Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z2MdVxVj3oNhqGsedhrmZ5vLeMg.roa
File: Z2MdVxVj3oNhqGsedhrmZ5vLeMg.roa (raw, json)
Hash identifier: JVEs3EEog7DroPk2JvkDCcuCb9SFfCMeLTQT3Mp0FZA=
Subject key identifier: 67:63:1D:57:15:63:DE:83:61:A8:6B:1E:76:1A:E6:67:9B:CB:78:C8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2903
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z2MdVxVj3oNhqGsedhrmZ5vLeMg.roa
Signing time: Fri 01 Sep 2023 10:06:03 +0000
ROA not before: Fri 01 Sep 2023 10:06:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10499 (0x2903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=67631D571563DE8361A86B1E761AE6679BCB78C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:b9:51:2b:0e:71:7e:2d:b3:d2:bd:51:2f:
08:25:ff:2c:b5:dc:2b:47:7a:87:96:50:db:bf:09:
93:1f:e1:91:cd:cd:bb:c5:99:75:18:37:a6:f9:7d:
74:0b:86:5e:de:9d:53:98:e0:6c:3f:48:8f:14:ed:
96:1b:74:49:73:b3:7c:73:56:29:d3:0c:a2:67:63:
e7:17:24:2b:8d:2d:53:67:ca:e2:ab:cf:24:70:c3:
16:b7:27:e3:67:5f:24:61:39:a7:0f:72:1c:c2:b5:
5c:30:6a:d7:3e:0d:b9:74:91:c1:75:58:f3:98:b5:
5e:6e:b3:be:ee:c6:ca:5f:69:ed:7c:db:7f:f0:03:
8c:3e:77:8a:3e:c1:11:bc:f6:dc:a9:48:bb:8c:ee:
c6:65:6c:8d:de:d6:31:7b:05:39:0b:8f:78:23:c8:
f2:c8:0b:73:62:d6:0b:a0:b0:68:be:c5:80:ab:c9:
dd:02:84:13:e1:b5:8a:55:2f:69:01:71:75:f4:f7:
c9:c0:d5:29:bb:6b:e8:4a:f9:2c:a7:17:82:78:e0:
e3:0c:45:1c:81:b4:21:e0:5f:97:be:2d:4b:65:5f:
2f:4b:0b:2b:c1:e2:2d:da:7b:12:55:3b:7c:10:17:
d9:cb:b9:76:98:63:1a:c5:6e:83:5f:36:a9:5d:5f:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:1D:57:15:63:DE:83:61:A8:6B:1E:76:1A:E6:67:9B:CB:78:C8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z2MdVxVj3oNhqGsedhrmZ5vLeMg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:7c:0b:92:53:29:ef:85:91:a2:d1:64:0f:0c:82:15:d8:ce:
60:26:69:07:f2:4d:fc:8c:1c:fd:bb:8f:9b:ea:9c:39:9c:c7:
aa:30:c6:df:b6:64:2f:50:86:77:1e:36:a0:79:b9:96:51:88:
1c:c5:5f:d4:19:55:78:c8:3e:fc:82:95:9d:6e:ff:89:d0:c1:
62:b1:8d:7c:81:aa:6f:86:39:fb:61:9f:93:85:66:bb:5f:ec:
ce:20:e8:33:22:4b:6a:f9:48:69:c1:8b:70:30:10:2b:4a:0c:
20:66:d8:52:5a:0d:ac:bd:b2:b8:00:b5:8f:d8:aa:c2:83:0f:
90:55:9d:69:fb:27:48:ff:f8:bf:60:7d:72:e6:aa:a5:2c:c4:
d4:6f:6b:34:f6:3b:da:c9:b0:e4:f3:a9:f4:34:df:8d:11:53:
db:57:46:a0:9d:ea:70:f7:bb:aa:60:66:ae:d0:5b:78:39:17:
db:b7:3d:b9:2c:bb:6e:03:36:36:74:b7:3b:5c:31:bf:51:78:
1c:03:32:ae:e2:4c:c6:c7:b7:89:ad:93:cb:1f:0f:72:ed:d9:
55:3b:ec:66:16:52:e4:00:96:02:4a:29:04:5b:0b:25:fb:8c:
41:40:6d:65:89:e4:e6:bc:bd:44:59:eb:d7:d7:3d:1b:4d:13:
4b:89:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org