Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apVIHOgzIEYl9ZUF-7HDrby-uJw.roa
File: apVIHOgzIEYl9ZUF-7HDrby-uJw.roa (raw, json)
Hash identifier: rW7oe4DLapjRVjlmewgDh03NeZ9vVrysLWGlQ34X4Dg=
Subject key identifier: 6A:95:48:1C:E8:33:20:46:25:F5:95:05:FB:B1:C3:AD:BC:BE:B8:9C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 296D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apVIHOgzIEYl9ZUF-7HDrby-uJw.roa
Signing time: Fri 01 Sep 2023 10:06:35 +0000
ROA not before: Fri 01 Sep 2023 10:06:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10605 (0x296d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6A95481CE833204625F59505FBB1C3ADBCBEB89C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:f5:24:fc:70:d5:5c:bb:b1:91:31:2c:5a:
b2:ee:df:82:48:32:2d:46:0a:7e:fc:7f:a6:3d:cf:
56:20:7c:0c:ee:cf:05:8c:69:3e:82:a1:eb:e1:3b:
64:ba:0b:5f:bc:c1:ea:45:6c:02:d1:69:04:8f:f6:
44:e9:fa:67:b4:03:ee:13:f2:66:d7:f7:a7:78:72:
3e:df:e0:5a:b5:d9:26:1b:38:bb:01:3a:60:1c:8a:
08:07:49:fe:ac:ee:72:a2:c8:7e:bf:a1:70:9c:b3:
14:1e:5e:69:89:45:d1:19:58:40:1f:35:8d:50:9c:
85:f1:a7:ce:15:3d:41:2b:53:e5:77:19:1b:82:81:
94:67:74:9b:b8:72:2d:30:66:9a:f5:9b:03:ac:54:
d3:a6:6c:ed:63:c6:35:5f:27:b0:55:b8:c9:22:92:
e4:07:11:cf:e0:25:4f:9e:77:48:50:bc:f4:19:86:
78:a5:3e:af:04:c3:77:05:58:ef:cd:e8:e2:d5:5c:
54:5d:d7:4c:6f:c7:ab:f1:51:42:89:ac:9a:03:d8:
b5:4e:0f:f3:95:fc:5f:39:86:62:ff:a9:85:cc:b4:
bd:a6:27:06:3e:f4:c0:83:bf:d3:3b:4e:9a:8d:b4:
ef:a5:f0:60:24:86:dc:71:d4:d9:92:ab:c3:ad:5c:
9a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:95:48:1C:E8:33:20:46:25:F5:95:05:FB:B1:C3:AD:BC:BE:B8:9C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/apVIHOgzIEYl9ZUF-7HDrby-uJw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
12:ab:69:84:ab:0c:6d:9a:c7:0c:23:90:11:54:13:e8:51:fb:
ec:4a:4a:90:e9:77:d0:7e:47:54:c5:01:4d:9a:ab:dd:1c:ad:
01:c7:2a:94:6f:b4:9a:87:a0:23:a6:96:4f:09:cd:1b:07:c4:
b9:8e:9e:a6:19:72:9e:dd:7f:a3:af:f6:21:17:96:6d:94:65:
9c:35:40:d1:0b:22:3d:77:2f:70:a0:2b:7d:19:ce:8f:a3:21:
1b:42:2c:b7:5b:8a:dd:7d:1b:ff:d4:85:b2:12:df:96:8e:b7:
04:9f:48:5d:6a:d2:71:62:14:f2:25:fb:56:a9:46:f1:d9:90:
7b:cc:47:76:1f:6e:de:2b:ec:88:fb:12:95:a3:5a:ea:e5:0f:
4f:71:72:54:8a:16:0a:07:66:0a:22:b6:17:77:35:5a:46:7c:
39:59:1d:36:93:bf:84:d0:f9:72:6d:6a:8a:98:30:6b:ce:30:
22:74:74:90:84:6b:ef:5b:4a:f3:04:c5:ca:61:bd:38:55:3c:
b2:42:72:c8:72:81:b7:e9:df:f7:e2:3b:06:29:cd:10:a9:5a:
7f:d9:fe:74:39:55:89:4c:0c:b5:08:54:5c:35:5b:36:e7:6f:
f5:9c:3e:a4:90:64:27:7e:47:76:2d:67:ba:fe:ed:60:02:1a:
18:03:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org