Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W1aQlmGcgZmTwSmAC27xVGMW-cs.roa
File: W1aQlmGcgZmTwSmAC27xVGMW-cs.roa (raw, json)
Hash identifier: kqKTJqLD9ZVwNYSszNC2gtI6kJ4JvFHkCBjaL99/qJg=
Subject key identifier: 5B:56:90:96:61:9C:81:99:93:C1:29:80:0B:6E:F1:54:63:16:F9:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2908
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W1aQlmGcgZmTwSmAC27xVGMW-cs.roa
Signing time: Fri 01 Sep 2023 10:06:04 +0000
ROA not before: Fri 01 Sep 2023 10:06:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10504 (0x2908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5B569096619C819993C129800B6EF1546316F9CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:33:f5:36:bb:14:58:1e:24:58:e6:91:91:
19:d4:3a:a9:b7:21:7b:e0:f2:a7:e2:d0:e4:89:1f:
ca:42:44:b6:3b:aa:94:cc:a2:96:ac:9f:2a:f3:d7:
f8:f9:7e:d5:ee:6e:1b:11:6b:17:c8:9c:3b:b9:c2:
c6:f5:cb:a3:fa:cf:9d:eb:86:1a:c0:1f:03:9f:e9:
66:cb:5c:b7:1a:de:bb:10:d1:3e:d6:22:69:7c:ab:
ae:90:1e:e7:7a:53:dc:82:39:9a:c1:88:1c:a4:a5:
b4:50:c4:7d:9d:e4:86:24:22:90:0d:4b:98:b3:a0:
f7:4a:5b:98:b4:52:31:3a:35:64:d9:34:7f:b8:78:
db:80:f9:55:c8:bb:dc:74:fa:e9:75:3c:7a:c0:4d:
10:d7:eb:99:91:22:38:9a:b3:88:72:68:f5:af:6f:
d5:9f:54:ba:42:6d:f7:07:35:39:fd:12:2b:c9:d4:
a1:30:7e:d2:b1:cd:38:70:49:34:22:03:1b:2e:5e:
bd:4d:6d:84:70:6f:0c:6d:b0:bd:fa:bf:59:b8:82:
d8:3d:b9:08:f7:3a:10:5f:88:d6:25:57:22:8f:92:
54:bf:bc:77:eb:f4:ab:30:9f:03:d2:45:03:a1:69:
e3:88:3e:dc:4e:7a:ca:00:bf:8c:17:11:28:06:9b:
a0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:56:90:96:61:9C:81:99:93:C1:29:80:0B:6E:F1:54:63:16:F9:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/W1aQlmGcgZmTwSmAC27xVGMW-cs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:16:51:6d:88:ea:ac:f0:53:d6:6e:95:9a:c5:c0:ed:39:dd:
53:5e:55:36:2c:ce:f4:a2:2c:81:14:6d:6a:7f:d7:dd:85:15:
59:96:f9:6f:1a:02:62:87:4e:6d:6f:7d:7b:9e:59:da:cf:b5:
57:79:67:2d:c7:fb:7a:ee:7b:6a:35:8e:19:0c:24:09:a8:03:
20:8f:4a:5d:12:66:1c:a5:c2:47:e2:12:9c:7e:f1:cd:28:b1:
17:87:9d:91:1b:0b:0e:a2:f9:94:a7:90:85:b2:a7:3f:53:a5:
4d:f8:db:f8:74:c7:e0:b9:47:a3:78:1f:04:e6:d9:0b:ef:f2:
aa:d5:93:5f:4b:8b:c4:6e:2e:fe:c9:27:90:62:b8:de:cb:9e:
c9:2e:77:18:e4:a6:90:88:25:3e:4d:0f:88:a5:3d:3a:b8:c7:
95:bb:18:f1:b9:fd:d0:18:4f:93:5d:64:15:1d:95:38:87:df:
b0:32:84:3a:44:05:87:9a:00:f1:22:d9:f7:da:9d:0c:d4:c0:
03:9f:a1:67:e4:77:9b:b4:12:fb:62:db:56:51:38:32:2f:83:
71:b2:86:ec:70:db:7b:b0:4d:33:1b:14:6b:39:6a:8c:d6:39:
f9:fc:2b:50:9b:45:8c:30:e4:8f:f2:a1:e3:06:dd:7a:de:ad:
db:33:b5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org