Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QNVDSErCrm6zeiscOiCXRNz_ymk.roa
File: QNVDSErCrm6zeiscOiCXRNz_ymk.roa (raw, json)
Hash identifier: dV62jtG6v0oZe/u+AiWixeuTLpVjWAD5nw8kH6+N5+c=
Subject key identifier: 40:D5:43:48:4A:C2:AE:6E:B3:7A:2B:1C:3A:20:97:44:DC:FF:CA:69
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2944
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QNVDSErCrm6zeiscOiCXRNz_ymk.roa
Signing time: Fri 01 Sep 2023 10:06:20 +0000
ROA not before: Fri 01 Sep 2023 10:06:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10564 (0x2944)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=40D543484AC2AE6EB37A2B1C3A209744DCFFCA69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:52:29:c6:3e:a4:8a:70:3c:61:ce:a0:ac:
05:75:90:92:3a:08:a6:30:25:50:dc:eb:c1:65:25:
9f:65:2b:62:fd:d5:f5:79:5e:e8:c3:7a:a6:d1:80:
21:f0:28:cf:3d:9a:af:62:8d:2a:1a:14:67:0c:fe:
e5:79:19:2b:cb:26:16:55:49:cb:be:43:3b:0c:0f:
67:3b:76:48:d6:29:ad:fb:f6:e6:f0:ee:ae:86:c3:
d8:3d:36:44:d9:b5:a1:78:2d:f0:6f:d1:d5:8b:12:
67:43:1a:10:d5:d7:64:34:3e:e5:e4:af:1d:3f:79:
4b:f1:b8:8e:16:ad:f9:1b:59:51:f2:92:94:a5:a5:
13:10:df:e5:58:01:b3:ad:ea:67:b6:08:34:f2:6a:
07:8d:c6:dc:53:b7:52:1f:66:c7:90:b5:9c:59:74:
28:c6:0b:ce:d0:3c:dd:ce:17:e9:35:40:d6:8c:c5:
a9:fe:f5:a0:c3:c7:69:f9:9e:98:59:2a:34:fb:6c:
97:b4:ee:94:2f:8e:51:bd:61:95:73:db:ad:33:a4:
bb:d7:4b:47:cb:a6:dd:94:bc:a9:34:09:2d:e5:f5:
b1:aa:d5:29:44:c2:0a:b3:e0:cb:01:b6:1f:04:ff:
41:c4:62:17:89:5b:80:74:9c:a3:ee:80:f8:21:46:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D5:43:48:4A:C2:AE:6E:B3:7A:2B:1C:3A:20:97:44:DC:FF:CA:69
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QNVDSErCrm6zeiscOiCXRNz_ymk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.152.0/22
Signature Algorithm: sha256WithRSAEncryption
80:18:af:92:7d:9b:b6:71:15:68:03:24:98:f9:41:a5:bf:ec:
ee:78:79:c1:0c:8f:3d:52:d9:2c:64:c3:05:0a:5d:da:6d:f9:
27:9a:09:7b:ab:65:53:0f:32:23:b1:d6:a2:38:9f:f7:19:ca:
58:b0:3b:c2:2d:aa:11:0d:4b:20:0f:72:98:ab:d6:45:e8:fa:
7e:13:94:09:a7:6d:ef:db:d9:1d:b5:2e:74:57:58:83:79:ea:
c6:fd:4f:c9:1a:38:da:93:bc:3b:7d:7f:05:d5:f8:a2:9f:56:
8d:16:60:64:dd:58:83:79:d9:b8:58:fb:5f:95:91:76:82:4e:
ad:b4:f6:92:85:77:4e:d7:65:8f:0c:06:44:3f:32:d3:35:07:
2a:84:28:26:fe:7c:0a:da:5d:dd:87:6d:f7:54:e3:f7:98:c4:
1e:5e:69:ea:2c:23:97:90:e2:f4:5b:e0:bc:bd:ac:d5:5b:43:
ea:29:a7:be:f6:0c:bf:2f:33:ce:28:f5:79:10:2d:05:e0:f6:
5a:d3:98:0b:38:cb:f0:f5:dd:bb:b2:f0:a2:06:d4:aa:40:4d:
b0:64:02:e1:6f:2c:b3:dd:2e:9b:34:3a:5d:51:39:3e:c5:3a:
29:78:0f:64:09:54:d1:4f:fd:1a:4a:f8:be:9e:0d:c5:58:a7:
5e:0b:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org