Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7wjluwNXYRR88ykN9FPJTHh-3U.roa
File: f7wjluwNXYRR88ykN9FPJTHh-3U.roa (raw, json)
Hash identifier: i8S48SUftBpR61i3KlP+jKEy+H1hf7aSZ/r+ZqkGuHA=
Subject key identifier: 7F:BC:23:96:EC:0D:5D:84:51:F3:CC:A4:37:D1:4F:25:31:E1:FB:75
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28BF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7wjluwNXYRR88ykN9FPJTHh-3U.roa
Signing time: Fri 01 Sep 2023 10:05:43 +0000
ROA not before: Fri 01 Sep 2023 10:05:43 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.236.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10431 (0x28bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:43 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7FBC2396EC0D5D8451F3CCA437D14F2531E1FB75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:3e:60:5b:13:22:b9:a7:96:c6:35:71:00:
57:14:a8:87:de:14:89:e0:f5:55:da:41:70:a5:2e:
1e:be:59:1d:b0:84:fe:1a:02:8f:30:e3:de:09:86:
16:c0:fc:fd:95:01:ab:a8:bc:e9:48:bd:e3:fb:1c:
f3:02:ce:ab:01:33:39:99:08:b4:36:cb:91:b6:c3:
55:c3:01:fc:a9:14:50:82:d6:d9:d2:fa:30:b1:d8:
66:2f:5f:22:eb:8e:59:b4:8d:00:57:0e:42:31:dc:
93:55:a2:97:fe:bf:2d:bc:c4:83:88:6c:24:80:c5:
e3:60:2b:ec:65:eb:10:e6:9c:2c:a7:f1:de:66:a7:
a3:41:0e:ed:11:a5:db:cd:9d:39:0d:6f:c0:b1:fd:
13:08:65:5d:81:83:50:b6:c2:7e:6f:c9:d4:f5:c6:
ec:ee:77:ae:95:a5:3c:68:3b:59:62:1f:da:de:89:
13:47:75:86:04:57:26:b8:f5:4e:3c:5d:3e:05:88:
4d:e7:19:bb:a7:eb:1f:2c:e0:a7:d3:14:1d:13:9c:
01:63:8e:ee:5c:cb:e1:28:5d:3a:e4:e9:a2:c5:53:
7f:94:3f:53:c6:6e:88:d4:29:e3:51:ee:50:c2:a0:
a9:dd:fa:f6:2d:a0:e5:bf:d7:75:65:07:64:33:be:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BC:23:96:EC:0D:5D:84:51:F3:CC:A4:37:D1:4F:25:31:E1:FB:75
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/f7wjluwNXYRR88ykN9FPJTHh-3U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.236.128/25
Signature Algorithm: sha256WithRSAEncryption
05:b8:33:9a:64:e3:cf:2e:4c:55:fe:b5:e8:3f:27:24:f7:07:
2f:a9:3b:aa:bc:03:cb:8e:13:1f:96:ca:73:b5:84:eb:50:64:
ce:c3:33:95:bb:cb:33:e6:0d:f0:bd:eb:8b:97:60:d3:73:a9:
59:18:cb:08:71:48:29:80:08:c7:1e:01:57:f3:87:4d:c4:15:
52:6e:7c:b3:97:9d:53:8e:75:f2:54:45:3a:03:30:59:35:d0:
69:b2:3c:9e:42:6b:88:7f:67:fe:ba:2e:f1:ba:d9:3d:46:5b:
dd:25:b0:62:43:7c:72:9b:c1:2d:82:d5:83:33:e0:6f:ba:51:
1c:56:82:f1:3f:1d:22:f2:d1:18:ec:38:55:c3:3a:19:a3:5c:
ca:3c:29:46:fd:dc:18:ab:b5:b5:97:dd:89:c0:8d:c8:35:c5:
74:f7:63:19:cf:17:d2:7e:f3:34:88:6e:21:f3:fa:fa:d3:0d:
db:ff:70:31:be:e2:37:22:dd:8d:0a:5e:bf:7a:0f:4c:e9:2f:
3e:33:00:a2:e6:d0:0b:6c:4d:b6:35:dc:92:00:71:ac:de:b2:
ed:bb:54:66:2a:60:17:24:17:36:8c:c5:1f:5c:42:81:42:ec:
df:f5:ca:bb:5b:d7:f6:1c:b6:77:be:e4:0c:91:ca:f8:f2:61:
7d:41:25:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org