Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UOZfBSJ_A7xXMp2q7dmaM_55tH8.roa
File: UOZfBSJ_A7xXMp2q7dmaM_55tH8.roa (raw, json)
Hash identifier: KwQKUW1TvhGoQTvD6CfPYTVLYYe8kJCrDv0fBo3TI3c=
Subject key identifier: 50:E6:5F:05:22:7F:03:BC:57:32:9D:AA:ED:D9:9A:33:FE:79:B4:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 286A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UOZfBSJ_A7xXMp2q7dmaM_55tH8.roa
Signing time: Fri 01 Sep 2023 10:05:18 +0000
ROA not before: Fri 01 Sep 2023 10:05:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10346 (0x286a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=50E65F05227F03BC57329DAAEDD99A33FE79B47F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:77:c0:59:7d:f5:d0:18:7f:d9:83:f5:09:d9:
3b:02:ad:c8:93:33:08:a0:c1:c9:d6:90:53:76:53:
ab:cd:0e:64:6e:bf:30:2b:85:1b:3d:66:36:98:eb:
44:7e:7c:d5:b2:6b:1f:ed:f2:83:5a:1e:97:e8:a9:
63:eb:66:49:17:f4:cf:ef:10:f2:99:b2:f7:ee:ac:
42:ba:65:cb:a9:48:85:35:89:af:d2:8b:c4:49:45:
3a:97:c4:38:d6:15:b0:4b:56:65:55:aa:72:0e:dc:
e4:fc:4b:b8:c0:33:37:49:3c:1b:9e:a3:3c:4c:58:
4c:63:21:41:26:df:15:62:09:ee:03:6e:f8:3b:42:
27:c1:a9:e5:3a:56:60:a4:b5:bd:ab:a0:68:25:88:
ec:48:64:60:1b:1a:5c:3b:81:92:0c:fb:ce:22:16:
37:7b:70:3d:30:a0:45:93:0e:79:d6:81:80:9a:92:
ad:7f:7e:fa:58:13:a7:81:31:4b:ef:4d:2c:c4:c3:
28:3d:bd:7a:90:8e:63:f8:05:8d:c1:89:4a:fa:59:
0c:4e:d2:e5:c2:1f:b9:2c:db:e5:e9:3f:5a:09:d0:
4e:8b:07:2c:c7:a3:a3:e0:0c:90:83:d3:ff:10:4c:
be:60:b4:bb:fd:4f:46:31:76:fc:0d:04:d2:8c:4c:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E6:5F:05:22:7F:03:BC:57:32:9D:AA:ED:D9:9A:33:FE:79:B4:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/UOZfBSJ_A7xXMp2q7dmaM_55tH8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.246.0/24
Signature Algorithm: sha256WithRSAEncryption
11:5f:b8:2d:f1:a4:c6:3b:e3:4b:05:f0:f4:72:27:df:34:9a:
83:da:78:42:d4:d1:52:2a:5d:2c:73:17:ed:47:fc:e1:1d:02:
bc:39:f3:23:34:de:f1:47:bf:19:2e:c1:92:b3:62:09:a6:74:
e6:a0:ba:c7:24:22:87:b8:85:27:a9:fd:24:dd:ab:a8:09:32:
90:c1:41:73:24:1d:21:68:95:e9:6b:e3:35:7d:98:97:1b:10:
82:7c:9b:d4:4f:7a:c6:d9:a9:53:07:67:a8:6b:3b:95:10:cd:
b8:41:ae:e6:6e:1a:4e:60:05:97:7c:b9:7f:c7:44:b9:33:40:
60:f6:83:cd:11:ed:3d:ab:81:a4:b1:f4:88:e5:d6:dc:9e:29:
5a:4c:d0:49:dc:73:e1:bd:76:7a:4f:fb:cb:38:3f:84:a4:38:
01:e8:8c:40:73:6f:1c:c0:a6:0a:53:89:af:d1:1f:1e:fa:8b:
7d:e5:68:ce:b5:09:80:43:54:eb:08:54:df:a3:05:11:db:7a:
9b:94:f7:52:9d:14:e8:ba:e7:54:37:19:08:a5:3f:60:9f:a0:
c3:10:7e:8c:f1:08:8b:2f:d4:07:61:78:8d:eb:34:48:2a:95:
9b:a1:4a:65:10:a0:9d:5b:83:c2:5a:db:e3:1e:64:c9:ef:1f:
81:a0:32:8c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKGowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDUwRTY1RjA1MjI3RjAz
QkM1NzMyOURBQUVERDk5QTMzRkU3OUI0N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+d8BZffXQGH/Zg/UJ2TsCrciTMwigwcnWkFN2U6vNDmRuvzAr
hRs9ZjaY60R+fNWyax/t8oNaHpfoqWPrZkkX9M/vEPKZsvfurEK6ZcupSIU1ia/S
i8RJRTqXxDjWFbBLVmVVqnIO3OT8S7jAMzdJPBueozxMWExjIUEm3xViCe4Dbvg7
QifBqeU6VmCktb2roGgliOxIZGAbGlw7gZIM+84iFjd7cD0woEWTDnnWgYCakq1/
fvpYE6eBMUvvTSzEwyg9vXqQjmP4BY3BiUr6WQxO0uXCH7ks2+XpP1oJ0E6LByzH
o6PgDJCD0/8QTL5gtLv9T0YxdvwNBNKMTMVPAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUUOZfBSJ/A7xXMp2q7dmaM/55tH8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1VPWmZCU0pfQTd4WE1wMnE3
ZG1hTV81NXRIOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wfYwDQYJKoZIhvcNAQELBQADggEBABFfuC3xpMY740sF8PRyJ980moPaeELU0VIq
XSxzF+1H/OEdArw58yM03vFHvxkuwZKzYgmmdOagusckIoe4hSep/STdq6gJMpDB
QXMkHSFolelr4zV9mJcbEIJ8m9RPesbZqVMHZ6hrO5UQzbhBruZuGk5gBZd8uX/H
RLkzQGD2g80R7T2rgaSx9Ijl1tyeKVpM0Encc+G9dnpP+8s4P4SkOAHojEBzbxzA
pgpTia/RHx76i33laM61CYBDVOsIVN+jBRHbepuU91KdFOi651Q3GQilP2CfoMMQ
fozxCIsv1AdheI3rNEgqlZuhSmUQoJ1bg8Ja2+MeZMnvH4GgMow=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org