Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZfV8QQDBjqrS_LARDF7qvTX3wFo.roa
File: ZfV8QQDBjqrS_LARDF7qvTX3wFo.roa (raw, json)
Hash identifier: m446WOQohSaI2XcX8zq5iQrc0NNzSh11fMM/pBT2kUY=
Subject key identifier: 65:F5:7C:41:00:C1:8E:AA:D2:FC:B0:11:0C:5E:EA:BD:35:F7:C0:5A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 283B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZfV8QQDBjqrS_LARDF7qvTX3wFo.roa
Signing time: Fri 01 Sep 2023 10:05:06 +0000
ROA not before: Fri 01 Sep 2023 10:05:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.193.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10299 (0x283b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=65F57C4100C18EAAD2FCB0110C5EEABD35F7C05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:ee:fa:6a:70:5e:90:c9:2f:3f:93:1a:3d:
3d:bc:37:9a:ef:11:27:2b:82:ab:47:32:f4:e9:09:
24:8d:a4:d6:f1:7c:ec:fc:2d:08:45:18:71:84:7a:
26:2c:2e:1e:19:7e:cd:98:bb:f5:02:6e:de:f8:aa:
71:d7:e2:40:26:82:60:05:e7:50:5c:10:af:b9:8b:
5f:30:6b:e7:88:db:f8:52:37:60:8e:73:5c:a3:ce:
60:26:15:25:a4:dc:29:b7:e6:37:ce:6b:29:3a:2a:
d9:a1:ae:24:99:bf:ab:c2:0d:78:4b:60:4e:07:e1:
e0:d9:78:44:71:88:20:8e:9e:c8:b0:97:b2:7f:da:
e1:1e:9c:da:f3:db:a0:f2:2d:42:48:f1:d9:7d:51:
a1:3f:3c:6c:e7:92:f2:9b:5c:2c:03:fa:57:25:c2:
fc:21:56:fc:67:37:2d:fe:31:91:9e:90:b4:c3:22:
0d:72:64:f2:3a:9f:41:d4:14:a3:38:04:4f:ef:c1:
63:c2:85:32:df:49:62:30:4a:c3:50:20:ec:4c:22:
6e:29:11:6f:36:17:93:9d:de:ca:b1:bb:63:09:4e:
c7:f4:72:a7:11:8f:c0:85:fa:8f:c3:82:ee:bf:1c:
c0:f0:90:c8:45:96:f1:c1:14:0b:50:4c:37:cf:ed:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:F5:7C:41:00:C1:8E:AA:D2:FC:B0:11:0C:5E:EA:BD:35:F7:C0:5A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ZfV8QQDBjqrS_LARDF7qvTX3wFo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.224.0/19
Signature Algorithm: sha256WithRSAEncryption
62:7a:a6:ab:cc:98:57:e7:9d:74:a5:ef:01:9b:73:ab:b6:1a:
0b:e0:f5:30:97:6c:9b:6f:b1:de:43:fc:a6:1c:e8:aa:8f:39:
62:a1:6b:41:39:26:ab:37:ea:23:70:db:de:52:c5:b7:f0:70:
a6:38:11:03:a1:ea:bb:cd:ba:10:4f:53:b3:a5:c0:4e:2b:43:
ff:a1:0b:07:3b:49:49:1c:23:76:ad:2f:25:9c:c9:38:8d:28:
31:ed:6a:fc:93:ad:6c:db:42:fc:6a:17:b1:e3:62:0c:68:9a:
38:cd:3c:f0:f5:00:82:18:83:68:17:11:96:38:a3:0d:be:b1:
ea:3a:71:93:81:07:60:0c:58:56:2a:d3:fd:7c:f3:1c:e6:39:
96:11:19:54:5c:e0:0b:1f:15:c8:23:13:4e:28:c8:d1:68:97:
32:30:35:56:61:24:32:42:50:29:3d:ae:53:6d:52:c6:7e:ce:
3f:b7:ba:60:71:61:b9:6f:07:ac:62:96:67:7a:14:61:17:2c:
a2:2d:53:fe:a8:4c:4e:9d:15:ce:dd:67:79:c6:57:c2:11:31:
1d:11:b4:f8:61:4d:d8:62:6e:df:d7:92:94:8d:a9:82:48:bc:
6c:43:f2:0f:bc:70:01:f8:ce:be:73:b3:c0:46:11:e3:e1:16:
41:fc:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org