Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TUP42LyInL3pRM6Dp-y8Yol1deo.roa
File: TUP42LyInL3pRM6Dp-y8Yol1deo.roa (raw, json)
Hash identifier: 8NRyq1hv7ypE1Y2NdmWuGhGjpz47x/mPeCb/QWq032o=
Subject key identifier: 4D:43:F8:D8:BC:88:9C:BD:E9:44:CE:83:A7:EC:BC:62:89:75:75:EA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A9B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TUP42LyInL3pRM6Dp-y8Yol1deo.roa
Signing time: Fri 01 Sep 2023 10:08:06 +0000
ROA not before: Fri 01 Sep 2023 10:08:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10907 (0x2a9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4D43F8D8BC889CBDE944CE83A7ECBC62897575EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f5:5b:dc:28:83:82:fe:32:29:1b:52:5e:83:
b6:db:22:bb:12:db:79:49:fa:9c:87:d3:f4:d2:01:
22:85:97:10:c3:de:2b:2d:c2:b7:8c:d3:d3:30:c1:
2a:d0:4c:51:5d:87:53:a5:5b:36:aa:28:bc:7e:52:
cd:87:6e:14:de:10:ed:31:31:a0:5a:8e:3a:ac:60:
c7:22:cd:32:db:8e:ca:cc:75:a8:d7:48:a7:0c:cb:
ce:03:b0:26:47:e8:c2:bb:fa:eb:39:40:1c:09:f8:
79:de:6b:5a:9e:40:1e:70:bc:91:e1:39:9c:53:38:
5d:fa:4d:0e:f8:df:9f:83:2b:ae:a0:82:86:45:0e:
19:18:ec:26:3a:69:d9:51:b2:de:f1:d1:3f:34:d1:
d4:9f:a9:30:6d:0c:3d:2e:8d:27:c1:6c:6a:1b:61:
c5:85:2f:a1:32:c6:0b:f2:c7:7f:a3:19:b4:99:17:
93:d3:36:39:05:a2:c3:1a:63:49:90:b3:bd:59:af:
df:99:2b:dc:aa:63:06:fb:88:b2:ab:63:99:a2:8e:
7f:88:c0:64:c5:dd:57:9b:01:58:0b:9e:57:b9:86:
1d:ef:90:40:7b:bd:ce:b1:17:e7:f4:74:0d:c4:02:
74:83:10:63:87:74:4a:90:95:53:68:50:7a:1b:61:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:F8:D8:BC:88:9C:BD:E9:44:CE:83:A7:EC:BC:62:89:75:75:EA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TUP42LyInL3pRM6Dp-y8Yol1deo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.156.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:28:25:91:2c:9c:64:98:b4:8b:ce:cf:8d:63:e2:5d:a6:b5:
81:21:6c:be:08:c1:e1:c3:c5:7d:d1:20:ce:63:07:c0:5f:7f:
69:8e:4f:54:4f:6d:f8:d7:73:cf:82:35:09:cb:11:40:fd:84:
83:59:3f:55:35:f0:63:e2:d6:f1:bc:19:7b:db:3a:7f:10:51:
e9:66:e1:84:a6:64:2e:e6:b1:13:92:29:de:3d:09:45:ff:1d:
63:49:5d:01:f5:e4:a1:11:91:4a:24:4d:60:66:4d:dd:58:d0:
01:08:49:0e:52:1f:fb:0a:b3:d7:c2:b9:89:6e:17:04:e8:df:
2e:0a:a8:fd:df:46:fb:da:b6:f4:dc:73:6e:e3:22:69:5f:9c:
d0:b4:97:df:4b:70:1d:a5:0d:cb:05:28:e0:8a:d9:5a:81:32:
cc:2c:8a:a7:66:f2:31:ea:47:53:d9:3f:57:44:dd:6f:8b:d8:
09:11:fe:1d:49:72:20:b0:a0:86:19:53:9a:b9:7d:94:b8:9f:
06:51:f9:26:f9:71:fa:42:fb:24:c8:f9:ec:ec:24:44:1a:cf:
8f:0d:63:fd:db:5b:b2:8a:8a:8d:7e:13:a2:74:c7:ce:8b:da:
51:2c:8f:62:92:7a:d0:60:98:16:a3:07:e8:c7:93:6c:0c:21:
be:fb:cc:f6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKpswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDRENDNGOEQ4QkM4ODlD
QkRFOTQ0Q0U4M0E3RUNCQzYyODk3NTc1RUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC69VvcKIOC/jIpG1Jeg7bbIrsS23lJ+pyH0/TSASKFlxDD3ist
wreM09MwwSrQTFFdh1OlWzaqKLx+Us2HbhTeEO0xMaBajjqsYMcizTLbjsrMdajX
SKcMy84DsCZH6MK7+us5QBwJ+Hnea1qeQB5wvJHhOZxTOF36TQ7435+DK66ggoZF
DhkY7CY6adlRst7x0T800dSfqTBtDD0ujSfBbGobYcWFL6Eyxgvyx3+jGbSZF5PT
NjkFosMaY0mQs71Zr9+ZK9yqYwb7iLKrY5mijn+IwGTF3VebAVgLnle5hh3vkEB7
vc6xF+f0dA3EAnSDEGOHdEqQlVNoUHobYYshAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTUP42LyInL3pRM6Dp+y8Yol1deowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1RVUDQyTHlJbkwzcFJNNkRw
LXk4WW9sMWRlby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wJwwDQYJKoZIhvcNAQELBQADggEBAHwoJZEsnGSYtIvOz41j4l2mtYEhbL4IweHD
xX3RIM5jB8Bff2mOT1RPbfjXc8+CNQnLEUD9hINZP1U18GPi1vG8GXvbOn8QUelm
4YSmZC7msROSKd49CUX/HWNJXQH15KERkUokTWBmTd1Y0AEISQ5SH/sKs9fCuYlu
FwTo3y4KqP3fRvvatvTcc27jImlfnNC0l99LcB2lDcsFKOCK2VqBMswsiqdm8jHq
R1PZP1dE3W+L2AkR/h1JciCwoIYZU5q5fZS4nwZR+Sb5cfpC+yTI+ezsJEQaz48N
Y/3bW7KKio1+E6J0x86L2lEsj2KSetBgmBajB+jHk2wMIb77zPY=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org