Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QcX-_cWDoigtr9E1NCv7V8VQ6dk.roa
File: QcX-_cWDoigtr9E1NCv7V8VQ6dk.roa (raw, json)
Hash identifier: eUKT3v6qnBSlHxLqj8f7kDWCO1/B/hGp7x+ATwz4+Dw=
Subject key identifier: 41:C5:FE:FD:C5:83:A2:28:2D:AF:D1:35:34:2B:FB:57:C5:50:E9:D9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2942
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QcX-_cWDoigtr9E1NCv7V8VQ6dk.roa
Signing time: Fri 01 Sep 2023 10:06:19 +0000
ROA not before: Fri 01 Sep 2023 10:06:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10562 (0x2942)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=41C5FEFDC583A2282DAFD135342BFB57C550E9D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:22:43:94:82:84:3c:d9:00:7a:86:fb:e9:b9:
ed:0b:e1:ea:14:ad:60:3a:5e:f4:61:ab:3a:c0:8b:
0d:4e:e7:7c:00:3c:e0:02:cc:ab:b2:3a:3e:f8:44:
ec:1a:56:0d:42:b0:ba:dd:9b:20:c1:10:b6:d7:56:
46:01:a5:8a:7f:b9:d0:40:ad:5e:0c:02:48:36:82:
10:94:4f:e4:93:e4:f1:eb:83:7c:4f:f6:83:b0:ad:
73:bb:7f:72:39:40:26:da:f0:1d:93:f1:93:85:6c:
8f:84:39:a4:e7:ba:04:19:5b:6b:8b:9b:97:76:1a:
b6:fa:db:a5:6d:20:93:58:b4:2b:5b:91:ad:b4:58:
f7:49:35:96:0b:e5:f9:a3:71:da:95:cf:4a:27:cd:
70:3d:45:74:1d:05:e6:34:5a:23:95:cc:5d:78:a8:
67:38:b7:57:33:1b:3c:c4:c9:cb:72:56:b5:c9:39:
0e:de:0e:33:b2:72:9a:68:31:8f:1c:d0:ef:a1:6d:
c4:77:f3:b9:97:20:04:7b:c0:c4:bd:2b:df:b3:f4:
0a:c5:11:1f:b6:ee:99:e7:60:67:11:fa:5a:33:e1:
0e:12:ed:be:cf:87:8b:87:2d:34:08:80:8b:96:47:
e4:d8:6d:cb:f5:d6:6d:b0:55:5b:76:ec:49:fa:1b:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C5:FE:FD:C5:83:A2:28:2D:AF:D1:35:34:2B:FB:57:C5:50:E9:D9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/QcX-_cWDoigtr9E1NCv7V8VQ6dk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.16.0/21
Signature Algorithm: sha256WithRSAEncryption
71:5f:47:71:a2:9b:fd:7c:5c:45:f5:37:8f:44:4d:1a:68:71:
3e:4c:c4:23:a8:fd:5e:7d:2f:fb:fb:ab:96:d4:c2:0c:88:36:
8d:43:53:d5:9f:39:96:2b:6e:c4:c9:aa:15:b1:c3:bb:7f:47:
62:0c:b6:5c:5a:b6:f2:d1:22:f7:bb:52:3e:f9:1f:d9:48:8d:
c5:fa:aa:21:ba:26:e8:0b:00:5f:9d:cb:2e:14:fb:d0:2e:1b:
36:00:61:97:7a:4c:b0:0a:76:ce:d3:30:f2:c2:7e:e2:cc:d3:
6e:06:c1:d8:46:7c:e4:e6:1b:0c:42:e3:33:21:46:12:47:ca:
3a:08:9d:95:5c:cc:ed:e7:6d:76:8c:be:e0:c8:9c:61:b4:57:
f3:22:f4:db:bf:44:a9:47:68:3b:47:35:c1:95:81:1e:fd:85:
02:44:01:3a:3b:d1:46:77:b7:f0:26:34:f5:a2:ca:a7:6d:25:
5e:30:d4:b8:3e:1d:1d:40:82:a9:92:e2:de:31:6f:91:85:8f:
48:35:26:b0:6f:e9:83:15:d5:16:79:86:7d:e9:5f:e2:e3:2a:
4b:a5:05:26:9f:39:7e:6c:4e:a4:3c:a7:fe:e6:cd:fe:7a:c0:
6f:c7:bc:37:8f:89:4c:49:0e:bb:c7:0d:fc:46:c8:69:d1:a3:
6b:3a:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org