Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ypl-bDJA1mpsWYAVPtPPLxNxkoY.roa
File: Ypl-bDJA1mpsWYAVPtPPLxNxkoY.roa (raw, json)
Hash identifier: VxJTAKFjRSkiuCOn9bINcWKSD5muUuuQrkwkdDiH07Y=
Subject key identifier: 62:99:7E:6C:32:40:D6:6A:6C:59:80:15:3E:D3:CF:2F:13:71:92:86
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2922
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ypl-bDJA1mpsWYAVPtPPLxNxkoY.roa
Signing time: Fri 01 Sep 2023 10:06:11 +0000
ROA not before: Fri 01 Sep 2023 10:06:11 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10530 (0x2922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:11 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=62997E6C3240D66A6C5980153ED3CF2F13719286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:83:81:d4:a4:7a:0d:7a:df:36:ce:4a:70:
03:a9:5b:c6:4b:e0:7c:c7:af:17:96:6f:a9:c9:b1:
58:94:0a:3e:e3:e3:91:ed:c3:a0:4c:12:87:d0:fa:
95:51:5c:b4:28:28:a9:ab:fd:b9:5e:56:ee:58:60:
cc:21:31:7c:fe:03:c9:46:5b:49:11:60:5f:de:92:
67:4b:ed:e0:d5:26:8a:67:a8:5c:26:52:25:c4:8c:
82:10:df:3c:c8:0d:60:58:7a:1d:79:90:fe:67:61:
c0:2a:03:b1:d8:99:e5:a8:fe:db:68:c3:27:15:e5:
d4:81:63:c4:60:52:60:8f:b0:39:31:79:ae:4e:bd:
cf:cb:91:d8:eb:f7:ef:67:95:50:11:00:2c:7b:da:
72:7a:ce:7a:cf:77:75:98:d2:d6:37:17:33:7e:4d:
b3:b8:4e:c1:2a:2c:06:7c:e5:a4:70:ae:ff:30:37:
63:0d:29:4d:62:22:22:7a:a5:3a:29:fe:31:40:4d:
4f:54:cc:ba:38:01:f8:06:7f:42:2f:7d:91:ea:ce:
02:4b:9e:0d:07:5f:fc:4e:51:b7:30:a4:dd:45:23:
18:31:a1:a5:a9:2f:fd:38:7f:18:57:37:6d:cc:1d:
29:9f:c7:4e:c8:d5:0c:3e:26:29:1d:20:7d:a7:29:
43:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:99:7E:6C:32:40:D6:6A:6C:59:80:15:3E:D3:CF:2F:13:71:92:86
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Ypl-bDJA1mpsWYAVPtPPLxNxkoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.104.0/22
Signature Algorithm: sha256WithRSAEncryption
08:e6:aa:2a:4e:1f:dd:e4:96:1f:40:53:06:90:6e:99:18:f3:
89:e4:8d:e9:72:fb:54:f5:a1:76:28:e2:27:f8:b7:aa:29:9a:
17:ce:f1:8a:f9:1d:e9:d8:c9:f7:63:08:c0:9e:9c:57:30:f5:
05:a5:64:f8:f2:e6:5e:b8:1a:5d:81:63:4a:cd:27:f2:b3:80:
a9:f5:eb:37:4d:f2:75:66:94:d3:e7:9a:ff:b3:ec:06:fa:c9:
9b:f2:d4:b1:86:65:19:08:47:3c:55:24:95:cc:f6:a8:0c:94:
56:5d:54:6e:1e:0d:29:90:da:fc:ce:dc:38:ed:38:d3:2d:67:
ad:46:ad:e2:a9:87:8b:15:d1:4b:ea:80:ee:9b:41:29:b9:4b:
3a:58:f4:85:97:1e:5f:a4:ee:c0:94:8c:82:4d:c1:a0:6f:1d:
27:52:c6:9c:99:64:56:1b:8d:57:e3:74:4b:47:11:b7:32:9f:
fd:62:fd:b0:dc:56:59:df:e7:f9:69:f8:69:f8:0b:e7:68:bf:
29:be:64:22:1d:ca:2c:48:62:7c:f7:8d:f8:17:26:a6:a2:9f:
7f:22:ef:3f:d0:e1:e3:c4:0e:7f:31:5f:05:58:24:0e:6c:ec:
56:24:14:fc:6f:11:bb:31:38:ef:b2:39:9d:36:d8:c1:34:8c:
71:c7:82:e0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKSIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2MTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDYyOTk3RTZDMzI0MEQ2
NkE2QzU5ODAxNTNFRDNDRjJGMTM3MTkyODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDsIOB1KR6DXrfNs5KcAOpW8ZL4HzHrxeWb6nJsViUCj7j45Ht
w6BMEofQ+pVRXLQoKKmr/bleVu5YYMwhMXz+A8lGW0kRYF/ekmdL7eDVJopnqFwm
UiXEjIIQ3zzIDWBYeh15kP5nYcAqA7HYmeWo/ttowycV5dSBY8RgUmCPsDkxea5O
vc/Lkdjr9+9nlVARACx72nJ6znrPd3WY0tY3FzN+TbO4TsEqLAZ85aRwrv8wN2MN
KU1iIiJ6pTop/jFATU9UzLo4AfgGf0IvfZHqzgJLng0HX/xOUbcwpN1FIxgxoaWp
L/04fxhXN23MHSmfx07I1Qw+JikdIH2nKUODAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYpl+bDJA1mpsWYAVPtPPLxNxkoYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lwbC1iREpBMW1wc1dZQVZQ
dFBQTHhOeGtvWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w2gwDQYJKoZIhvcNAQELBQADggEBAAjmqipOH93klh9AUwaQbpkY84nkjely+1T1
oXYo4if4t6opmhfO8Yr5HenYyfdjCMCenFcw9QWlZPjy5l64Gl2BY0rNJ/KzgKn1
6zdN8nVmlNPnmv+z7Ab6yZvy1LGGZRkIRzxVJJXM9qgMlFZdVG4eDSmQ2vzO3Djt
ONMtZ61GreKph4sV0UvqgO6bQSm5SzpY9IWXHl+k7sCUjIJNwaBvHSdSxpyZZFYb
jVfjdEtHEbcyn/1i/bDcVlnf5/lp+Gn4C+dovym+ZCIdyixIYnz3jfgXJqain38i
7z/Q4ePEDn8xXwVYJA5s7FYkFPxvEbsxOO+yOZ022ME0jHHHguA=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org