Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VhJbUq1ic4JVR5O_Eal-X5dDsE8.roa
File: VhJbUq1ic4JVR5O_Eal-X5dDsE8.roa (raw, json)
Hash identifier: TfCgbi+qI3ueJ8a7b5saPCkHu/hQZ6u8kKwj+3YV5aw=
Subject key identifier: 56:12:5B:52:AD:62:73:82:55:47:93:BF:11:A9:7E:5F:97:43:B0:4F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2839
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VhJbUq1ic4JVR5O_Eal-X5dDsE8.roa
Signing time: Fri 01 Sep 2023 10:05:05 +0000
ROA not before: Fri 01 Sep 2023 10:05:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10297 (0x2839)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=56125B52AD627382554793BF11A97E5F9743B04F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:13:39:ab:1e:c4:52:75:4a:e3:0e:ac:86:f1:
fb:23:65:ce:06:f4:21:8d:52:2e:d0:b3:2e:4c:c0:
ee:99:ce:5f:c9:11:c8:70:f1:b7:bc:95:9d:51:c8:
9b:8b:86:5e:e6:1e:69:98:bc:29:76:a6:6e:17:33:
f7:c4:f0:91:45:21:a5:ea:48:f3:0b:f9:7c:80:4d:
a0:8b:5f:f9:ce:81:84:66:31:28:ce:19:52:c1:8c:
9a:f8:7f:d9:09:b5:d2:61:2c:33:50:ba:c2:f0:d1:
54:c6:3b:ca:aa:a7:35:68:8c:30:82:1d:64:02:86:
98:e3:8f:4d:73:a9:ed:43:01:be:2f:30:49:b8:ba:
a1:43:b2:9a:a8:56:8f:9e:e2:84:e5:ff:be:b8:3f:
2b:56:86:1e:71:9c:17:f7:09:2b:67:ed:ad:9c:7d:
b5:35:9d:23:0b:8b:53:15:8b:a3:5f:b4:d7:55:04:
d9:cd:8e:f1:7a:d1:0d:cd:2e:b2:33:6d:fb:1f:a6:
03:58:f0:45:0e:a4:15:19:da:e7:0e:a4:2d:f3:42:
92:4c:ad:94:fa:68:38:51:fc:fb:c7:9a:ad:ad:6f:
03:51:27:03:d8:f5:e9:58:52:2f:a0:55:23:13:79:
fe:9d:48:a6:a6:ff:2f:f1:5f:56:85:4b:d0:3f:c8:
79:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:5B:52:AD:62:73:82:55:47:93:BF:11:A9:7E:5F:97:43:B0:4F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VhJbUq1ic4JVR5O_Eal-X5dDsE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.32.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:53:2d:cc:e2:4e:55:a3:a5:d2:8e:28:cf:95:ae:4e:07:8b:
05:f1:70:d6:30:51:80:37:31:d0:61:4f:3e:85:1e:0a:78:1d:
52:38:d3:30:57:db:64:06:d1:16:29:e5:06:e9:67:0b:79:62:
50:4e:29:f7:27:1b:e1:e0:e4:d4:75:d1:dd:50:d5:21:b1:5c:
3a:77:a6:98:72:0a:10:d2:87:98:25:78:65:5d:62:17:50:72:
a6:cd:b1:6b:b7:2d:0b:ed:a5:55:f2:a5:f9:26:30:7d:5b:a2:
65:11:78:d2:33:3a:54:e2:2e:2e:09:df:59:65:36:c8:f9:c3:
ff:89:94:ce:98:1e:f7:c2:c2:b4:88:8b:a7:e5:52:68:a3:0d:
98:4c:2d:27:89:47:9d:43:1d:61:5b:da:a1:b4:9a:35:80:31:
02:c0:f1:6c:17:11:89:63:5e:18:aa:37:54:75:db:c9:a5:5b:
12:00:42:a4:2d:24:8e:ad:c6:5b:76:33:16:15:1b:70:fb:fb:
66:09:91:a8:7e:03:d9:0b:cd:a1:5a:ad:f9:ee:8f:9b:0a:6d:
35:9f:40:5d:dc:55:c5:3a:a5:bf:7b:d8:28:c1:ac:76:f8:87:
3f:ab:bf:95:f2:81:42:f4:1b:6d:f4:af:16:d7:15:1d:84:2b:
97:db:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org