Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XbbcDECpAZe79O1h07FqmX_06h0.roa
File: XbbcDECpAZe79O1h07FqmX_06h0.roa (raw, json)
Hash identifier: IKaRLiUAg1geN2qhehLSGD6sDGChr2gJGSfu7mPCmSU=
Subject key identifier: 5D:B6:DC:0C:40:A9:01:97:BB:F4:ED:61:D3:B1:6A:99:7F:F4:EA:1D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 297A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XbbcDECpAZe79O1h07FqmX_06h0.roa
Signing time: Fri 01 Sep 2023 10:06:39 +0000
ROA not before: Fri 01 Sep 2023 10:06:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10618 (0x297a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5DB6DC0C40A90197BBF4ED61D3B16A997FF4EA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:fb:6d:3a:0b:a2:dc:75:e2:f1:c9:f8:ec:
21:d2:7c:45:76:b1:fa:c3:81:3c:3f:a8:f2:7f:56:
9b:ac:aa:d8:c2:b4:b4:e6:4b:a8:56:f4:74:03:c7:
31:80:d4:67:0c:e8:f1:76:fb:cb:86:8a:2f:1b:92:
18:25:1a:9a:a8:9b:2d:58:cd:21:03:5a:82:5c:db:
5c:b2:88:16:1b:b2:0c:83:03:be:b0:8e:5a:ef:2e:
82:b1:5b:b5:af:52:37:9c:14:16:c2:d0:b9:07:c6:
65:d5:eb:c8:7a:7d:79:05:c7:08:7a:33:bd:49:59:
ef:41:a3:88:2f:f1:ab:ec:bc:b6:3c:23:d5:75:8d:
01:62:72:a1:9c:c2:f8:f3:b1:73:46:d5:5b:c5:ee:
ef:f3:c5:5a:09:71:03:4a:f0:00:bb:f1:57:3c:eb:
05:59:a1:9b:8b:36:bb:8f:be:3e:aa:39:4d:52:ca:
24:1d:44:b6:a9:b2:80:df:06:b8:9e:01:68:81:ae:
06:05:13:fe:77:8b:d9:b4:13:df:6a:45:04:c2:fa:
7c:70:89:6d:ce:5f:f3:bd:01:62:5c:a7:22:fa:99:
e8:e6:2d:ce:ec:72:d1:14:3a:ee:54:ed:20:99:ed:
37:9c:23:98:06:f1:a5:3b:9c:88:a8:41:b8:98:e1:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B6:DC:0C:40:A9:01:97:BB:F4:ED:61:D3:B1:6A:99:7F:F4:EA:1D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/XbbcDECpAZe79O1h07FqmX_06h0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.183.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f8:94:f9:cd:15:a8:5c:3a:a5:e8:ef:09:e3:f5:ec:f0:e8:
d5:a5:1d:43:a9:7b:cf:38:dc:c9:b6:d4:81:29:7c:95:a6:d4:
cc:b4:fc:81:26:d1:dc:03:98:3d:47:23:f7:f2:6f:f4:b2:d8:
04:bd:b7:d4:ed:5b:82:3c:d5:06:4b:79:e3:d4:6d:e8:48:c8:
fe:5a:bc:c7:0f:1b:0b:e0:e1:63:67:ac:e8:f9:3c:e7:46:ec:
ff:ab:15:a7:73:34:16:ec:df:78:d6:4f:d8:8d:c7:e8:db:1a:
c3:1c:0f:70:32:de:f2:d4:88:51:4c:1c:3d:15:57:b5:27:7c:
76:29:00:f0:81:6e:12:8f:b4:66:b8:95:6a:cc:ac:cd:24:1f:
3e:47:aa:2e:5a:1b:7c:a2:f3:d1:22:23:3f:e4:9d:b0:69:80:
37:1a:0a:1b:35:ae:8d:7c:34:f2:b8:ec:9e:63:1a:15:35:8d:
05:19:fb:86:e3:dc:30:e1:cb:04:e2:ea:eb:fc:1b:51:00:4f:
bb:cf:4f:ad:66:e0:d7:27:fc:86:89:8a:2c:c1:26:3b:78:1b:
73:a6:db:9c:a7:33:9b:cd:c6:34:44:64:28:6c:03:ab:4f:a1:
dd:3f:66:de:37:f9:ac:3b:4c:5c:82:d5:ed:fc:b8:c0:62:f2:
1d:7e:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org