Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dAQkUQz2sioFPxI1nINB8NIvfm0.roa
File: dAQkUQz2sioFPxI1nINB8NIvfm0.roa (raw, json)
Hash identifier: Dq0tqMqc/jo5HmuodiF5pX/I0m0605LVXMXLuPLQa58=
Subject key identifier: 74:04:24:51:0C:F6:B2:2A:05:3F:12:35:9C:83:41:F0:D2:2F:7E:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2964
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dAQkUQz2sioFPxI1nINB8NIvfm0.roa
Signing time: Fri 01 Sep 2023 10:06:27 +0000
ROA not before: Fri 01 Sep 2023 10:06:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.32.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10596 (0x2964)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=740424510CF6B22A053F12359C8341F0D22F7E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:db:ac:05:3b:ed:a3:7b:97:4b:0b:66:3d:e6:
ff:cf:df:d4:dd:86:17:60:78:9e:0e:87:a5:ae:78:
9c:02:00:90:ba:17:6e:a0:ec:4f:26:c3:d2:3a:ed:
d5:38:38:a0:d7:bb:b9:99:8f:45:6f:63:f6:f2:93:
0c:f9:70:76:75:05:59:ef:bb:1e:3c:6d:1c:c2:bf:
13:6a:99:23:7b:12:d4:9e:85:ac:7f:38:b4:ab:db:
1f:dd:de:09:32:3a:9e:6e:4a:11:0d:08:5c:99:3f:
58:4b:3a:0d:86:a6:aa:b4:77:7f:55:cc:50:d4:0e:
a7:e8:c7:7a:40:7d:e3:c2:80:ca:ed:b7:ba:1c:e2:
2b:99:46:0e:00:0d:fb:7c:87:00:d5:d5:3e:eb:38:
5b:9f:59:47:33:f6:4a:e8:c9:e8:4b:c2:a3:f3:40:
6c:c1:b9:17:d4:a5:37:25:e9:83:17:ff:cf:e4:e2:
c1:a3:4c:a3:92:b8:17:8d:a8:ae:50:af:99:ed:fa:
8f:83:24:c9:b4:69:30:bb:ea:14:2c:77:48:02:2c:
3e:37:22:0a:fe:41:d3:b2:41:a9:1b:fb:1a:68:ef:
53:2f:74:33:a2:e0:c8:78:c1:9a:e3:a4:a3:38:74:
a5:c6:3f:cd:6e:65:69:6f:87:c9:c5:94:62:3b:55:
a7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:04:24:51:0C:F6:B2:2A:05:3F:12:35:9C:83:41:F0:D2:2F:7E:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/dAQkUQz2sioFPxI1nINB8NIvfm0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.32.0/21
Signature Algorithm: sha256WithRSAEncryption
5d:f7:d9:2f:25:fa:af:f2:09:1a:d9:2f:81:3d:db:09:4c:b2:
0f:ba:70:f5:e0:b8:c3:bf:35:14:4d:61:91:68:75:58:7c:0f:
f2:07:fb:65:98:94:7e:b4:ad:ae:f0:60:75:f0:ae:21:33:5c:
bb:f0:d0:15:56:86:40:da:1c:e5:08:b3:50:de:5b:cc:98:80:
74:e9:46:1e:5e:e4:30:24:4a:82:c3:b3:e2:52:a7:92:d5:a1:
4a:7c:f5:5f:73:50:79:32:6a:ef:c1:df:a9:5e:dc:e1:26:e0:
ee:b5:38:9a:62:e4:7d:9c:97:3a:c3:cd:37:72:a9:2c:a6:5e:
12:ae:e3:9f:cd:5f:a5:a2:9d:b7:64:fc:5a:ab:b6:4f:1a:c6:
b9:ca:7d:6c:f1:63:88:95:26:53:db:e7:e5:0a:03:d4:08:62:
56:f2:82:fb:e7:60:d4:ca:2b:4e:61:66:b9:1d:3a:4c:76:30:
41:b8:62:2f:3e:2b:fb:60:4c:da:f9:4e:d0:8f:6f:c6:ca:85:
5d:e2:5b:b5:ac:90:00:f2:58:4c:cb:36:ae:42:ea:0c:cf:00:
d9:8c:95:18:34:57:d8:9d:74:4f:4f:f3:4e:7d:df:c9:0e:bd:
ef:a6:65:b4:ad:26:bc:2f:ca:ca:42:7f:44:f0:7c:73:5d:ae:
79:46:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org