Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R-1U1QaNFZqVmu9qMfNCeyVrAvA.roa
File: R-1U1QaNFZqVmu9qMfNCeyVrAvA.roa (raw, json)
Hash identifier: G+q2jYBwA0wdkiMpMjpJpQxz0VOvMidguDRfjBxaoTE=
Subject key identifier: 47:ED:54:D5:06:8D:15:9A:95:9A:EF:6A:31:F3:42:7B:25:6B:02:F0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A8C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R-1U1QaNFZqVmu9qMfNCeyVrAvA.roa
Signing time: Fri 01 Sep 2023 10:08:02 +0000
ROA not before: Fri 01 Sep 2023 10:08:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10892 (0x2a8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=47ED54D5068D159A959AEF6A31F3427B256B02F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:2e:4e:75:76:cf:c3:5e:7e:f7:e5:cb:91:
dc:70:e7:79:d5:4d:b3:16:81:9d:d0:02:a4:2a:77:
b4:c5:37:5b:28:4b:0f:ce:fc:88:ca:1f:cf:58:9e:
44:c5:92:f0:a3:d2:a4:88:93:90:52:dc:18:b1:e1:
00:5c:17:f0:63:a1:2c:33:fc:5b:af:28:89:0a:ab:
b3:61:f9:04:da:30:78:56:53:b8:3e:1d:b1:4a:a8:
70:22:7f:ff:6d:2d:5c:42:33:00:77:2e:49:ee:0b:
99:4c:2d:65:5b:af:e4:32:12:f9:07:2f:e3:71:45:
55:b7:7b:2c:9c:a9:b6:42:51:9d:2e:d2:99:9e:d6:
e3:75:74:73:c1:0b:52:91:e2:57:49:ea:25:b9:ee:
0e:de:9e:97:e3:f5:ca:d3:55:4e:85:11:c7:73:3d:
6f:45:ee:1e:10:73:14:45:e5:cd:b7:19:50:c3:94:
ec:5b:46:b6:92:73:1e:3c:03:ae:a5:5a:d6:74:df:
eb:a5:54:9b:d6:91:a0:4f:31:cd:5d:9c:7f:cf:5e:
5d:81:95:54:1c:a8:95:8e:d8:5c:c9:b4:c1:fc:7e:
4b:25:40:21:1f:e5:83:0c:7a:bd:cd:32:b7:02:b8:
59:18:1a:8b:21:69:52:16:e2:80:c1:62:00:8b:78:
e1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:ED:54:D5:06:8D:15:9A:95:9A:EF:6A:31:F3:42:7B:25:6B:02:F0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R-1U1QaNFZqVmu9qMfNCeyVrAvA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:88:fd:ab:9d:8c:a2:f9:72:20:87:b0:0b:07:89:d4:75:fd:
6b:ab:eb:a1:29:f4:a6:e2:d5:ac:67:57:01:0d:24:1b:51:83:
8a:4d:63:b2:02:bb:d3:f7:22:d0:57:54:ec:24:3b:53:ca:a9:
62:54:16:fc:32:77:6c:fa:28:55:bc:98:fc:25:4a:28:1a:a4:
c9:cd:e1:e9:bb:4c:84:ef:de:a0:d4:52:48:26:bf:a3:1e:f9:
86:6f:1d:b8:ed:b4:09:72:bc:34:dd:98:6c:8f:87:60:aa:76:
83:71:58:83:40:90:90:ca:38:4d:5d:10:e9:a5:0c:30:fb:3a:
20:4f:c0:c7:e6:86:8e:ff:49:ca:33:40:e3:d6:ae:cc:e0:14:
0f:6a:d7:70:e1:70:60:f7:d6:b3:45:d5:68:4b:31:2d:29:93:
6f:b7:ea:92:8d:ef:32:f7:a8:d3:8b:97:07:8f:e7:72:49:1a:
19:11:84:55:6b:4d:8b:8c:ef:97:a4:2a:3a:84:e7:56:55:04:
df:c4:26:21:8c:ca:dd:d1:76:47:1f:14:41:49:b5:80:fc:17:
10:01:cd:a6:a7:02:d9:6c:bd:ac:61:45:b7:5f:0c:f6:27:05:
63:aa:7f:4a:75:06:a7:9c:ff:94:4e:7d:ce:02:c6:16:7e:ab:
76:b9:a9:dd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ3RUQ1NEQ1MDY4RDE1
OUE5NTlBRUY2QTMxRjM0MjdCMjU2QjAyRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdES5OdXbPw15+9+XLkdxw53nVTbMWgZ3QAqQqd7TFN1soSw/O
/IjKH89YnkTFkvCj0qSIk5BS3Bix4QBcF/BjoSwz/FuvKIkKq7Nh+QTaMHhWU7g+
HbFKqHAif/9tLVxCMwB3LknuC5lMLWVbr+QyEvkHL+NxRVW3eyycqbZCUZ0u0pme
1uN1dHPBC1KR4ldJ6iW57g7enpfj9crTVU6FEcdzPW9F7h4QcxRF5c23GVDDlOxb
RraScx48A66lWtZ03+ulVJvWkaBPMc1dnH/PXl2BlVQcqJWO2FzJtMH8fkslQCEf
5YMMer3NMrcCuFkYGoshaVIW4oDBYgCLeOEFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUR+1U1QaNFZqVmu9qMfNCeyVrAvAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ItMVUxUWFORlpxVm11OXFN
Zk5DZXlWckF2QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wpQwDQYJKoZIhvcNAQELBQADggEBAG6I/audjKL5ciCHsAsHidR1/Wur66Ep9Kbi
1axnVwENJBtRg4pNY7ICu9P3ItBXVOwkO1PKqWJUFvwyd2z6KFW8mPwlSigapMnN
4em7TITv3qDUUkgmv6Me+YZvHbjttAlyvDTdmGyPh2CqdoNxWINAkJDKOE1dEOml
DDD7OiBPwMfmho7/ScozQOPWrszgFA9q13DhcGD31rNF1WhLMS0pk2+36pKN7zL3
qNOLlweP53JJGhkRhFVrTYuM75ekKjqE51ZVBN/EJiGMyt3RdkcfFEFJtYD8FxAB
zaanAtlsvaxhRbdfDPYnBWOqf0p1Bqec/5ROfc4CxhZ+q3a5qd0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org