Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RP50a5no50pIh1gJHIzQuXoD_qM.roa
File: RP50a5no50pIh1gJHIzQuXoD_qM.roa (raw, json)
Hash identifier: cGJo7XhN8uItiuPRj8HWFpu/vAcfmNHpnBCG9CukOjU=
Subject key identifier: 44:FE:74:6B:99:E8:E7:4A:48:87:58:09:1C:8C:D0:B9:7A:03:FE:A3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2B0E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RP50a5no50pIh1gJHIzQuXoD_qM.roa
Signing time: Fri 01 Sep 2023 10:09:48 +0000
ROA not before: Fri 01 Sep 2023 10:09:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11022 (0x2b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:09:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=44FE746B99E8E74A488758091C8CD0B97A03FEA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:4e:97:ee:15:ac:9d:5e:4f:73:2c:87:d2:
e6:61:f0:75:cc:45:67:7b:bb:f6:ed:79:d8:b9:a9:
dd:df:87:88:75:cf:96:36:d8:70:14:38:a6:0f:54:
c1:48:10:15:7d:2a:df:b4:5e:1b:31:9a:e0:26:35:
aa:24:4c:22:d1:58:23:5b:79:16:8c:40:74:36:67:
0b:a5:fa:5e:32:6a:44:b8:56:36:88:3c:cd:c1:c0:
9a:c9:52:21:bc:2d:71:9b:a8:32:f7:4e:e9:03:fd:
66:17:a7:58:1d:6a:a2:41:4d:4a:62:55:33:43:41:
f1:e4:10:76:e1:72:a7:4d:3c:16:ff:c3:d0:22:8a:
e8:2d:e8:df:87:3d:47:0d:72:84:0f:66:75:13:e7:
ba:34:b5:91:93:24:11:19:8b:0b:42:46:f6:53:d0:
47:67:53:b1:95:2a:93:32:e5:9b:2e:e3:d8:9a:4a:
06:ee:09:8c:fa:62:ba:d8:94:eb:7a:74:18:46:ca:
48:34:4f:26:a1:a2:70:3e:25:03:d0:3b:19:2b:97:
b5:65:12:b9:9b:0f:cb:24:f3:90:5b:96:8a:1e:c6:
20:5e:13:56:da:68:8c:91:73:da:fa:63:1c:7a:a5:
65:82:b9:60:2c:30:e5:7c:14:c7:9c:78:3b:f2:6b:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FE:74:6B:99:E8:E7:4A:48:87:58:09:1C:8C:D0:B9:7A:03:FE:A3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/RP50a5no50pIh1gJHIzQuXoD_qM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.252.0/22
Signature Algorithm: sha256WithRSAEncryption
01:f1:f9:a8:aa:fb:01:10:74:21:15:a7:c9:09:ff:35:5d:4f:
60:e9:7f:aa:86:14:fe:f4:d9:94:43:1c:24:79:cd:24:77:91:
f9:53:60:a7:79:be:3b:e2:a1:bd:8e:b5:45:9e:7b:51:5f:86:
86:77:30:fc:cf:0b:9e:a5:ef:01:9f:7c:28:36:c6:b8:f9:b0:
50:8b:44:4d:fb:7e:3f:23:39:f9:b8:cc:69:4a:80:fd:05:e5:
6e:15:bc:7c:c8:b9:49:5b:d7:ec:75:e0:94:d6:ab:3c:e8:16:
51:39:a1:a5:8a:8f:f2:32:cc:6c:d0:84:44:00:7f:3f:dc:06:
4e:02:79:79:d8:5a:24:25:ef:15:0a:1e:dd:bb:d9:97:b3:04:
bb:98:42:e0:61:cc:62:8f:75:bd:a3:a6:aa:c0:12:b0:1f:98:
4f:c6:22:8d:d8:03:f0:66:97:64:6b:a2:ed:90:f9:35:65:e5:
e1:18:3e:8f:ab:37:d9:ad:b4:b9:96:7c:2f:cb:c3:88:5b:18:
30:bf:4a:75:cd:33:8e:57:07:21:84:d3:c3:c2:2a:5f:ac:c7:
b1:f5:1a:7c:b2:41:09:bd:f5:e0:b5:9d:ea:86:a4:da:ed:4d:
46:3e:df:d0:ed:c7:88:88:9e:bb:68:f6:68:77:0b:1d:0b:a4:
17:78:0a:28
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKw4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA5NDhaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDQ0RkU3NDZCOTlFOEU3
NEE0ODg3NTgwOTFDOENEMEI5N0EwM0ZFQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDajU6X7hWsnV5PcyyH0uZh8HXMRWd7u/btedi5qd3fh4h1z5Y2
2HAUOKYPVMFIEBV9Kt+0XhsxmuAmNaokTCLRWCNbeRaMQHQ2Zwul+l4yakS4VjaI
PM3BwJrJUiG8LXGbqDL3TukD/WYXp1gdaqJBTUpiVTNDQfHkEHbhcqdNPBb/w9Ai
iugt6N+HPUcNcoQPZnUT57o0tZGTJBEZiwtCRvZT0EdnU7GVKpMy5Zsu49iaSgbu
CYz6YrrYlOt6dBhGykg0TyahonA+JQPQOxkrl7VlErmbD8sk85BblooexiBeE1ba
aIyRc9r6Yxx6pWWCuWAsMOV8FMeceDvyawgHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQURP50a5no50pIh1gJHIzQuXoD/qMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1JQNTBhNW5vNTBwSWgxZ0pI
SXpRdVhvRF9xTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wvwwDQYJKoZIhvcNAQELBQADggEBAAHx+aiq+wEQdCEVp8kJ/zVdT2Dpf6qGFP70
2ZRDHCR5zSR3kflTYKd5vjviob2OtUWee1FfhoZ3MPzPC56l7wGffCg2xrj5sFCL
RE37fj8jOfm4zGlKgP0F5W4VvHzIuUlb1+x14JTWqzzoFlE5oaWKj/IyzGzQhEQA
fz/cBk4CeXnYWiQl7xUKHt272ZezBLuYQuBhzGKPdb2jpqrAErAfmE/GIo3YA/Bm
l2Rrou2Q+TVl5eEYPo+rN9mttLmWfC/Lw4hbGDC/SnXNM45XByGE08PCKl+sx7H1
GnyyQQm99eC1neqGpNrtTUY+39Dtx4iInrto9mh3Cx0LpBd4Cig=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org