Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sg4vF_ppeu1uQPvtQaooTd0mOsY.roa
File: Sg4vF_ppeu1uQPvtQaooTd0mOsY.roa (raw, json)
Hash identifier: R9nhavtGJEQczAMNIILB0aJSJXQBKXrr6fesFC49Am4=
Subject key identifier: 4A:0E:2F:17:FA:69:7A:ED:6E:40:FB:ED:41:AA:28:4D:DD:26:3A:C6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29E0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sg4vF_ppeu1uQPvtQaooTd0mOsY.roa
Signing time: Fri 01 Sep 2023 10:07:12 +0000
ROA not before: Fri 01 Sep 2023 10:07:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10720 (0x29e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4A0E2F17FA697AED6E40FBED41AA284DDD263AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:e1:c4:ff:fb:d1:fb:67:bb:45:10:a1:e6:
d3:04:92:e0:50:ff:cb:11:89:f5:f5:dc:28:43:16:
af:6d:71:cf:39:2a:be:6a:53:12:42:e0:89:07:56:
d5:49:bd:bc:8c:70:9c:16:25:66:a1:ad:34:42:af:
05:1a:4e:83:d8:b3:58:38:3f:2c:f0:09:aa:71:6b:
bc:ca:f8:05:3d:6d:af:18:e6:ad:fd:35:33:60:11:
78:2a:a6:da:4a:20:3e:52:3e:83:7c:11:8e:06:b1:
9d:0e:c5:b3:31:2d:cf:9e:10:e7:ea:0b:d7:5e:af:
00:1f:5b:da:25:ec:44:e3:50:28:32:65:79:ee:d7:
0b:a4:22:56:a4:93:04:7c:ad:8d:0c:b6:e4:74:25:
36:14:27:92:e6:e0:6b:87:d9:c2:77:2a:a0:a9:03:
a1:d8:47:ae:c6:ee:81:5b:44:ca:7c:10:b5:de:43:
79:c0:98:ca:45:64:97:ef:c6:6e:1e:59:3d:5d:d3:
3c:48:f2:27:26:9c:a2:d7:4b:da:6f:44:dd:a2:3e:
80:48:f4:21:44:3b:c0:0d:42:27:f2:b7:18:5d:9c:
c3:d9:54:aa:94:1c:17:df:f8:41:0e:3b:6d:12:95:
a3:39:3c:49:cb:ff:72:d2:46:4f:1c:4b:fd:6e:c4:
d0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:2F:17:FA:69:7A:ED:6E:40:FB:ED:41:AA:28:4D:DD:26:3A:C6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sg4vF_ppeu1uQPvtQaooTd0mOsY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.212.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:6d:a4:16:05:a9:a7:bb:2e:d5:8c:c1:0b:d7:79:28:2c:71:
44:ec:f9:d1:ee:d0:24:7f:a0:87:29:0d:90:7a:2b:71:62:ae:
9e:a8:75:9f:4f:cb:ab:b1:b1:1f:e1:c6:e1:28:2b:e7:fd:bf:
c6:32:87:7c:ef:4b:5e:14:26:e4:a1:ed:ef:61:a1:ab:8d:8a:
cf:82:23:07:71:4c:68:09:94:8f:de:07:05:f0:dc:c3:5c:17:
cc:f8:e7:c1:58:3f:1e:e0:6b:61:1d:ba:d9:1a:c3:2a:f7:cd:
49:94:ff:b3:4c:b1:1c:d2:17:aa:35:98:88:4c:08:d3:06:c4:
d1:36:44:e3:07:95:55:30:cc:f7:42:cf:95:2f:94:5b:fb:01:
d7:6d:ba:02:c4:68:f6:8e:bc:9c:fc:e6:ed:43:07:1b:f8:89:
ca:c9:0d:0b:50:8c:5a:42:77:e2:d6:22:81:ab:9b:37:47:b4:
5f:64:5c:fe:c7:58:d2:3b:2d:3d:07:c5:91:76:e6:91:94:81:
8a:a5:d9:68:cd:3d:b0:86:ad:42:95:3a:93:86:65:53:b4:20:
ed:fa:ac:71:27:65:ae:a2:7d:cf:ab:fa:92:25:c0:ff:ac:cc:
16:93:69:a8:f5:aa:7a:05:3b:1c:83:9a:83:41:f1:e3:cf:74:
59:49:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org