Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZdGYcIU3pl3_HpHW7CvwfGqxdBw.roa
File: ZdGYcIU3pl3_HpHW7CvwfGqxdBw.roa (raw, json)
Hash identifier: qT2MNQbU5Ih0HT2OFb1tMqyZ/jX2D4cCvXw5HyhcGbE=
Subject key identifier: 65:D1:98:70:85:37:A6:5D:FF:1E:91:D6:EC:2B:F0:7C:6A:B1:74:1C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A64
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZdGYcIU3pl3_HpHW7CvwfGqxdBw.roa
Signing time: Fri 01 Sep 2023 10:07:51 +0000
ROA not before: Fri 01 Sep 2023 10:07:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10852 (0x2a64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=65D198708537A65DFF1E91D6EC2BF07C6AB1741C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:24:48:d4:db:b7:62:1e:8b:b9:4d:be:f9:82:
fe:2c:e8:d6:00:1c:ec:5b:87:e1:f0:64:a0:24:05:
de:07:50:1e:cc:f8:90:59:5e:6d:4b:72:36:81:b5:
78:b5:4a:d9:87:d6:cc:82:01:b3:6a:b2:b7:c0:05:
c9:57:ab:34:17:b6:a0:a8:f8:13:e9:0c:26:3a:da:
d0:40:2e:1b:ac:24:1d:27:d0:54:74:a1:74:8f:0b:
0d:55:f8:9c:0e:9b:c6:71:d4:41:05:d9:bf:88:6a:
65:b5:2d:3d:02:96:e0:f9:42:e2:d3:5a:67:73:51:
26:fd:c1:ee:f1:b6:f2:d6:c0:77:61:83:b9:3f:21:
8a:f8:65:f4:3d:26:c3:3c:42:8f:99:ad:b3:ec:33:
45:36:6f:dd:84:de:29:e9:6f:19:3c:c7:f7:bd:22:
09:56:a1:16:26:b6:f1:91:51:34:b8:0c:e6:dd:6c:
57:49:ac:41:10:98:23:05:6d:75:4b:10:0f:96:6a:
d8:0e:8d:aa:ad:f3:07:b9:4d:f4:8c:34:1b:6e:35:
82:4d:d2:68:d9:22:95:70:25:0f:b1:3a:ea:f1:5a:
5e:5a:81:4a:bd:73:4e:90:ca:c6:99:7f:8e:57:65:
83:68:73:af:7b:2a:d4:23:a7:e6:b7:4a:c5:0e:0e:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D1:98:70:85:37:A6:5D:FF:1E:91:D6:EC:2B:F0:7C:6A:B1:74:1C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZdGYcIU3pl3_HpHW7CvwfGqxdBw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.248.0/21
Signature Algorithm: sha256WithRSAEncryption
71:99:47:ad:5e:91:9c:2e:74:a5:f7:1f:ad:2b:c6:32:52:f5:
54:c2:4b:21:a0:da:0f:96:6f:a9:68:c1:09:73:56:1b:46:83:
7b:4d:0d:cf:38:cf:f3:6a:25:84:3f:ef:cc:dd:1c:60:b1:be:
6f:f3:96:50:a9:d6:2b:ed:72:fc:87:28:2a:49:7f:94:2a:4a:
62:e5:4b:14:81:35:94:f8:1e:e9:32:a8:5f:8a:ab:7c:00:6c:
1c:e0:d5:45:c7:c7:1c:e8:c1:17:ca:44:cd:c1:d8:9f:2d:05:
4a:66:30:30:e6:0d:71:28:16:06:47:bb:7a:2c:bd:ae:20:0e:
60:76:03:cd:b4:e6:03:53:99:0f:4f:0e:26:03:5f:7b:60:97:
01:7b:3c:b4:71:d5:88:cf:a2:fd:9a:6b:f8:d1:f3:22:f3:55:
c4:f1:5f:28:aa:65:6d:08:a6:f1:c3:52:ef:ee:f4:07:4f:ca:
7e:65:94:b4:e4:9c:16:b9:4d:8e:9c:fa:6b:78:1b:8d:07:a2:
47:17:66:80:e5:44:04:1e:dd:40:89:9e:de:ed:2d:5e:49:e4:
ac:e3:ca:0e:5f:59:fd:ad:11:e8:c4:3a:c4:05:34:9d:4b:99:
b9:d3:31:5a:c5:5b:72:ce:1d:3e:87:c6:8b:f5:34:f6:d0:8e:
aa:90:a9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org