Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y3mNjP_l273Yyo0wtvtY-K5YFsY.roa
File: Y3mNjP_l273Yyo0wtvtY-K5YFsY.roa (raw, json)
Hash identifier: P2JvhySce0Mm6/Z1JHJHO85+nK7sZbucVeJPOKdHVrE=
Subject key identifier: 63:79:8D:8C:FF:E5:DB:BD:D8:CA:8D:30:B6:FB:58:F8:AE:58:16:C6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27D4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y3mNjP_l273Yyo0wtvtY-K5YFsY.roa
Signing time: Fri 01 Sep 2023 10:04:35 +0000
ROA not before: Fri 01 Sep 2023 10:04:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.204.96/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10196 (0x27d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=63798D8CFFE5DBBDD8CA8D30B6FB58F8AE5816C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:8d:27:bd:9a:1d:e1:1d:5b:dd:cc:c8:6a:
e8:2c:7f:b5:e9:e0:73:38:25:a2:98:26:52:96:ea:
1b:be:9e:f3:ff:45:6c:f0:b4:51:d9:ad:01:c0:e0:
fd:88:42:e9:fd:7c:bc:46:0b:2a:00:3e:c4:d0:69:
e6:03:fb:b4:16:1e:39:1d:ca:84:df:06:f7:ce:aa:
60:4a:41:a4:3b:4e:f3:14:73:94:3d:ed:62:7d:fa:
93:44:b3:a4:04:36:f3:fe:84:0d:7b:1e:c8:56:52:
f1:d0:0a:82:f7:44:ef:17:9e:c1:e4:a3:3f:97:9d:
b5:e0:ae:e8:f1:13:67:a6:21:2d:5f:52:56:3c:04:
fe:22:e6:20:a5:f0:87:aa:60:1f:fa:35:91:17:71:
41:03:51:c0:4d:36:0a:50:d7:9c:01:61:52:58:9a:
60:11:a1:79:9d:3c:9c:0b:bc:7d:97:4b:94:2b:7e:
bb:1b:81:fc:30:75:6f:0f:57:7e:26:09:39:af:9f:
c1:df:0b:fc:1e:7b:db:58:a0:1a:aa:7e:e6:c5:2c:
7c:03:e6:db:b2:ad:ed:b4:a2:8c:9e:cf:4a:a2:a3:
5b:0d:bf:19:aa:49:76:d3:dc:f7:9a:da:83:70:9f:
07:79:fa:ed:f4:dc:30:3e:7c:74:f3:fe:33:99:3f:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:79:8D:8C:FF:E5:DB:BD:D8:CA:8D:30:B6:FB:58:F8:AE:58:16:C6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y3mNjP_l273Yyo0wtvtY-K5YFsY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.96/29
Signature Algorithm: sha256WithRSAEncryption
5a:a7:d2:b9:fa:5c:01:f6:fe:cb:3d:11:27:69:44:f7:34:0d:
93:1e:3e:9c:c7:23:c0:7f:fa:68:62:43:2e:d8:67:55:19:aa:
03:c7:9d:8d:b9:a6:1c:f8:4a:f0:58:e6:ec:8d:9c:68:d5:61:
02:9b:22:71:ea:31:92:25:11:ae:70:82:13:4d:e8:70:92:d8:
60:28:23:02:ec:c6:94:3b:fd:58:98:b3:08:1b:85:9f:33:bc:
e1:72:5c:61:7e:7a:c2:f3:07:e5:ce:28:d3:da:ee:3f:b0:06:
1e:70:80:85:59:36:5b:3b:f2:2a:ad:ba:cd:68:1e:51:56:98:
0c:81:f1:45:99:59:fa:4e:5a:a8:55:60:ca:ea:24:4a:af:54:
f0:d8:f6:b8:43:f0:cc:05:0e:aa:d3:98:b7:20:45:1d:33:85:
5d:22:90:ec:a2:c3:12:0f:11:ff:59:35:3d:67:16:a7:89:bb:
2d:b1:f1:0a:82:82:1b:7a:5a:7d:1b:ec:f1:dc:2e:f8:48:6c:
8e:d0:9c:ad:5e:2e:cf:cd:ed:f9:6a:55:a8:68:7f:40:03:ce:
4d:d5:a7:fd:0a:4c:cc:8b:ee:60:c3:c6:7a:f7:bc:18:64:af:
bb:9f:8e:dc:8e:a2:48:63:5f:e4:8f:51:63:30:78:83:8d:a0:
e4:48:63:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org