Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gqWqJxMvRy0m1plPD2Dn4CfXMBU.roa
File: gqWqJxMvRy0m1plPD2Dn4CfXMBU.roa (raw, json)
Hash identifier: Or18RZWWE7EYs4kuyA1X4wgb/j2U8ENApAjReyRFrDA=
Subject key identifier: 82:A5:AA:27:13:2F:47:2D:26:D6:99:4F:0F:60:E7:E0:27:D7:30:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29B0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gqWqJxMvRy0m1plPD2Dn4CfXMBU.roa
Signing time: Fri 01 Sep 2023 10:06:56 +0000
ROA not before: Fri 01 Sep 2023 10:06:56 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10672 (0x29b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:56 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=82A5AA27132F472D26D6994F0F60E7E027D73015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:9b:8b:3e:50:a9:80:db:6c:3c:83:98:a4:
44:35:b7:65:37:f1:1b:8d:62:7e:59:74:28:39:3e:
21:21:fb:fd:60:90:45:1d:6c:6b:54:d3:f4:3b:f2:
cd:f0:20:75:86:50:cd:f0:3e:22:b2:f5:07:f7:75:
a1:0e:49:cf:f6:cc:ca:94:fa:62:59:17:c4:c5:1e:
b5:b9:6e:bd:7e:a6:18:d1:79:4c:8b:d4:6a:f7:89:
4d:30:82:95:a1:85:24:cf:66:b0:d7:39:33:5a:e2:
67:e4:6e:4e:50:18:99:ec:5f:7b:88:41:24:8b:2c:
fa:6e:54:9f:2c:c6:ad:3a:d4:17:f6:3e:b1:e6:cd:
58:d5:44:c6:25:64:7b:12:ee:6d:a7:60:e9:9e:bd:
fa:4a:32:44:c9:29:d5:ab:f1:54:28:7e:d9:00:41:
4c:3a:5f:43:57:b3:31:dc:4b:70:1c:fc:16:d2:f7:
a4:f4:92:98:ea:18:04:c5:85:eb:f6:99:71:73:32:
42:4f:ed:9a:74:8a:a0:bd:89:c0:d1:19:49:e0:ac:
67:6a:f6:71:82:c1:c9:58:4a:db:f0:a1:cc:d2:1d:
11:60:01:71:79:71:25:7d:84:11:7d:0e:90:00:6b:
b2:32:96:e6:42:dc:af:da:5f:3e:d3:11:23:8f:f1:
34:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A5:AA:27:13:2F:47:2D:26:D6:99:4F:0F:60:E7:E0:27:D7:30:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/gqWqJxMvRy0m1plPD2Dn4CfXMBU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:12:7c:fa:49:36:d7:ae:29:44:9b:38:c7:2b:32:dd:ef:e1:
03:bf:5c:b3:09:5d:1a:5c:da:61:96:52:b0:f0:39:59:e3:16:
f0:04:d1:bb:78:62:af:5b:5f:1a:23:07:df:64:07:1f:98:94:
24:6b:f6:7c:d1:b6:ca:a5:cb:25:21:ee:fe:4b:cb:87:07:07:
2b:d3:43:e7:c7:c0:c0:da:08:81:d9:a1:5e:5e:47:65:60:f9:
9b:0f:05:3b:b4:e8:2c:46:38:34:a8:ee:18:9a:ae:25:e6:35:
55:a7:64:e9:a8:b2:85:9b:bc:d2:e0:b9:97:f4:4b:a6:b6:8b:
a8:9c:96:e3:6f:ce:47:a1:02:ed:5d:a6:49:3c:4d:4b:4c:a7:
fa:09:79:6d:00:32:f0:d0:bd:b2:e4:1b:07:16:9a:ee:74:74:
e5:66:b5:0c:d3:d0:46:26:6c:ab:ba:53:2a:86:d8:e3:9c:a8:
bc:3f:18:7a:b5:44:d2:5f:69:51:87:ed:15:71:95:eb:cd:86:
91:c8:d6:21:8f:08:d2:d4:cc:a3:17:0b:da:21:64:f4:a6:0f:
9b:bf:27:c2:27:74:0e:4a:6a:f7:22:c5:d6:2a:0a:c4:d1:a7:
b7:85:38:d8:8d:b1:b3:ce:5c:55:89:71:29:dd:83:a7:3a:3c:
c4:c4:bd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org