Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YtqJD3G3SMPcRGG5-fNpfO6IOPg.roa
File: YtqJD3G3SMPcRGG5-fNpfO6IOPg.roa (raw, json)
Hash identifier: EmrDS6uUggK3ijw5EgMqGL0zj4qsByQOmGS92SlypWw=
Subject key identifier: 62:DA:89:0F:71:B7:48:C3:DC:44:61:B9:F9:F3:69:7C:EE:88:38:F8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2881
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YtqJD3G3SMPcRGG5-fNpfO6IOPg.roa
Signing time: Fri 01 Sep 2023 10:05:24 +0000
ROA not before: Fri 01 Sep 2023 10:05:24 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.194.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10369 (0x2881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:24 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=62DA890F71B748C3DC4461B9F9F3697CEE8838F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1f:a9:5a:82:b5:4b:a0:26:b3:f2:00:dc:5c:
d2:5b:4d:e6:21:7c:ee:56:4f:3a:ff:4d:8f:e8:5c:
03:9c:52:b6:6c:68:f9:96:79:85:cf:96:50:2b:39:
13:92:8f:20:f7:0f:9e:39:a8:ac:11:1a:4e:99:3b:
34:c9:ae:5b:58:46:1c:59:90:de:47:4a:4f:46:3b:
8a:cf:59:c6:ef:da:e9:fc:d4:df:1c:25:d4:7f:4c:
77:05:80:31:75:0a:f1:e5:a0:61:2e:9a:b9:b5:f7:
a7:cc:de:66:0e:7e:27:13:84:a8:8b:2b:de:0f:52:
97:27:ad:fe:08:fb:c7:06:39:57:4c:a9:28:5b:b7:
f8:75:37:b9:f1:2a:8f:2e:1e:c0:47:93:8f:59:ac:
00:91:6a:ee:57:43:28:6d:0d:03:7e:a0:dd:41:7f:
3f:8f:ad:4b:90:3d:1e:ad:9a:b2:5d:d2:0d:f0:77:
8c:ab:3d:87:66:57:6d:ab:20:22:b4:98:e8:35:9f:
e0:cb:88:e7:63:88:3e:78:d2:a4:5c:23:b8:f7:3f:
7c:68:2c:ee:1b:c7:f1:95:96:87:da:a4:87:c2:59:
2f:a2:26:af:15:69:7a:7f:c0:47:a8:f8:e9:e7:84:
56:e0:37:fe:16:ce:97:c3:36:7f:a1:01:6d:a3:f9:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DA:89:0F:71:B7:48:C3:DC:44:61:B9:F9:F3:69:7C:EE:88:38:F8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YtqJD3G3SMPcRGG5-fNpfO6IOPg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.192.0/20
Signature Algorithm: sha256WithRSAEncryption
43:67:2d:81:3a:28:72:7d:3d:39:91:cd:ce:26:35:6b:4a:a9:
ed:0b:a0:09:48:29:a9:2a:9c:37:3d:ae:d1:33:7d:1a:42:ca:
50:ac:e0:ee:2b:61:eb:04:e4:16:07:39:ac:77:48:6e:b1:c7:
33:a9:a0:52:11:b6:8f:33:d0:22:1d:c4:90:c1:c5:43:74:e3:
cf:f6:0e:3d:32:bc:1a:6c:20:b1:69:b1:1e:44:5d:0c:07:78:
f0:0e:80:29:59:92:d8:9b:d0:61:e5:dd:43:bb:77:ec:c8:b8:
70:33:39:86:02:d2:27:d9:42:40:57:fb:8b:eb:da:63:45:fe:
2c:ba:a8:a2:31:39:a4:5b:1a:72:25:ed:0c:78:87:2c:e7:22:
6a:68:cd:60:04:51:fe:3f:a4:f4:11:8d:72:af:a0:2b:49:59:
4c:09:76:f7:e7:7a:11:3d:32:87:d7:2a:3f:c6:fd:82:86:20:
f7:e7:62:a1:6b:94:d1:e5:73:ab:46:4d:99:14:9b:78:fa:89:
ea:4c:6d:49:04:37:e2:1e:77:77:79:09:e1:5d:a2:ea:c4:e9:
f7:a1:ab:3a:64:47:86:86:6e:7e:d3:55:8d:b6:e6:33:02:8e:
64:72:12:3a:fb:c3:f6:a9:d5:2c:23:ff:70:4e:f2:c4:38:eb:
27:e8:f2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org