Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XNi0yMRXnh0RER-JCLIhdnq1iGM.roa
File: XNi0yMRXnh0RER-JCLIhdnq1iGM.roa (raw, json)
Hash identifier: yPIh6JJhiaNIxRWu5kxuLLJHbxEslaJGgZ5GlAdtiVY=
Subject key identifier: 5C:D8:B4:C8:C4:57:9E:1D:11:11:1F:89:08:B2:21:76:7A:B5:88:63
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 280B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XNi0yMRXnh0RER-JCLIhdnq1iGM.roa
Signing time: Fri 01 Sep 2023 10:04:52 +0000
ROA not before: Fri 01 Sep 2023 10:04:52 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10251 (0x280b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:52 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5CD8B4C8C4579E1D11111F8908B221767AB58863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4f:6a:58:94:3c:62:3a:02:4e:fd:7e:0b:fc:
bb:17:27:e1:0f:00:6e:df:ec:b8:d1:f0:39:c6:0c:
87:58:35:ed:f4:d7:bf:62:23:fe:db:c1:e2:de:9b:
b0:cf:a8:e3:04:01:e1:73:5d:47:db:d8:b9:52:6c:
98:ba:f9:a3:15:b0:91:d5:fe:df:e5:34:c0:df:dd:
13:bd:2a:86:62:c0:33:9e:0e:88:1c:57:fe:3e:02:
87:a1:c9:b4:07:ce:12:86:c7:f9:c1:7f:ca:a6:ce:
bd:01:72:80:fd:71:c6:58:63:11:fd:b7:d9:57:86:
26:d9:da:2b:8a:91:74:03:fe:81:f9:f9:89:58:1c:
27:83:ce:1b:64:42:21:f4:aa:88:28:d8:c1:2e:f2:
e2:50:cf:99:2f:dd:5f:13:41:e1:6d:be:ca:68:48:
4b:73:6a:e4:09:a5:26:3f:c1:e6:dd:a1:bf:b9:bd:
d7:86:6b:db:53:86:5d:a6:9d:b3:86:c4:7f:97:4e:
db:75:b2:e3:ba:e5:9a:8c:ee:a1:70:c8:85:49:35:
c1:2d:4e:36:39:5d:26:45:d7:2c:4d:5e:ec:eb:8b:
f6:5d:e4:34:98:00:87:4b:7a:76:52:f5:cb:c2:b9:
0c:0e:65:8c:2c:48:00:43:ff:4e:73:2d:67:1e:d9:
2a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D8:B4:C8:C4:57:9E:1D:11:11:1F:89:08:B2:21:76:7A:B5:88:63
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XNi0yMRXnh0RER-JCLIhdnq1iGM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:cc:49:f5:37:69:f5:09:b4:45:b6:64:04:e7:1b:d8:26:e7:
c3:97:8d:73:4e:27:3f:cc:6f:60:00:ce:e6:35:78:ef:e6:30:
38:3a:bd:db:c5:d5:88:c2:aa:20:6c:f9:ce:32:1f:d8:ba:6d:
7a:3f:d2:e7:1c:51:ea:4e:17:e8:32:f0:19:91:bf:d0:83:eb:
d8:77:02:16:bf:b4:61:cb:eb:d6:5c:68:7c:5c:1d:1c:9c:b4:
d2:72:6d:ba:69:95:60:fa:a2:6d:08:1d:08:47:a2:e7:8f:3c:
c7:60:18:41:52:b7:1a:7d:21:e7:00:c3:db:9d:34:44:46:83:
e0:cf:15:66:f9:12:0c:98:0c:12:55:be:c9:e1:50:85:21:a0:
8f:d6:e8:26:68:3f:f6:64:7a:a1:4b:aa:1f:96:b0:a2:5c:6e:
87:13:0e:9f:68:c7:c7:cb:d8:ee:1c:e5:43:10:71:6f:ac:48:
b0:28:e5:b5:7b:e3:a5:64:0b:ee:c1:31:e2:76:10:93:b6:31:
bd:29:a4:d4:41:a9:ce:82:97:e5:1c:6c:cb:18:84:f1:47:be:
5e:5d:99:62:d6:e7:bd:7d:d3:1d:3d:72:82:be:40:3b:6d:7f:
56:3b:99:2b:da:0d:27:50:49:b7:94:8b:f0:15:bd:57:b0:a0:
b1:63:c6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org