Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aBU-4VCpJnM0J4X95ds5wAhGYMU.roa
File: aBU-4VCpJnM0J4X95ds5wAhGYMU.roa (raw, json)
Hash identifier: onIIk3GLqbOIc6Qz2qBcl88eLRIBAl2i+brfDEEZUBM=
Subject key identifier: 68:15:3E:E1:50:A9:26:73:34:27:85:FD:E5:DB:39:C0:08:46:60:C5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2874
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aBU-4VCpJnM0J4X95ds5wAhGYMU.roa
Signing time: Fri 01 Sep 2023 10:05:21 +0000
ROA not before: Fri 01 Sep 2023 10:05:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.195.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10356 (0x2874)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=68153EE150A92673342785FDE5DB39C0084660C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:78:a4:9b:c4:66:75:c8:bb:32:c2:f3:2e:
06:14:dd:cf:fa:cb:e6:32:6f:06:94:82:f8:90:20:
71:c7:88:30:f7:8e:e3:3c:fa:1d:df:12:c6:72:4f:
59:85:d8:b0:7f:ec:0b:66:46:c9:02:29:6b:5a:de:
3b:d5:18:f0:d5:e3:95:a6:c1:da:46:c9:9d:2f:a9:
a1:51:92:c0:e6:42:18:7d:30:d3:a0:18:bb:6a:60:
db:f3:3c:f9:6a:53:8f:2e:dc:ee:7b:36:0e:f6:9e:
bb:4b:68:8c:4c:bc:b0:16:3c:b4:7e:06:58:1c:76:
33:ff:fe:a6:ec:24:38:1a:3a:92:bb:26:70:5f:21:
d3:e3:ec:25:61:99:d2:3e:06:84:f8:7b:6a:ec:e3:
68:5d:41:3b:7d:e6:ba:d0:95:85:7d:76:5d:d2:3e:
0b:43:d7:97:35:cb:16:55:c3:ef:15:1a:04:fa:07:
1a:1e:c2:db:56:55:cb:e3:a3:a2:94:d9:a8:be:28:
32:bf:17:a5:5e:c5:09:d6:84:a4:a5:81:2a:bd:d0:
26:64:6d:88:de:bc:09:96:ad:1a:98:92:aa:81:b5:
a6:6c:7b:f8:79:6a:b4:48:05:f8:64:aa:57:8a:8e:
77:cf:73:5b:a3:65:23:2d:9b:f6:8b:d0:5e:a4:e4:
e2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:3E:E1:50:A9:26:73:34:27:85:FD:E5:DB:39:C0:08:46:60:C5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aBU-4VCpJnM0J4X95ds5wAhGYMU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.28.0/22
Signature Algorithm: sha256WithRSAEncryption
36:3e:ea:c7:5b:2e:5b:59:b9:8c:fd:d3:9c:3f:81:c6:a3:99:
00:c5:7e:3c:56:ad:78:af:e5:3d:e1:23:a2:01:9d:b7:86:88:
b1:d1:3e:ae:ce:f7:16:2d:4f:27:76:2f:ea:df:de:f2:35:81:
44:f6:75:48:be:a6:81:d3:f3:db:7a:26:74:5d:27:27:a2:9c:
65:ae:55:46:82:fb:c0:90:c8:37:ed:eb:ab:55:19:82:0d:ca:
cb:2f:4e:72:df:85:d9:78:73:85:63:08:61:b4:31:9a:a1:52:
1a:77:5a:f0:1e:ca:77:9c:09:09:75:c9:71:e8:a7:18:c7:78:
f4:1a:72:b9:53:a2:e2:0a:31:dd:36:ae:e3:67:2e:a5:38:2a:
cc:76:c4:e2:87:09:77:28:c1:19:6d:4c:3e:73:00:74:6d:c2:
42:a0:6a:a5:90:d6:cf:d6:11:a1:e0:e6:90:9f:c3:f0:2c:b9:
fd:23:0c:2f:4b:e1:19:44:db:80:5c:43:ae:1a:a2:a6:e0:ca:
fc:b5:bc:89:23:36:fa:40:0c:32:3f:aa:12:18:7d:ab:55:f5:
9c:f3:68:63:76:77:6a:4a:c0:80:f4:bd:7f:93:bf:4c:36:ca:
f9:12:e2:09:e6:e8:a3:a6:f1:4b:9c:73:0e:61:0a:06:c3:fb:
5b:67:e7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org