Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cxANGZOf8CXMZTJVLvnRnw7Pi7k.roa
File: cxANGZOf8CXMZTJVLvnRnw7Pi7k.roa (raw, json)
Hash identifier: 5ozesmLl5pXO4hihVqUJUoNUcVjUNTijbwXLtq13GBg=
Subject key identifier: 73:10:0D:19:93:9F:F0:25:CC:65:32:55:2E:F9:D1:9F:0E:CF:8B:B9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 282F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cxANGZOf8CXMZTJVLvnRnw7Pi7k.roa
Signing time: Fri 01 Sep 2023 10:05:03 +0000
ROA not before: Fri 01 Sep 2023 10:05:03 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.200.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10287 (0x282f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:03 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=73100D19939FF025CC6532552EF9D19F0ECF8BB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6a:ef:7f:06:ce:30:76:4a:f9:2c:33:ca:c0:
0f:46:f6:06:77:e8:2f:97:16:03:c2:7e:0a:74:f2:
ee:13:98:2e:2b:18:dd:01:c8:c1:d6:49:b9:76:29:
e3:ce:64:81:58:fc:e8:44:1e:04:83:e0:d2:61:c9:
93:54:84:17:00:a6:d7:72:ad:2f:df:e2:4a:9e:75:
e1:f7:e9:d7:ba:6a:e0:74:6f:1a:27:9b:ee:fc:bd:
84:6a:5f:27:bb:87:03:4a:0b:46:e4:e7:ce:76:90:
be:57:3a:31:0b:ed:fa:2b:cc:9f:e6:45:ee:bd:dc:
ba:e6:7e:cd:63:2e:ef:1d:48:bf:21:96:3c:29:71:
32:2b:fe:62:c6:c3:f6:8b:33:00:63:0c:20:a2:c8:
e8:9b:e6:be:e4:b9:54:1f:84:ee:a6:c1:ee:50:78:
5c:29:e0:35:30:71:22:f4:b4:d9:06:8d:97:1b:38:
03:ce:a9:98:41:3b:20:f5:2a:0d:98:56:38:66:20:
6a:82:85:b3:b8:6f:d0:43:10:ca:93:66:e5:23:3c:
c3:c6:f2:f7:24:91:80:f2:3e:6f:48:e6:2f:14:58:
54:a3:b0:27:38:c7:09:80:ff:c2:37:bf:fc:79:fe:
28:cf:15:e1:3e:ef:59:36:3b:47:50:7f:40:8b:36:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:10:0D:19:93:9F:F0:25:CC:65:32:55:2E:F9:D1:9F:0E:CF:8B:B9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/cxANGZOf8CXMZTJVLvnRnw7Pi7k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.200.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ec:99:9d:3d:7b:41:6f:5f:3b:cb:36:24:f8:ec:39:22:bb:
97:46:e8:05:8b:cd:cd:82:a1:62:e4:3c:fc:9c:74:c8:12:13:
52:f6:3d:4a:53:a1:f7:5e:72:d2:8a:d1:78:d3:dd:d8:63:8d:
d5:70:7b:7c:a7:7c:cf:3f:02:a2:97:28:9f:d0:9e:0e:f8:1b:
b7:30:cf:c8:41:fa:2c:af:cf:f0:ba:ed:d3:8d:be:af:a1:74:
98:0c:22:e5:bb:2f:d3:71:60:48:d7:4b:34:92:67:fb:76:cd:
1a:e3:90:27:04:b0:5e:59:81:f1:2e:68:52:be:65:be:63:23:
dc:3a:d6:f1:3b:b7:76:d4:cc:8a:f6:ee:70:f7:57:d4:f1:ba:
f0:27:9e:eb:f5:a3:a5:89:6d:6d:1c:50:fd:fc:df:30:a3:22:
60:2f:d3:f3:77:e0:ac:e2:50:ef:00:52:a3:0b:e5:54:8c:6d:
37:0a:f2:07:3a:e5:be:22:88:be:cb:49:64:9b:fc:ed:0c:16:
5c:2d:38:36:da:62:d2:63:e6:64:86:6a:4e:d9:2a:2d:5b:ea:
6d:de:f5:37:ea:13:33:e8:68:ee:c0:65:cc:ad:64:a6:56:5e:
de:05:43:4f:83:d9:7d:01:b7:85:a3:dd:66:37:30:1f:c0:33:
7c:7d:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org