Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h0ygWSzebIj6vveK7DUhwvqd8fQ.roa
File: h0ygWSzebIj6vveK7DUhwvqd8fQ.roa (raw, json)
Hash identifier: BJ/KrfEhthvXdmrqwYJShFlanLSQM6LtIeGZ+95zrLQ=
Subject key identifier: 87:4C:A0:59:2C:DE:6C:88:FA:BE:F7:8A:EC:35:21:C2:FA:9D:F1:F4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27E1
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h0ygWSzebIj6vveK7DUhwvqd8fQ.roa
Signing time: Fri 01 Sep 2023 10:04:40 +0000
ROA not before: Fri 01 Sep 2023 10:04:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10209 (0x27e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=874CA0592CDE6C88FABEF78AEC3521C2FA9DF1F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:7d:96:c0:b8:dd:18:b0:22:e5:64:b0:ab:
b2:48:c7:e2:6a:5a:64:1c:02:8c:8b:53:54:8a:23:
e6:ce:f9:09:f5:03:66:bd:7a:a9:61:95:fc:32:61:
6c:da:8b:91:5f:9f:35:0e:7a:ef:96:eb:ce:8d:06:
a2:51:c0:27:b1:f7:e4:57:20:0f:75:69:7e:44:c4:
ca:60:97:d4:74:84:0c:e3:90:6b:f8:ec:2e:d7:3e:
61:85:96:60:af:72:e9:c4:db:61:14:4d:ae:bf:c3:
aa:ec:77:7b:7c:95:6c:c0:8e:54:90:8f:da:33:9c:
5e:ec:a0:1d:14:16:cf:f9:27:fe:34:bd:24:f8:ff:
86:8f:87:9a:2f:4e:95:56:3d:b4:71:fd:89:46:8d:
82:1e:f0:e0:5e:4f:3b:95:37:0a:d8:2d:20:d1:c1:
10:df:4b:52:0b:e4:50:4c:64:8b:05:fd:c2:29:c6:
37:31:d7:44:91:05:53:96:75:b9:38:eb:20:ce:ee:
48:c2:f1:f7:63:22:b3:ae:05:92:72:3c:38:f2:52:
0a:29:46:c8:23:f7:09:07:ad:ad:fd:91:2d:8a:1b:
8c:47:c0:09:3c:8d:e3:f6:94:20:9d:bd:3a:1c:54:
6c:1a:43:d7:0a:c6:67:c5:41:5f:8b:20:b0:ec:63:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4C:A0:59:2C:DE:6C:88:FA:BE:F7:8A:EC:35:21:C2:FA:9D:F1:F4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/h0ygWSzebIj6vveK7DUhwvqd8fQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.84.0/22
Signature Algorithm: sha256WithRSAEncryption
07:7c:05:7a:60:cf:dc:b4:6f:90:2b:94:9d:f7:00:b7:bb:6a:
b7:79:6b:82:80:fa:aa:8d:85:3a:92:65:45:49:1c:f6:fd:25:
0f:b7:56:40:cb:53:d4:19:31:a6:4c:fc:44:e4:cd:ab:9b:89:
e0:06:0a:ae:a9:fa:f3:5b:e2:f5:1a:ce:74:e7:7a:27:a1:84:
7b:d2:fb:3a:cb:c4:43:94:06:f0:fa:b8:94:e0:e6:58:1e:67:
d8:f0:a1:da:2b:a4:a5:d5:6d:09:74:db:6a:51:36:66:ad:f5:
b1:26:b0:ea:ab:0b:e1:38:f1:20:cd:99:bf:aa:8f:c0:7c:11:
fd:90:80:82:6a:05:df:da:76:b9:dc:e7:29:a8:19:b1:f8:9f:
70:97:e5:60:1e:12:f2:f1:02:24:36:b9:31:d6:c9:77:a8:5d:
24:b8:31:ed:b7:89:64:a9:22:bf:31:0e:a8:da:ad:13:7f:f8:
a7:a6:1e:2b:06:b5:12:b3:34:bf:fb:9c:60:53:c2:65:61:57:
45:eb:d4:71:49:70:82:8b:e0:35:f7:8e:d5:33:49:1c:2d:3b:
09:22:dd:88:5e:19:61:9f:7f:98:1f:8c:9f:bd:ef:89:ff:1e:
0e:16:ef:c8:4d:0c:33:2f:ac:44:37:3b:8b:df:49:e8:21:9b:
d3:c6:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org