Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TUyEWL3JaLXS_PIzGnhM0o4dbF8.roa
File: TUyEWL3JaLXS_PIzGnhM0o4dbF8.roa (raw, json)
Hash identifier: +NlNp98dEQRKcB2+iUGaKiUn/iytNS8tScMHYPArxiA=
Subject key identifier: 4D:4C:84:58:BD:C9:68:B5:D2:FC:F2:33:1A:78:4C:D2:8E:1D:6C:5F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29DD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TUyEWL3JaLXS_PIzGnhM0o4dbF8.roa
Signing time: Fri 01 Sep 2023 10:07:11 +0000
ROA not before: Fri 01 Sep 2023 10:07:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.205.144/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10717 (0x29dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4D4C8458BDC968B5D2FCF2331A784CD28E1D6C5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:a3:d5:b4:86:dd:eb:56:2c:56:4e:7d:0b:
a0:ff:ec:7b:cb:84:7f:5b:49:87:76:c6:ee:54:0f:
a3:e2:98:33:4a:9c:dc:73:d4:4b:4e:5d:d0:27:a8:
ba:f8:49:88:f6:1f:f2:d5:32:03:d9:7f:ec:f9:bc:
5a:5f:65:27:5a:30:75:bd:2b:8e:7d:d3:d0:a6:24:
20:51:c4:b4:39:8e:e2:55:0f:2e:b6:20:36:c8:e5:
11:47:b7:aa:38:d5:40:cf:74:0f:74:a0:bf:1d:6c:
8e:b2:11:cf:52:75:68:64:22:6c:70:ba:4a:75:ef:
fa:ca:6f:81:88:2d:f1:75:96:4d:ff:b6:44:cb:8c:
55:cb:b9:2c:bd:0e:66:5c:be:09:1b:e4:59:a6:0c:
7d:6e:3c:e6:ba:d8:84:4e:35:10:90:0a:aa:8c:50:
11:fe:bc:5e:90:e7:31:e3:ea:18:de:2f:3a:8d:23:
ee:9a:dd:9b:2a:9d:b2:8a:8f:7f:c6:2f:a0:82:e1:
29:3f:21:b4:44:f8:b8:53:53:7e:8d:d7:ed:24:63:
55:9f:a3:80:73:b4:a3:ab:6f:98:72:84:3a:c3:a8:
14:7d:23:16:4e:55:8b:05:8c:18:0b:0e:3f:a7:9f:
5b:54:dc:a1:05:f2:f8:c3:15:2b:a7:08:99:0b:be:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:4C:84:58:BD:C9:68:B5:D2:FC:F2:33:1A:78:4C:D2:8E:1D:6C:5F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TUyEWL3JaLXS_PIzGnhM0o4dbF8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.144/28
Signature Algorithm: sha256WithRSAEncryption
53:3e:27:07:61:08:7d:a9:df:47:ee:db:bf:aa:75:6e:d8:bc:
67:bc:c6:f7:33:07:ef:96:42:43:96:e7:91:38:97:eb:50:f2:
b8:6a:07:72:8a:ae:cb:6b:55:ca:ab:da:53:f9:f4:e7:9c:24:
d0:c9:5e:35:6e:53:de:d1:d4:93:ab:42:ea:a5:d3:03:3f:03:
54:30:dc:0e:da:e4:3e:00:a5:7d:81:8c:d5:ba:e7:92:5c:6f:
eb:e8:61:71:2b:fb:96:50:61:35:63:81:49:e7:71:dc:8f:0e:
5d:40:b2:1d:d1:0e:01:00:78:7b:5e:9c:8b:ef:6f:e1:c8:fe:
12:8c:b2:9e:98:bc:9b:05:50:74:b1:b9:77:2e:e5:57:49:f2:
e7:e8:e0:5d:c5:3e:71:fa:38:64:14:55:76:16:00:ae:77:dd:
c8:1b:a2:0f:00:a7:d7:1c:80:70:02:3d:cc:24:5a:08:fb:86:
96:0a:5e:57:54:87:3b:03:45:20:72:df:98:09:e2:f5:24:b2:
89:30:f4:1c:af:bb:a2:d4:3b:d1:43:48:51:ac:ba:39:8d:c8:
3c:9c:c5:cb:3d:66:d6:cd:03:a1:ae:61:35:8a:64:39:ff:5e:
3a:e7:09:dd:d8:28:be:a1:8a:f2:ed:66:1f:a5:81:8a:c4:fe:
1f:ce:e4:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org