Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cfKM-lKJx3waADtB4lPU-p6VAn8.roa
File: cfKM-lKJx3waADtB4lPU-p6VAn8.roa (raw, json)
Hash identifier: P5TkV/Ym0U+xYxupR/jwYAmRZFJ/8y9xPoYcET3ZPlw=
Subject key identifier: 71:F2:8C:FA:52:89:C7:7C:1A:00:3B:41:E2:53:D4:FA:9E:95:02:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A00
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cfKM-lKJx3waADtB4lPU-p6VAn8.roa
Signing time: Fri 01 Sep 2023 10:07:22 +0000
ROA not before: Fri 01 Sep 2023 10:07:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10752 (0x2a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=71F28CFA5289C77C1A003B41E253D4FA9E95027F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:17:28:26:aa:04:dc:b2:bb:45:5a:93:84:f6:
0e:af:9d:c2:fb:bc:bb:c7:ff:24:55:53:18:e2:51:
f9:5e:90:e5:db:a6:23:a8:99:63:b2:fa:b6:26:9c:
c2:46:84:76:37:6c:c0:a0:40:bf:5a:01:4d:03:0c:
0a:24:5a:55:6e:1b:1f:99:a7:fd:da:18:a0:62:34:
73:5a:be:14:56:f2:a7:67:86:44:41:f8:59:d0:e0:
8e:df:69:1b:35:be:5e:4e:76:51:c6:e1:5a:ff:9d:
a1:39:bf:37:76:2a:ad:08:37:ca:ae:99:a8:38:41:
d4:d2:54:47:fe:b1:da:4d:8e:1f:4c:00:63:06:67:
7a:33:f6:39:7f:9a:3a:d8:40:95:4d:3e:41:07:74:
6c:4e:f1:02:75:28:18:73:6f:a8:98:e7:91:84:ce:
88:38:f5:96:86:af:59:92:e3:b0:0d:86:f6:c3:92:
45:01:b1:8f:8b:42:6b:94:89:11:43:73:71:29:fa:
b4:e4:da:86:bc:6a:ae:35:71:0e:e2:8f:0b:5e:af:
ec:c1:d1:64:5c:bc:ed:aa:ec:b8:45:52:99:df:7c:
c4:e0:2f:c2:89:1a:95:30:5e:e5:1f:6d:18:3c:39:
00:e8:f0:5e:73:6f:c0:d7:bf:be:08:89:89:c8:14:
1d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F2:8C:FA:52:89:C7:7C:1A:00:3B:41:E2:53:D4:FA:9E:95:02:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cfKM-lKJx3waADtB4lPU-p6VAn8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.232.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:26:7c:c6:58:e1:71:e1:39:c9:d6:5c:5f:9f:1e:80:0b:5f:
be:17:34:34:b9:4e:e4:8c:da:b0:18:ae:31:dc:44:f6:fe:8e:
32:83:96:71:af:62:66:a1:9d:61:44:25:e7:cc:3f:a1:46:0e:
8e:2b:2b:ff:70:f8:8e:ba:cb:eb:b7:f5:cf:42:f5:33:ac:de:
16:6f:90:c0:20:fe:17:1e:07:53:8d:61:61:25:8d:29:b0:ff:
5b:94:cb:dd:64:9e:b5:b3:4f:84:d3:3a:b4:07:82:3f:8f:f3:
b6:ec:76:df:bf:45:ac:10:5d:8f:75:e6:3b:77:3f:48:84:1b:
22:8d:bb:b5:cc:c2:36:cc:dd:4f:ed:8f:12:9d:8b:aa:54:20:
b1:31:52:c1:c5:ba:de:cb:12:a8:fb:48:e8:3d:aa:b6:74:bf:
c3:b8:2d:06:2b:8a:2e:36:af:ce:b9:12:e6:79:96:c0:6a:c2:
dd:f5:0e:00:cc:0c:44:76:16:ea:97:21:83:ed:8a:3c:d7:31:
20:cc:31:56:fc:9d:f9:93:8e:d5:41:f2:92:34:b1:3f:09:de:
f9:5a:4c:a5:d3:a9:8d:b5:4b:00:35:a8:14:10:b5:3a:9e:82:
dc:21:95:12:8e:c9:23:be:10:b8:ec:48:8a:bf:47:2d:43:d3:
b4:1e:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org