Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gak7buTsn7MzOnMy0dyicftxvIU.roa
File: gak7buTsn7MzOnMy0dyicftxvIU.roa (raw, json)
Hash identifier: gZBcbOUnbnI/w+AXBbTNFVTYkwT22cm0BTWhtsmYKtQ=
Subject key identifier: 81:A9:3B:6E:E4:EC:9F:B3:33:3A:73:32:D1:DC:A2:71:FB:71:BC:85
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2896
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gak7buTsn7MzOnMy0dyicftxvIU.roa
Signing time: Fri 01 Sep 2023 10:05:32 +0000
ROA not before: Fri 01 Sep 2023 10:05:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.16.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10390 (0x2896)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=81A93B6EE4EC9FB3333A7332D1DCA271FB71BC85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:36:e2:47:f6:3d:2b:f8:22:5d:3d:94:a4:
a6:b6:a8:4e:fa:89:e3:2f:03:c4:98:f8:17:9c:40:
54:4c:7d:ea:a0:af:dd:07:c7:b4:fd:0b:34:4e:46:
20:7d:59:9d:61:ae:ca:a2:be:b3:63:5b:7b:23:d2:
b6:d1:01:cf:93:8b:8d:e1:69:5f:b7:4c:6d:fe:fb:
b7:1c:de:04:8f:31:7a:0a:0d:f8:71:c4:fc:ec:53:
c0:b0:0e:f6:88:5f:30:51:33:35:87:a8:37:f0:e0:
a9:d5:79:67:4d:0b:09:6c:e8:ae:72:37:ce:22:f1:
78:4b:ba:8f:42:1c:be:90:4e:24:b2:b7:26:4f:1d:
c2:e1:7a:8b:ea:a0:0c:33:aa:f7:38:7f:e5:6b:a6:
87:59:61:f2:64:87:92:a0:c8:27:1f:d3:3c:88:d7:
4e:fb:8b:6e:e0:75:00:a4:f2:bd:0a:09:83:b5:a8:
51:d9:83:09:4e:79:86:b1:81:09:54:67:7a:58:ba:
80:f2:f2:d9:11:5d:47:3d:d7:ed:98:40:18:c2:6f:
ea:0f:98:49:8e:9d:a6:62:92:ac:9e:25:20:11:0d:
3c:6f:ba:dc:5f:20:c5:31:1d:06:07:b5:39:ad:f8:
45:75:7b:a4:0f:9f:f2:38:82:56:a8:3a:66:58:11:
96:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A9:3B:6E:E4:EC:9F:B3:33:3A:73:32:D1:DC:A2:71:FB:71:BC:85
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gak7buTsn7MzOnMy0dyicftxvIU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:3c:0c:be:55:11:5b:3c:5d:22:5e:41:db:10:ad:92:06:4f:
8f:09:84:8b:a6:ae:ec:e6:04:e5:0e:31:4e:ba:77:a8:86:07:
e3:f9:3c:4a:31:81:f6:ec:59:00:90:d2:21:d7:14:23:eb:0f:
4b:9f:dc:a3:75:8a:b0:f3:32:de:ce:32:95:df:c0:3f:65:c6:
59:b2:98:d3:26:90:c2:06:2a:60:e6:bb:be:14:c0:f4:ec:7a:
2d:ef:b5:8e:27:bf:d1:45:49:cc:73:2b:98:f5:2e:1b:c4:f5:
e8:da:8e:ba:81:61:31:8f:0d:db:5e:04:ca:ce:5f:1a:1d:eb:
14:f8:7f:0a:82:cb:5a:82:8a:ac:46:83:29:40:d5:78:c6:d7:
91:9c:75:b3:66:84:46:c1:34:5c:8c:1c:0d:ae:89:f8:ba:fd:
d5:55:11:a3:f3:0a:2a:7b:19:a5:b9:d5:8f:86:a9:2e:0d:02:
a5:e0:5b:95:54:81:8f:45:38:86:98:70:ad:3a:1c:72:e0:f1:
e6:9b:cf:f5:65:be:4d:d6:80:e4:db:90:fd:91:40:58:a6:f2:
c9:45:95:02:6c:a4:2b:27:47:af:e7:30:b3:0a:36:20:62:1f:
56:c7:34:ef:b0:4c:f7:11:a5:1f:e4:81:5f:a9:ed:c8:86:b5:
d9:ec:1a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org