Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S6DLh-sGGyYhl9Yd7I670MN_g0A.roa
File: S6DLh-sGGyYhl9Yd7I670MN_g0A.roa (raw, json)
Hash identifier: x0yAvlmvS6nwyV8n1LUPTdIUwH4u2b/m9drTtIu6vcg=
Subject key identifier: 4B:A0:CB:87:EB:06:1B:26:21:97:D6:1D:EC:8E:BB:D0:C3:7F:83:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27FA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S6DLh-sGGyYhl9Yd7I670MN_g0A.roa
Signing time: Fri 01 Sep 2023 10:04:48 +0000
ROA not before: Fri 01 Sep 2023 10:04:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10234 (0x27fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4BA0CB87EB061B262197D61DEC8EBBD0C37F8340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:23:3a:cd:50:f1:52:65:e8:de:b5:85:b2:
5e:74:3a:63:2d:cb:ce:ed:04:2b:a7:58:30:aa:13:
30:0e:55:0d:36:c0:5e:68:71:38:13:5f:3e:fe:75:
26:e0:e4:9d:b4:e5:4f:38:6a:ee:6b:28:73:b7:43:
9f:52:f7:a6:f2:5e:7c:a2:33:b5:04:89:02:4a:e7:
0b:18:a7:d5:8f:88:87:48:aa:73:d2:64:c9:8e:39:
35:6a:a2:ed:be:9c:5b:bc:30:74:12:86:e3:2d:6d:
f0:81:31:c9:10:63:7c:73:03:f5:a3:e7:61:80:44:
41:dc:83:e6:c9:63:f1:ec:de:1e:7d:f5:bb:03:25:
9d:fc:c5:23:c8:21:7a:ac:f1:99:53:88:68:f3:83:
6e:6c:25:f1:60:f8:97:ee:8a:9b:b9:93:1b:56:5c:
c9:f2:ca:43:3b:66:98:3f:f7:6f:68:5d:0d:04:c0:
c6:dd:48:d7:28:a8:4f:6e:a1:a8:3e:f9:b4:3d:8a:
33:06:35:46:47:b4:84:29:a0:c1:db:05:cb:f6:25:
f4:c0:93:a9:52:10:c5:a2:cc:a5:b8:8a:b0:e4:17:
62:4b:61:15:54:92:1f:7f:c2:2f:00:63:8c:1e:51:
a5:85:ca:b6:5a:91:4e:b5:d6:c4:17:a4:8e:4c:da:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A0:CB:87:EB:06:1B:26:21:97:D6:1D:EC:8E:BB:D0:C3:7F:83:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S6DLh-sGGyYhl9Yd7I670MN_g0A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.32.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:69:fb:3a:5a:3c:7e:e2:1a:40:fd:e2:84:81:d0:7b:6d:d1:
b2:87:56:e5:db:40:23:6d:92:d5:fe:d6:26:67:20:fc:62:96:
6c:c1:91:03:2f:6f:8e:02:31:32:a5:3c:5c:28:10:29:38:9c:
eb:08:c5:de:d3:da:5d:b5:ad:4a:b4:36:bf:f0:dd:1d:c2:45:
a9:39:e8:f3:e8:5f:2a:8a:52:46:9b:c6:9f:27:31:3b:4c:d4:
4e:45:68:af:58:8c:b3:3f:09:e3:71:3d:64:63:d4:02:d5:35:
70:94:21:74:27:e4:ae:16:3d:ec:38:28:fb:55:b6:65:31:93:
5b:00:6d:cb:f5:99:af:f4:cc:e6:40:93:d4:8d:a7:72:df:b6:
2d:15:3f:5c:9d:15:17:f5:d2:f5:a3:30:b9:bb:32:e0:ea:a5:
ba:c4:8f:0c:92:94:26:5f:7c:f6:f0:f2:e9:ff:24:a3:da:9b:
cf:82:c9:4f:17:75:a5:1a:d8:27:5f:5b:d5:1f:01:4e:c6:60:
cf:1f:47:ee:b4:a7:ba:d8:06:1a:90:5e:85:19:f1:63:63:d2:
10:f4:f1:b8:06:99:d5:2e:1c:2f:7a:7f:23:0c:68:f4:47:b4:
c8:df:a1:2d:09:d6:04:16:69:ed:68:91:93:01:9f:c5:f3:af:
33:56:81:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org