Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blsoYMlDkwQABFpwqgLvm6HlQos.roa
File: blsoYMlDkwQABFpwqgLvm6HlQos.roa (raw, json)
Hash identifier: qrQF+S0tD0x0zvffArTrqfF3aOO4sVttd34PdtX8mXg=
Subject key identifier: 6E:5B:28:60:C9:43:93:04:00:04:5A:70:AA:02:EF:9B:A1:E5:42:8B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A5D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blsoYMlDkwQABFpwqgLvm6HlQos.roa
Signing time: Fri 01 Sep 2023 10:07:49 +0000
ROA not before: Fri 01 Sep 2023 10:07:49 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10845 (0x2a5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:49 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6E5B2860C943930400045A70AA02EF9BA1E5428B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c5:b5:6a:1c:25:b9:e4:35:5d:78:25:bc:80:
64:a8:80:b7:e6:0b:62:a6:2b:97:9c:7f:6a:62:61:
2a:88:51:b6:f9:70:c4:48:86:04:1e:1e:17:44:8f:
11:d5:96:e6:d8:ec:d2:38:96:a3:52:55:d7:c1:e0:
7c:29:a9:29:22:32:b3:ff:ea:20:ef:e9:6e:51:b7:
2c:71:de:69:7d:ac:61:68:7a:cf:db:f0:77:a6:af:
bb:f9:03:26:5a:0d:89:04:06:f6:dc:fe:ab:94:2d:
5d:e6:c9:a3:e3:93:db:ae:e7:40:62:4b:47:62:61:
c2:37:56:36:6a:15:5c:1b:b1:26:70:4f:52:df:4e:
85:d9:ef:48:b2:2e:b3:d3:57:47:b7:4f:9e:40:7b:
9a:b7:db:3e:1b:3b:11:40:72:73:50:54:3e:0e:9a:
ed:3b:e5:2a:2b:a3:e8:f9:6f:ca:48:18:a5:cc:34:
ff:05:0a:5c:7b:14:e6:e1:1c:8a:ca:81:86:28:ca:
39:a3:86:68:48:fd:67:59:22:0d:a1:d7:91:6f:72:
f3:67:2e:d0:23:e2:10:11:83:a5:40:be:9c:ea:1c:
42:f4:d1:23:ad:69:7b:f9:36:94:a1:09:fb:0f:83:
cd:62:ea:24:16:1a:d5:a4:63:19:13:47:7d:62:7c:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5B:28:60:C9:43:93:04:00:04:5A:70:AA:02:EF:9B:A1:E5:42:8B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/blsoYMlDkwQABFpwqgLvm6HlQos.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.8.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:2b:45:7d:fe:16:e0:28:08:c2:77:dc:e1:7d:47:eb:ff:4b:
32:21:3d:f6:2b:ed:a9:1b:46:74:04:85:b0:05:6b:2a:61:8a:
ac:fc:cc:11:ab:6e:65:39:aa:8b:d0:b0:eb:8e:95:74:e5:f6:
74:19:b6:d2:cf:34:29:ee:10:e4:33:e9:9b:6b:2c:d9:ff:34:
72:35:b1:04:95:3e:c4:e6:3b:61:65:df:e1:da:fb:23:72:da:
52:d3:c5:e3:0e:ca:27:78:22:15:e0:1c:cf:fe:a8:d3:d3:e5:
31:3f:b1:c7:d0:6a:15:b1:61:8d:d4:18:b4:70:7b:59:67:76:
13:73:8a:c0:46:4e:5f:08:94:bd:0e:03:ec:9a:e5:7a:6f:a3:
e8:7a:65:87:dc:46:d5:7b:74:7b:75:b0:f3:40:17:a6:b5:69:
a5:ad:93:cf:34:df:a5:c4:d9:bc:db:86:40:c0:5f:16:a5:77:
da:93:a8:c1:83:11:59:fe:23:ff:ce:43:5b:f7:8a:fe:b6:3b:
64:8e:89:bd:98:6d:d4:23:b9:ed:b6:57:36:fe:a8:6b:dc:18:
7b:c4:05:96:84:80:75:76:db:aa:e8:15:d6:d5:d7:c2:84:af:
19:e5:96:6b:7a:f1:ba:83:53:87:25:6a:85:26:02:f0:b0:34:
79:46:9b:31
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKl0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NDlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDZFNUIyODYwQzk0Mzkz
MDQwMDA0NUE3MEFBMDJFRjlCQTFFNTQyOEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuxbVqHCW55DVdeCW8gGSogLfmC2KmK5ecf2piYSqIUbb5cMRI
hgQeHhdEjxHVlubY7NI4lqNSVdfB4HwpqSkiMrP/6iDv6W5Rtyxx3ml9rGFoes/b
8Hemr7v5AyZaDYkEBvbc/quULV3myaPjk9uu50BiS0diYcI3VjZqFVwbsSZwT1Lf
ToXZ70iyLrPTV0e3T55Ae5q32z4bOxFAcnNQVD4Omu075Soro+j5b8pIGKXMNP8F
Clx7FObhHIrKgYYoyjmjhmhI/WdZIg2h15FvcvNnLtAj4hARg6VAvpzqHEL00SOt
aXv5NpShCfsPg81i6iQWGtWkYxkTR31ifPPJAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUblsoYMlDkwQABFpwqgLvm6HlQoswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2Jsc29ZTWxEa3dRQUJGcHdx
Z0x2bTZIbFFvcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wAgwDQYJKoZIhvcNAQELBQADggEBAD4rRX3+FuAoCMJ33OF9R+v/SzIhPfYr7akb
RnQEhbAFayphiqz8zBGrbmU5qovQsOuOlXTl9nQZttLPNCnuEOQz6ZtrLNn/NHI1
sQSVPsTmO2Fl3+Ha+yNy2lLTxeMOyid4IhXgHM/+qNPT5TE/scfQahWxYY3UGLRw
e1lndhNzisBGTl8IlL0OA+ya5Xpvo+h6ZYfcRtV7dHt1sPNAF6a1aaWtk88036XE
2bzbhkDAXxald9qTqMGDEVn+I//OQ1v3iv62O2SOib2YbdQjue22Vzb+qGvcGHvE
BZaEgHV226roFdbV18KErxnllmt68bqDU4claoUmAvCwNHlGmzE=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org