Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZTZpteHUjHiIhAYK6-0c5GRCjNg.roa
File: ZTZpteHUjHiIhAYK6-0c5GRCjNg.roa (raw, json)
Hash identifier: RZSlBAm1VbepeBcE9tNrPnyJrP4SWHspmdm88DbCVsI=
Subject key identifier: 65:36:69:B5:E1:D4:8C:78:88:84:06:0A:EB:ED:1C:E4:64:42:8C:D8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A05
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZTZpteHUjHiIhAYK6-0c5GRCjNg.roa
Signing time: Fri 01 Sep 2023 10:07:23 +0000
ROA not before: Fri 01 Sep 2023 10:07:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.144.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10757 (0x2a05)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=653669B5E1D48C788884060AEBED1CE464428CD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6b:1b:74:2d:c7:d1:fe:20:7c:7f:44:bc:da:
34:60:52:59:21:a7:31:76:b6:66:57:5d:d3:15:89:
04:2a:76:97:5e:e8:96:96:c5:58:53:17:8f:9f:45:
63:47:d4:b4:c6:7a:e2:c6:24:ca:e3:34:15:25:44:
72:b3:05:0c:43:57:93:1b:5f:f3:d6:65:26:73:3e:
20:87:03:75:1a:80:72:c8:00:48:0c:fc:71:d5:27:
7c:3d:d0:c4:45:ef:23:63:c7:c2:dc:f6:35:20:7b:
fa:de:ba:46:86:05:c8:96:e1:6b:ea:9b:89:38:2e:
d5:f9:f1:cc:08:1b:dd:9d:d0:6b:bd:65:07:0e:48:
a1:25:c7:de:00:67:15:c4:73:5f:27:ca:79:b3:10:
c4:30:14:11:7b:1f:a2:8e:2a:10:7a:69:77:16:22:
b8:b0:80:19:41:87:26:7e:e8:58:21:ff:dd:f2:a6:
be:00:b4:c1:f5:b6:e2:fc:2d:7e:92:3b:b1:8e:20:
7b:40:09:e4:6f:54:60:25:e6:fe:d6:11:76:ff:61:
34:b5:e6:e8:64:20:1b:72:0d:9b:59:32:ea:4e:59:
88:86:15:34:7e:66:36:6a:87:4f:5e:07:3d:c0:fa:
c0:3d:9b:40:e3:50:dd:1f:74:29:27:32:d6:71:7b:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:36:69:B5:E1:D4:8C:78:88:84:06:0A:EB:ED:1C:E4:64:42:8C:D8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZTZpteHUjHiIhAYK6-0c5GRCjNg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.144.0/21
Signature Algorithm: sha256WithRSAEncryption
88:17:31:cd:d2:8d:85:06:29:7a:cb:8a:10:ee:fa:2f:7e:c5:
dc:93:52:70:8b:dc:10:a5:e3:3b:a4:0d:33:4b:4a:61:3e:7d:
b7:ae:94:19:2a:80:63:59:1f:ea:ef:66:1f:c8:aa:a1:b8:12:
71:9e:78:5f:19:e7:53:b3:d7:ca:3f:de:02:89:48:1c:05:48:
07:4b:dd:d5:56:33:86:a9:1c:e0:48:dc:92:33:dc:ce:86:88:
4a:62:6f:9b:c0:aa:15:15:ab:da:19:1b:ba:0c:3e:dd:4e:31:
3f:10:4a:bb:a0:51:4a:ba:f2:e2:d1:54:29:aa:84:c0:ed:7d:
8c:5d:68:aa:a7:c1:98:06:db:ae:ae:c4:07:19:dc:83:2c:19:
69:e4:6f:73:9f:1c:8d:1f:7f:fc:6a:2a:3a:d8:bc:ef:9b:f1:
7d:e4:1b:73:49:c1:e7:65:ee:c5:fc:4e:5f:f6:e1:e6:fb:86:
6e:4e:63:2c:d7:ff:97:2c:1c:fe:2d:ac:d2:5d:af:8e:68:9b:
8a:b6:31:dc:3c:19:06:38:0b:d0:ee:60:12:93:c5:6e:68:8d:
18:ae:5a:68:b5:ea:04:5f:65:9d:13:c7:c8:0f:33:e6:df:6d:
d0:ef:65:be:8e:22:c2:e9:d6:7a:60:d9:fe:28:a8:4d:18:4f:
f7:2f:9c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org