Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VjfIHl-L_AGcjrjpTemRb99amHQ.roa
File: VjfIHl-L_AGcjrjpTemRb99amHQ.roa (raw, json)
Hash identifier: OS5fk1YQJ+ZEWz+2r2PX5NpS90N1xkJkNoWXVRKct4E=
Subject key identifier: 56:37:C8:1E:5F:8B:FC:01:9C:8E:B8:E9:4D:E9:91:6F:DF:5A:98:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A3A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VjfIHl-L_AGcjrjpTemRb99amHQ.roa
Signing time: Fri 01 Sep 2023 10:07:38 +0000
ROA not before: Fri 01 Sep 2023 10:07:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10810 (0x2a3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5637C81E5F8BFC019C8EB8E94DE9916FDF5A9874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b8:b2:62:7a:1d:0b:51:90:f2:ae:34:03:2f:
e4:ad:d3:9d:64:a0:15:74:5a:4f:ed:86:bf:46:03:
cd:bf:17:d1:ad:e8:21:6e:bf:3d:4e:d3:5e:f4:5f:
9f:4b:4f:4f:ad:85:be:43:8d:65:7a:55:00:78:e6:
90:ba:9d:85:79:8c:4f:ba:26:aa:b7:d2:cc:83:70:
90:30:6a:b6:30:80:62:f4:c9:ff:60:d0:e4:04:9a:
b7:91:a9:12:f5:c2:8a:3a:12:c1:1a:ee:e3:19:65:
f9:49:27:a2:a6:fe:c9:43:6d:49:1e:9d:9a:33:1d:
87:3d:e2:43:9e:43:10:7a:77:bb:03:6a:6a:d2:bc:
be:a5:ea:b0:5e:e8:43:63:d0:58:38:6b:ec:31:d3:
99:93:72:27:b4:5f:f1:bc:88:c3:0c:e2:d3:98:9f:
74:15:4a:77:fd:6c:29:42:4a:a2:62:58:4b:d1:81:
27:1c:99:2b:66:3c:40:bd:70:09:d5:ea:02:b8:24:
2a:83:3e:cf:f7:f3:bc:1c:37:b6:5e:2f:e2:98:92:
a9:33:81:68:48:19:a5:8a:59:96:f6:a8:dd:d3:17:
97:eb:b5:4d:16:de:4c:3a:fb:0c:04:c5:c2:9b:ff:
d6:23:89:3b:46:c2:80:ca:7f:73:8d:2f:3a:d4:5d:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:C8:1E:5F:8B:FC:01:9C:8E:B8:E9:4D:E9:91:6F:DF:5A:98:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VjfIHl-L_AGcjrjpTemRb99amHQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b3:7b:f7:6b:79:97:e5:e4:33:40:f6:84:68:66:dd:b8:eb:3f:
7b:5c:0a:61:0e:64:d2:ed:e8:3e:fa:e4:9f:0e:31:1a:cd:19:
75:5b:4b:16:73:e1:75:84:19:0c:46:9c:49:94:20:1f:71:4f:
2e:34:f3:54:80:f3:3c:29:92:61:84:f1:c0:8b:56:1f:c9:6f:
10:43:33:a6:a8:1f:79:02:04:0e:83:b0:07:df:e0:b5:33:38:
a3:56:7e:7f:b1:30:c1:5e:ba:79:76:f1:8f:83:e9:56:81:dd:
61:d0:4e:51:21:fb:fa:b0:7b:2f:32:19:d7:ae:35:e2:aa:28:
06:92:c0:11:b3:51:31:0d:d7:ed:4e:03:56:c7:98:ec:6e:61:
40:a8:b9:d4:d0:1a:80:7a:4e:fe:b4:f7:f5:24:f7:69:49:d6:
df:1e:be:b9:15:2f:92:9d:58:11:56:b0:85:7d:fb:64:a5:b6:
e3:48:f0:7e:e2:93:57:9b:22:02:43:b4:20:5b:01:c5:30:fa:
cb:e2:d0:12:b1:60:27:b2:ad:89:57:0e:ea:9b:2f:b3:2a:4a:
ac:f4:f5:45:34:b8:67:e3:14:30:02:7b:8e:93:bf:d0:5f:35:
c4:a9:3c:89:a7:d6:18:ab:32:f3:23:d0:56:a6:d5:87:37:7f:
80:3b:da:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org