Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cdlB2UZFkB7MW-bArvMLhzEJUF0.roa
File: cdlB2UZFkB7MW-bArvMLhzEJUF0.roa (raw, json)
Hash identifier: MNDZX9et6QFAJgLc3p6ab+gySmrpq24q5yIIkTADIt8=
Subject key identifier: 71:D9:41:D9:46:45:90:1E:CC:5B:E6:C0:AE:F3:0B:87:31:09:50:5D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A66
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cdlB2UZFkB7MW-bArvMLhzEJUF0.roa
Signing time: Fri 01 Sep 2023 10:07:51 +0000
ROA not before: Fri 01 Sep 2023 10:07:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10854 (0x2a66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=71D941D94645901ECC5BE6C0AEF30B873109505D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:4f:be:45:1b:0b:17:13:f8:27:23:0f:e0:
fb:16:97:24:41:dc:46:7a:fe:e0:1d:55:38:48:04:
46:e2:2c:c1:bd:ae:3c:cb:0c:9b:6c:c6:13:2a:98:
40:b3:3d:1e:c6:54:7c:ee:ee:1d:d3:be:e3:4b:3c:
bb:2a:c6:f3:c3:7d:41:67:bc:b4:f9:70:45:89:2b:
8f:59:ff:69:75:bf:9b:1b:4a:fc:46:c0:80:8c:e9:
71:8e:da:7e:a0:4c:bd:76:43:cf:c6:fc:fc:74:a0:
06:c3:f5:9e:b4:96:4e:6a:62:bd:8a:f2:b1:4a:79:
c5:15:db:59:85:e1:96:1d:b2:b1:d0:02:22:63:21:
c6:8a:a0:29:7a:64:c5:69:98:ef:9e:bb:f9:e1:cd:
31:50:9a:cb:d6:12:bb:dc:84:09:1c:7c:f2:fd:4b:
0e:7d:1a:db:1d:ac:d3:af:64:aa:45:00:d4:29:62:
f3:ab:53:4f:8d:ee:94:f4:92:6f:15:68:5b:1a:46:
7c:ff:b6:6d:f6:31:5a:93:dd:74:c0:58:fd:03:4f:
19:a3:cf:70:f0:ed:d8:f6:03:61:ce:4e:71:ec:1f:
19:e9:21:b9:f5:75:b2:44:86:d6:2b:e7:c4:b5:ca:
94:84:63:5a:7a:8d:fa:78:dd:39:0b:c3:20:fc:d4:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D9:41:D9:46:45:90:1E:CC:5B:E6:C0:AE:F3:0B:87:31:09:50:5D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cdlB2UZFkB7MW-bArvMLhzEJUF0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.216.0/21
Signature Algorithm: sha256WithRSAEncryption
73:ac:86:df:af:22:55:42:ec:b9:45:bc:d1:28:cc:76:72:94:
59:fd:0a:0c:3b:0c:6f:07:97:12:58:f7:95:ca:9c:a3:07:57:
28:15:c6:e4:f3:c3:11:49:cd:f1:1c:8d:bf:56:5e:29:ba:ba:
85:aa:e8:44:d1:b5:7a:52:25:01:0e:8c:45:65:70:f6:c5:f9:
3b:10:66:20:dc:88:1b:ac:02:42:af:af:c4:7f:fb:17:8e:97:
e3:f3:d6:a0:23:cf:a0:8e:4d:11:cd:a9:a7:e8:e2:9d:f0:79:
24:35:98:ba:48:80:c9:71:0e:27:56:4d:8d:73:f2:b4:ee:16:
80:a4:ab:d4:fd:24:98:45:e5:00:f8:0d:c5:c9:16:24:f8:07:
60:45:51:76:76:77:50:df:d6:37:b7:81:36:a4:f0:f5:e3:9a:
04:2f:37:bb:b7:73:2f:3b:8b:48:d8:38:45:92:05:7f:1e:1c:
f0:ad:ed:26:7d:83:13:6d:e4:cd:55:d2:db:63:47:f1:8a:cc:
36:95:04:81:43:5a:31:a1:25:15:8f:05:ff:1b:18:c5:cf:ca:
58:58:99:c5:e3:2a:98:20:69:b9:7c:18:20:a4:ed:e7:d8:23:
91:aa:48:ca:98:7b:2b:42:de:e6:19:90:22:dc:5a:89:48:bb:
52:f0:10:8a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKmYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDcxRDk0MUQ5NDY0NTkw
MUVDQzVCRTZDMEFFRjMwQjg3MzEwOTUwNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC99k++RRsLFxP4JyMP4PsWlyRB3EZ6/uAdVThIBEbiLMG9rjzL
DJtsxhMqmECzPR7GVHzu7h3TvuNLPLsqxvPDfUFnvLT5cEWJK49Z/2l1v5sbSvxG
wICM6XGO2n6gTL12Q8/G/Px0oAbD9Z60lk5qYr2K8rFKecUV21mF4ZYdsrHQAiJj
IcaKoCl6ZMVpmO+eu/nhzTFQmsvWErvchAkcfPL9Sw59GtsdrNOvZKpFANQpYvOr
U0+N7pT0km8VaFsaRnz/tm32MVqT3XTAWP0DTxmjz3Dw7dj2A2HOTnHsHxnpIbn1
dbJEhtYr58S1ypSEY1p6jfp43TkLwyD81ESrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUcdlB2UZFkB7MW+bArvMLhzEJUF0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2NkbEIyVVpGa0I3TVctYkFy
dk1MaHpFSlVGMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
w9gwDQYJKoZIhvcNAQELBQADggEBAHOsht+vIlVC7LlFvNEozHZylFn9Cgw7DG8H
lxJY95XKnKMHVygVxuTzwxFJzfEcjb9WXim6uoWq6ETRtXpSJQEOjEVlcPbF+TsQ
ZiDciBusAkKvr8R/+xeOl+Pz1qAjz6COTRHNqafo4p3weSQ1mLpIgMlxDidWTY1z
8rTuFoCkq9T9JJhF5QD4DcXJFiT4B2BFUXZ2d1Df1je3gTak8PXjmgQvN7u3cy87
i0jYOEWSBX8eHPCt7SZ9gxNt5M1V0ttjR/GKzDaVBIFDWjGhJRWPBf8bGMXPylhY
mcXjKpggabl8GCCk7efYI5GqSMqYeytC3uYZkCLcWolIu1LwEIo=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org