Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJyoLPt6wFj1r8AAHTY8aOdXJoo.roa
File: eJyoLPt6wFj1r8AAHTY8aOdXJoo.roa (raw, json)
Hash identifier: 2mAurnp/tR1o3HUxCKRrgYgxnbCtEBJZpywaTAae8aY=
Subject key identifier: 78:9C:A8:2C:FB:7A:C0:58:F5:AF:C0:00:1D:36:3C:68:E7:57:26:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2991
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJyoLPt6wFj1r8AAHTY8aOdXJoo.roa
Signing time: Fri 01 Sep 2023 10:06:46 +0000
ROA not before: Fri 01 Sep 2023 10:06:46 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 211.76.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10641 (0x2991)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:46 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=789CA82CFB7AC058F5AFC0001D363C68E757268A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:c1:73:ca:d8:68:60:2c:2c:33:ba:de:9d:
6d:85:2d:01:8f:a7:7f:86:b2:7e:3e:65:66:f7:74:
5f:ca:26:4e:e7:03:f7:fe:b9:9c:6c:7d:4c:69:df:
41:7c:40:3e:d4:a4:c1:19:03:79:52:e1:45:69:6f:
a3:71:55:40:cb:3b:32:81:16:5b:3f:d3:87:b0:a8:
77:e0:c9:23:30:19:3b:b3:81:dc:34:ef:9a:36:84:
1c:99:8e:7c:18:8c:2a:5f:4d:63:cb:bf:9a:66:9b:
63:f9:e9:96:a2:85:dd:28:6c:57:07:c1:4d:f3:2f:
f3:6a:6a:d0:3d:a7:3d:b7:27:30:00:65:99:a2:4c:
40:64:13:c8:3b:df:7b:1e:7b:3a:bd:72:21:8a:6d:
da:74:70:33:58:1c:f3:f2:98:cb:86:0d:7c:80:8e:
ac:8e:64:f8:de:75:ba:c9:ec:08:d8:9d:6f:7f:6f:
b9:ef:b3:c1:03:ea:8a:16:0b:78:56:6b:44:46:40:
0e:45:5b:d7:52:a9:e4:08:d4:75:4c:22:b4:d5:1e:
9f:bd:25:75:33:b9:16:f4:04:e2:49:43:6d:11:f9:
0d:65:58:dd:11:56:58:b1:8a:78:3f:2a:d3:15:ec:
31:39:cd:55:f3:ea:a3:4a:e0:a7:89:cc:14:1c:bf:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:9C:A8:2C:FB:7A:C0:58:F5:AF:C0:00:1D:36:3C:68:E7:57:26:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/eJyoLPt6wFj1r8AAHTY8aOdXJoo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.123.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6e:54:04:51:d9:68:12:37:ee:a4:22:32:de:59:1c:15:3f:
2e:e1:04:40:e4:81:b6:94:93:1a:df:e9:ad:0e:ee:dd:d9:7e:
5b:b4:5a:95:05:9c:97:6e:b7:5c:1b:11:b9:ad:37:bc:f1:02:
de:00:85:dc:d3:6b:52:98:e7:5e:32:ea:94:33:2d:12:3f:b6:
15:8d:c3:53:c1:8b:e5:13:dc:6c:33:33:9f:a1:31:f5:b2:a9:
49:61:d6:c0:86:7a:70:66:37:cb:38:e9:67:15:9a:5a:17:12:
e1:31:33:dd:4d:c6:b6:15:3d:85:6d:b2:b7:6e:5b:1b:b8:95:
2d:e0:5d:a6:0d:e8:01:bd:4b:b0:5e:74:5e:83:9c:83:1f:e2:
e8:c8:eb:85:7f:f2:a8:a1:b3:ce:39:6a:58:42:04:df:0f:26:
e4:61:6f:f4:27:93:6e:18:0d:46:4b:9f:63:47:75:14:dc:16:
d9:ab:97:42:66:c5:54:82:c5:aa:bc:39:0a:68:ec:e7:f5:b9:
cc:1b:29:ca:2a:26:eb:e0:95:b9:29:84:b9:b0:ba:cf:ce:f3:
ed:52:de:d1:23:02:38:18:db:00:dd:05:d2:70:4a:7e:9a:a5:
5b:e1:ef:88:93:e0:0b:90:5a:bd:ae:92:b6:69:61:55:c3:02:
f4:46:10:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org