Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d7NLWyKPqbaejmQdRPCyEiKnd6w.roa
File: d7NLWyKPqbaejmQdRPCyEiKnd6w.roa (raw, json)
Hash identifier: /CoIlcm+rCmd8fdNYxdkwEx6n1AHxatu/wB/p5CMGH4=
Subject key identifier: 77:B3:4B:5B:22:8F:A9:B6:9E:8E:64:1D:44:F0:B2:12:22:A7:77:AC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2931
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d7NLWyKPqbaejmQdRPCyEiKnd6w.roa
Signing time: Fri 01 Sep 2023 10:06:15 +0000
ROA not before: Fri 01 Sep 2023 10:06:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.128.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10545 (0x2931)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=77B34B5B228FA9B69E8E641D44F0B21222A777AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8e:ec:ee:b6:99:3d:35:2a:f2:30:93:12:9b:
6b:04:8e:a5:92:e0:9d:1c:6b:f3:e4:c9:e1:7a:28:
f7:b7:09:70:b1:99:2e:bf:7e:e9:83:5e:05:bc:d2:
dc:0f:6d:c7:8d:28:3f:0a:20:de:dc:0a:1e:57:47:
90:d8:fd:63:f0:78:88:b9:77:0a:ac:22:dc:d8:71:
6e:74:f3:a0:8f:e8:3b:23:5f:4a:a7:72:ed:01:1c:
dd:25:1d:16:2d:c3:2b:43:62:63:1a:a4:a4:c6:d4:
23:d1:a2:93:1d:19:aa:f9:10:41:ed:c9:c7:fa:af:
2a:55:50:48:f3:2d:9a:ef:80:7c:32:17:31:3a:d3:
15:d9:d6:f0:bb:e5:95:b6:5f:1d:31:ad:cd:48:08:
85:1e:bf:a8:f2:c7:20:41:fd:58:e7:da:9e:a5:c7:
d1:1f:3c:f8:b8:2a:95:55:97:cd:ff:ae:dd:a5:fb:
b2:c8:eb:1c:dd:85:a1:d4:9a:0d:db:b7:01:f0:99:
0c:2d:3f:40:54:d8:b0:8e:ac:81:26:9d:ac:a4:23:
8f:d2:65:8c:ed:fd:d8:6a:6a:79:c9:86:13:a8:80:
df:cb:f4:ce:65:6c:a6:c8:ad:74:95:d5:06:1d:66:
03:89:b8:34:7d:a6:5e:39:68:98:89:f7:3b:db:90:
a3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:4B:5B:22:8F:A9:B6:9E:8E:64:1D:44:F0:B2:12:22:A7:77:AC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/d7NLWyKPqbaejmQdRPCyEiKnd6w.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7a:fa:2d:83:4c:c5:52:df:c7:94:d5:d3:b1:63:4f:f1:f2:51:
a2:de:41:2a:ff:6f:a9:c2:94:3e:e6:43:9f:e5:91:d7:8f:f1:
74:e3:54:e8:44:0b:d8:e6:79:05:4a:12:99:d1:70:99:9c:79:
55:69:3b:58:75:41:6d:41:64:59:85:b6:27:36:12:8d:e1:43:
89:ed:3b:35:df:1d:42:d1:f2:39:0c:72:c1:bb:d1:d8:5d:d7:
e7:d8:3e:cf:e8:7c:96:20:9b:3f:67:51:91:60:be:b8:9e:81:
11:b0:38:c8:80:14:39:ac:20:7d:e8:c1:63:e1:2f:fa:8b:04:
c4:3d:da:c0:ab:39:7c:c5:6c:0e:e7:5a:70:e3:88:40:2d:e8:
f2:7f:68:6a:8b:a2:09:cf:66:68:8a:01:fb:59:14:a0:a4:c5:
1c:1d:a6:df:b2:c1:2b:ee:81:33:98:89:da:79:7b:38:a8:14:
6d:45:63:79:e8:28:9c:af:58:16:e1:e4:00:48:4f:72:05:8b:
63:ee:f0:e5:38:f5:b1:3a:1c:b6:54:67:0b:28:1f:cb:77:ec:
1e:3e:eb:0f:ea:04:c1:fa:be:c0:ed:3b:27:fd:87:d3:19:50:
c1:f1:58:df:6a:69:af:49:cb:2c:4f:9e:71:96:03:a8:1c:74:
ad:b0:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org