b:07:d8:78:07:b6:1b:e3:b2:69:f5:6e:78:75:94:00:6e:9e:
c5:19:e2:cf:97:0a:5e:3b:bf:96:fe:f7:62:73:71:69:38:a0:
03:bd:27:5e:04:26:78:20:b3:18:33:e6:8c:34:4c:a4:30:6e:
3a:9e:62:4e:3d:d6:e0:e0:50:34:c4:86:c7:9f:90:98:e1:b5:
83:1a:b6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org