Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X8Dntur8jBrSaLvZNQEkD-DqL0o.roa
File: X8Dntur8jBrSaLvZNQEkD-DqL0o.roa (raw, json)
Hash identifier: EGhhiinZh0+kaETUEjOaU59ZIAGKKOY97g5+GfQibrc=
Subject key identifier: 5F:C0:E7:B6:EA:FC:8C:1A:D2:68:BB:D9:35:01:24:0F:E0:EA:2F:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 281A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X8Dntur8jBrSaLvZNQEkD-DqL0o.roa
Signing time: Fri 01 Sep 2023 10:04:57 +0000
ROA not before: Fri 01 Sep 2023 10:04:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10266 (0x281a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5FC0E7B6EAFC8C1AD268BBD93501240FE0EA2F4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:88:47:82:99:e6:93:75:52:c1:53:83:c7:0c:
37:e6:c1:a2:61:65:17:c5:a0:15:ab:79:3c:f4:59:
35:72:51:dd:62:b7:48:e6:e9:7a:45:21:bf:78:96:
22:d6:e3:d8:02:01:7f:53:87:a4:2b:24:85:83:d8:
be:44:a4:aa:26:3a:79:ab:e7:b6:be:1c:a7:ff:3c:
c2:f2:e9:ce:f5:9e:ff:1e:bd:26:e0:20:2e:40:f3:
0d:44:75:b1:13:5f:d3:70:5d:c6:b1:e9:16:02:f9:
3c:90:88:07:35:0e:c9:e1:50:68:7a:b5:d6:98:14:
d5:05:6f:c4:13:1c:96:13:79:5a:54:d5:35:2b:28:
ad:e3:42:a4:1c:94:d8:b7:7a:57:96:17:f0:e2:f8:
f5:a5:be:98:37:7b:72:24:75:e4:87:6e:e3:24:34:
9a:0a:7e:6d:80:08:e5:d8:22:33:d3:86:27:63:96:
b0:84:8c:30:0e:21:7e:43:e2:9d:18:51:1e:96:69:
df:de:d9:d2:10:7d:3c:3a:c7:54:e6:10:4d:fb:a5:
0a:18:47:c3:74:f7:ed:ad:bd:74:73:c4:83:8f:0d:
0b:82:0f:76:a6:ad:d9:ea:ea:84:3b:13:82:56:24:
9a:90:17:cc:9d:61:c6:da:30:1e:fe:c4:f9:88:f7:
99:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:C0:E7:B6:EA:FC:8C:1A:D2:68:BB:D9:35:01:24:0F:E0:EA:2F:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/X8Dntur8jBrSaLvZNQEkD-DqL0o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.232.0/22
Signature Algorithm: sha256WithRSAEncryption
23:49:f1:12:00:7e:74:88:c4:01:59:d7:ba:49:af:89:ec:24:
ec:07:9b:1a:9b:a4:ed:0b:e5:b6:2e:0e:de:c2:6a:bc:ff:88:
b5:dd:3e:73:58:52:66:05:81:df:39:61:10:1c:e1:f1:33:68:
70:e6:4e:6d:62:12:00:6b:4a:ee:f7:b4:57:35:c0:5f:a2:b6:
d5:88:e6:bc:0e:17:4b:74:73:0f:a1:61:3b:46:0e:83:68:fc:
96:f2:38:69:bd:b5:7d:4b:a5:6e:1c:96:03:04:c9:a7:b7:e2:
fc:fb:ff:8e:67:51:60:64:0b:b5:a0:d4:40:5c:09:7d:54:20:
e7:96:bf:16:44:1d:ba:da:ed:9a:5c:75:85:d5:1b:bc:49:3f:
00:e5:00:0e:23:03:66:cf:28:2e:b4:77:20:9b:09:99:f2:6b:
33:07:ef:c3:5d:61:fb:1b:aa:9a:d5:5a:90:8f:a8:ab:d8:19:
52:79:ef:b5:7c:b7:fb:1e:c2:95:55:1e:9b:a9:6f:c0:b0:d7:
64:0e:ff:6e:5b:44:c3:63:00:38:39:12:2d:be:9f:c3:24:f9:
86:93:75:ec:bf:77:44:a3:91:d4:20:1e:58:38:45:2c:3f:a6:
cc:e4:3a:44:37:ae:67:e9:72:6a:40:70:b0:65:75:8b:a4:47:
23:ec:68:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org