Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RG7FA4BQKEllWzMX8BkKglqDWm8.roa
File: RG7FA4BQKEllWzMX8BkKglqDWm8.roa (raw, json)
Hash identifier: B2/z1TH4fugwK8Snw0Edl4eaZ4VXHldfgE1InhQLwBI=
Subject key identifier: 44:6E:C5:03:80:50:28:49:65:5B:33:17:F0:19:0A:82:5A:83:5A:6F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B11
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RG7FA4BQKEllWzMX8BkKglqDWm8.roa
Signing time: Fri 01 Sep 2023 10:09:49 +0000
ROA not before: Fri 01 Sep 2023 10:09:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.184.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11025 (0x2b11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=446EC50380502849655B3317F0190A825A835A6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:b7:1d:a3:22:c0:92:41:ec:1a:8f:dd:39:
7f:83:33:ec:9d:ce:1e:b9:f7:93:a6:99:8f:7a:6d:
d9:82:80:08:ed:ba:7e:68:da:43:99:5b:4e:72:0c:
b0:50:c2:be:7c:dd:4f:a8:53:28:51:98:df:1e:b2:
ed:62:3f:0a:14:6f:aa:50:de:16:2c:15:e5:2b:d4:
97:10:29:ad:e7:a6:ca:62:c2:37:4d:1b:77:6e:aa:
49:5a:1b:0e:b8:e4:b1:86:df:9a:ac:06:69:5f:36:
b8:b8:7d:4c:ec:24:af:54:c0:60:86:1a:94:8b:ae:
e3:54:19:d6:dd:cf:9d:21:fb:24:51:c2:13:13:a4:
fc:54:75:a2:27:73:ef:e2:16:c6:6f:78:e9:cb:72:
d0:49:10:b2:de:e6:10:1a:0b:e9:d3:30:ce:5e:ec:
3b:01:42:4c:76:9d:13:33:97:99:32:e9:e4:41:01:
34:9a:c6:62:54:d7:e2:95:69:21:25:e9:79:36:31:
71:7e:89:6a:5c:1b:01:6f:09:3c:c8:a2:17:7e:9d:
07:ee:64:78:fe:fa:da:b5:cb:ee:47:e7:db:f4:7e:
1b:ff:fe:42:ff:33:97:42:1b:86:5a:e4:11:2c:15:
20:17:a6:cd:39:07:ce:3b:74:5f:00:11:b9:e0:7d:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6E:C5:03:80:50:28:49:65:5B:33:17:F0:19:0A:82:5A:83:5A:6F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RG7FA4BQKEllWzMX8BkKglqDWm8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.184.0/21
Signature Algorithm: sha256WithRSAEncryption
61:29:5b:5f:63:f3:8f:0a:ae:3a:c8:ca:34:ff:6e:c9:e4:39:
b9:6a:d2:11:4d:25:e6:0a:ea:e5:4b:1e:71:03:d5:4f:88:9a:
35:5a:d9:04:ef:e0:de:32:1a:3e:c4:6b:2b:bd:9b:b6:af:37:
3a:db:db:d8:1a:66:b9:e9:65:65:d7:08:57:52:73:5f:2e:23:
05:a6:a9:ff:9d:15:db:48:44:37:d6:2f:38:db:cb:22:ba:bd:
23:f0:9e:46:fc:75:d0:93:51:a4:63:04:c7:10:ba:14:4e:fb:
5d:72:a3:2a:c1:7c:74:98:50:8d:c8:c7:db:74:d2:eb:fa:3e:
6e:ce:ec:0e:3e:10:0d:4a:a3:76:d2:66:54:52:9c:42:91:65:
6c:ce:95:58:3d:63:2f:1e:81:b9:f1:4f:41:21:80:0f:7b:1c:
8c:e3:0f:e4:4f:9f:95:80:00:42:1b:f2:65:d1:48:2c:8c:ee:
ae:a3:bf:3b:c8:ac:81:83:ca:26:d1:0a:f9:8f:25:3b:f0:5b:
71:9c:4a:74:7f:4a:2e:79:92:b4:ef:81:df:01:6b:e5:80:83:
4c:47:b9:90:6d:19:3b:b1:ac:ca:d5:18:30:4f:53:8f:b7:e6:
c0:78:70:45:1b:52:4a:b2:55:b4:5e:e2:ef:00:29:3c:7a:83:
c0:1e:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org