Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aq5mo6q_qRiV6z3ns5MLV4NSjYE.roa
File: aq5mo6q_qRiV6z3ns5MLV4NSjYE.roa (raw, json)
Hash identifier: SliArgHo01d8QpB/7OceNzu4oASIg1sF5m8VDlS/2Og=
Subject key identifier: 6A:AE:66:A3:AA:BF:A9:18:95:EB:3D:E7:B3:93:0B:57:83:52:8D:81
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27F8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aq5mo6q_qRiV6z3ns5MLV4NSjYE.roa
Signing time: Fri 01 Sep 2023 10:04:47 +0000
ROA not before: Fri 01 Sep 2023 10:04:47 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.176.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10232 (0x27f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:47 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6AAE66A3AABFA91895EB3DE7B3930B5783528D81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:30:07:73:f2:28:4f:5d:d7:bd:18:78:e6:
50:23:64:18:81:7a:44:71:24:d0:a7:e1:68:22:0f:
38:a9:4a:8d:3b:57:d0:19:77:62:69:a8:e3:70:24:
d5:a1:04:7d:3b:75:ed:a8:e2:d2:a7:33:28:d5:bb:
26:f7:40:43:fe:88:94:68:3d:20:7c:15:16:83:a3:
c0:57:76:60:96:cc:f7:4a:c2:41:1f:44:f4:b9:0d:
d4:9b:4d:8d:5b:ad:ad:74:b7:2d:b2:e8:4e:07:2e:
38:6f:93:01:ed:a2:47:0d:b9:6e:e0:d7:f4:6f:f4:
6d:8a:41:b0:d6:78:e9:a9:18:2d:3a:fd:77:85:44:
2f:ad:92:35:b9:f3:63:f6:4e:7e:02:67:f4:ea:33:
d7:c3:07:84:ca:8f:7d:bd:8b:94:10:19:3d:ba:40:
52:00:b3:dd:1e:c2:80:56:03:af:31:54:a4:30:eb:
69:ab:f1:e0:09:fb:7a:a7:7c:91:3c:fc:1d:b6:91:
26:e7:a7:23:0d:ad:9c:79:68:f4:22:67:b6:6d:97:
e6:cc:c3:21:8c:24:84:cf:ac:07:f9:d7:91:dd:85:
d8:ca:b2:1c:41:10:a9:f5:eb:10:be:82:e9:a8:a5:
da:63:ae:de:76:69:c2:10:b0:5d:a8:86:9f:54:9d:
87:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AE:66:A3:AA:BF:A9:18:95:EB:3D:E7:B3:93:0B:57:83:52:8D:81
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/aq5mo6q_qRiV6z3ns5MLV4NSjYE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.176.0/20
Signature Algorithm: sha256WithRSAEncryption
00:c4:3e:f9:ce:1a:f5:48:9f:31:a5:d6:78:fd:c3:f9:fe:f5:
cf:5f:84:c2:06:cf:15:56:b9:33:4d:3b:1f:54:41:0f:25:f7:
b9:2e:14:da:83:f7:1e:40:b9:78:45:b4:a3:85:da:0e:de:59:
eb:ca:cc:cb:28:48:4b:ec:c6:3a:1c:6e:14:60:45:bf:27:c2:
d7:1d:a6:eb:11:9b:73:f0:51:b2:1c:31:b4:fc:b4:4a:21:7f:
ef:85:24:60:18:ac:61:a4:91:24:1e:8f:d8:35:74:5e:2b:57:
86:02:c2:5c:66:56:c4:15:97:62:19:0b:a0:5c:58:29:90:10:
a1:1b:28:9f:37:91:5c:58:c2:2d:ee:1c:e2:f9:21:f7:5e:05:
d3:1e:8c:c0:fe:ee:55:0a:14:fc:07:ba:bc:e7:c6:4b:70:43:
e1:4d:c8:3e:dd:1a:9d:8f:3b:8d:69:19:1b:bb:70:a8:e0:6a:
37:fd:46:a9:d1:bf:fd:8f:dd:6b:ea:56:06:3e:f1:0e:fa:01:
ba:28:27:2a:b4:63:28:41:4d:af:94:71:66:80:e2:5b:0e:d9:
2f:82:f4:0c:85:93:d6:43:e7:ad:94:6b:3c:7d:c9:2b:4a:8e:
94:0c:3b:13:dd:ed:a9:e6:38:25:f3:9a:6a:d5:dc:41:32:e7:
e4:b9:bb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org