Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d0KX5dEwBybL38NL5S8dZm4rPpk.roa
File: d0KX5dEwBybL38NL5S8dZm4rPpk.roa (raw, json)
Hash identifier: pgQH2+EmrPgvgswyma4JwiXT7wgLD9qHZD94g7kbovs=
Subject key identifier: 77:42:97:E5:D1:30:07:26:CB:DF:C3:4B:E5:2F:1D:66:6E:2B:3E:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A6C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d0KX5dEwBybL38NL5S8dZm4rPpk.roa
Signing time: Fri 01 Sep 2023 10:07:53 +0000
ROA not before: Fri 01 Sep 2023 10:07:53 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10860 (0x2a6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:53 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=774297E5D1300726CBDFC34BE52F1D666E2B3E99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:32:78:a3:14:32:63:69:31:60:a8:73:0f:
27:9a:60:22:87:93:a2:e4:17:eb:29:dd:91:23:00:
26:af:da:e4:ed:01:c3:23:d1:6d:98:75:9d:d1:d9:
1d:3d:94:34:eb:b7:09:21:c9:b7:6c:6a:30:85:0b:
4b:76:1b:15:38:74:58:2a:6e:27:ad:27:33:06:48:
c9:89:91:a8:35:8d:83:9a:93:3a:2e:e6:eb:2e:2d:
6c:b4:d9:73:01:46:56:7a:00:21:80:0e:9d:bb:d2:
89:d0:a0:35:ef:8e:9f:7c:7b:a9:42:3f:30:d1:6c:
e9:8f:73:bc:09:6f:7f:e7:40:c4:7e:d3:6b:7c:b0:
a5:23:3f:91:b7:6d:69:a0:27:8a:68:cd:96:99:60:
14:d4:e2:1e:c9:45:f6:d7:33:c8:23:93:ec:d0:e2:
63:81:0a:67:39:df:a9:c4:f5:4a:12:eb:52:79:77:
27:d5:39:70:3b:51:bd:d7:e6:db:22:bb:44:8e:98:
d5:63:d6:95:47:6c:d9:4e:2d:17:82:f7:46:bc:e7:
94:46:14:36:da:15:96:47:6a:d9:4b:39:02:07:ae:
ac:b1:f5:02:15:02:4d:c5:1d:5d:94:80:5f:be:5e:
cc:14:8f:b9:cf:af:51:fb:e3:6f:06:c4:df:85:c6:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:97:E5:D1:30:07:26:CB:DF:C3:4B:E5:2F:1D:66:6E:2B:3E:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d0KX5dEwBybL38NL5S8dZm4rPpk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.80.0/21
Signature Algorithm: sha256WithRSAEncryption
59:6b:b5:f0:de:e3:97:5e:4a:6d:8a:03:16:22:e5:4b:3f:13:
04:ab:89:bd:03:c3:bd:ba:cf:6a:e6:41:45:91:e9:76:46:a4:
e8:5e:d7:31:53:40:c5:cd:29:f3:9f:ba:f7:14:01:af:63:c8:
1a:91:06:6a:eb:d3:8a:6f:01:ea:1c:8e:0c:3f:b9:72:b7:ec:
33:74:d8:9d:b0:39:06:85:ee:a9:e5:65:eb:f4:33:d8:fc:31:
03:6f:8a:7b:91:15:40:7f:9c:be:a2:d2:2a:8c:9f:07:80:3e:
48:6e:63:8e:3f:ab:62:10:51:d8:eb:4d:75:04:f8:bb:cc:93:
56:d7:0f:db:09:a1:46:92:0d:47:34:49:fe:0b:fa:00:51:53:
41:4d:c5:15:69:79:d4:fa:58:a9:49:33:ba:07:fa:c8:e6:db:
ac:19:b5:b5:8a:04:25:28:6d:51:b1:c1:e4:5e:86:ae:e2:f5:
31:3d:3e:82:04:e3:a9:59:92:39:93:65:85:7f:b0:58:43:bc:
dd:41:e0:46:da:22:04:cf:1c:71:99:e6:0b:ac:e7:45:b7:5d:
bd:46:fe:38:9a:da:b8:91:d7:14:01:a8:8d:fe:e1:5d:53:42:
b7:5c:b7:a9:2e:68:2f:eb:29:25:e9:4a:e4:ba:9b:82:00:45:
20:5c:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org