Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S1xjNfkqkcyRwV2jhZi8o_cpGqQ.roa
File: S1xjNfkqkcyRwV2jhZi8o_cpGqQ.roa (raw, json)
Hash identifier: ltxjNQYeMK7AjqhlUhS5797/Nd8kRCTCZbcKYSHqDos=
Subject key identifier: 4B:5C:63:35:F9:2A:91:CC:91:C1:5D:A3:85:98:BC:A3:F7:29:1A:A4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 291D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S1xjNfkqkcyRwV2jhZi8o_cpGqQ.roa
Signing time: Fri 01 Sep 2023 10:06:09 +0000
ROA not before: Fri 01 Sep 2023 10:06:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10525 (0x291d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4B5C6335F92A91CC91C15DA38598BCA3F7291AA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3a:fb:d3:40:d6:3c:28:40:87:94:fe:75:36:
94:de:ba:55:12:7c:c0:d7:a2:36:73:05:f0:f0:82:
76:4e:9d:95:5a:73:d2:50:cc:07:04:1e:3e:1e:26:
6d:31:9b:7e:79:52:a9:a8:f7:64:e7:18:28:03:97:
89:b1:d1:f5:87:b2:e2:22:5e:36:fb:8f:0c:69:d3:
f6:55:60:ef:d4:e6:05:69:fd:20:57:d6:5b:f3:0a:
55:5f:18:d6:8d:31:a6:6e:38:ca:00:66:b8:7d:2e:
31:01:3e:f4:53:71:63:84:bf:bf:64:c2:c9:cb:af:
fa:43:c9:ab:51:c8:0c:e5:0b:f5:f4:65:bd:dc:8b:
6e:18:ec:3d:87:8c:bd:d9:ae:fb:be:cb:91:a7:d4:
45:82:7d:c1:19:cb:74:d9:d2:de:16:96:9e:61:73:
e7:d1:7b:44:72:39:88:c9:73:1f:29:25:48:6f:9f:
3c:44:04:d7:e0:bd:e0:e6:89:ff:47:b2:02:98:40:
07:0c:c3:ac:bb:e0:58:b3:1e:18:8a:e6:b8:7b:78:
16:22:52:8b:d9:7f:e6:95:eb:89:e1:9e:6b:ce:2f:
ad:24:f3:a5:25:fe:b6:04:b3:0e:a6:32:b0:dd:ac:
a5:a7:be:b9:7a:45:a8:b7:a0:9a:c0:a3:54:75:47:
13:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:63:35:F9:2A:91:CC:91:C1:5D:A3:85:98:BC:A3:F7:29:1A:A4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S1xjNfkqkcyRwV2jhZi8o_cpGqQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.252.0/24
Signature Algorithm: sha256WithRSAEncryption
41:92:ac:dd:35:74:70:ca:3a:51:f1:4e:29:f7:84:1b:09:68:
0c:5d:2b:e3:8b:f7:0f:13:95:b1:fb:69:d2:39:90:ee:43:0d:
c8:da:e9:43:19:00:78:6f:69:bc:25:3f:9e:08:e2:43:2c:1d:
8c:c8:d2:be:4a:a2:f0:74:13:a0:b6:a3:c6:e1:f4:c4:a1:55:
be:aa:b5:4c:d7:80:c8:28:f2:37:d7:15:8e:d0:a8:87:8b:a1:
6b:f7:63:c4:41:d3:50:07:73:fe:44:df:7d:ab:87:89:6a:2d:
6d:b9:5c:7a:04:43:2f:3b:4d:e0:d5:b2:a7:4b:1e:19:9f:3a:
2c:6a:6e:90:13:6e:00:7a:8a:5f:d7:61:0b:ef:89:0f:a4:ae:
71:f9:79:25:b7:89:f7:cb:4d:e3:d4:7c:c0:a1:f6:05:50:39:
52:74:6c:9f:8c:68:f8:a7:ee:ba:5f:51:3e:75:78:dc:86:75:
f1:d2:76:3d:37:20:98:38:0e:20:20:50:3f:8f:26:82:1c:2f:
c3:c3:a3:56:19:0f:ad:80:98:4a:e9:25:89:e8:e8:59:18:c9:
74:d2:79:70:f3:e9:0f:af:a4:a7:ab:1b:c6:c7:73:37:56:c4:
20:91:06:24:89:79:54:ed:48:c5:88:08:68:3e:55:51:e9:1f:
f3:25:6a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org