Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hQP4v1BZGNpe8e6zIXM3RTvZ0rU.roa
File: hQP4v1BZGNpe8e6zIXM3RTvZ0rU.roa (raw, json)
Hash identifier: wdGooBt2YOANh+Py6je86u6JAsS8WuBIlUwWamuBqSM=
Subject key identifier: 85:03:F8:BF:50:59:18:DA:5E:F1:EE:B3:21:73:37:45:3B:D9:D2:B5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29EC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hQP4v1BZGNpe8e6zIXM3RTvZ0rU.roa
Signing time: Fri 01 Sep 2023 10:07:15 +0000
ROA not before: Fri 01 Sep 2023 10:07:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.0.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10732 (0x29ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8503F8BF505918DA5EF1EEB3217337453BD9D2B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:da:a0:d4:3e:49:41:b1:d0:8d:b6:ca:19:
49:9f:80:c6:8a:d3:da:24:de:28:8a:34:d7:ea:cc:
98:ae:62:47:3e:f1:fd:f7:52:ef:a8:f9:66:9c:4b:
58:18:94:ac:d9:51:64:3f:4a:8c:16:18:f8:d5:d1:
ad:d8:7a:70:65:a2:51:85:91:c5:13:4a:04:c1:06:
e5:dd:f2:58:5e:c7:cd:bc:22:2d:03:eb:8e:23:3a:
93:49:43:e4:72:dc:6a:9b:4b:8c:4d:11:03:7a:76:
e6:59:80:47:6f:6f:ca:b7:8d:51:5d:6f:61:91:e8:
b0:8d:59:68:5c:f3:c6:61:3c:f4:d9:91:7e:5d:16:
4d:68:5b:f5:d1:6d:88:a3:f2:85:f4:01:41:79:0a:
d3:56:5a:54:13:ac:57:8c:b2:55:68:8e:e5:50:23:
46:e8:0b:81:43:75:25:54:15:14:49:c4:e4:0f:84:
9f:d1:06:d5:b8:1d:61:2f:b6:66:b9:14:d3:44:96:
95:e4:a5:09:ef:70:c5:a0:ce:dc:5a:e2:5b:3a:e9:
59:67:49:7e:9d:a9:bd:5b:98:4c:92:9c:85:5d:15:
41:fd:ae:ad:02:bf:5a:7c:90:f5:9d:02:ca:42:0b:
cd:3f:1b:41:61:7c:08:1e:2d:45:da:13:72:26:97:
28:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:03:F8:BF:50:59:18:DA:5E:F1:EE:B3:21:73:37:45:3B:D9:D2:B5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hQP4v1BZGNpe8e6zIXM3RTvZ0rU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:c6:fc:b2:7a:ff:ca:1d:01:7e:86:e4:b8:8e:5c:00:b2:89:
4a:ac:e4:cc:b1:d0:8f:9d:1e:7d:02:08:94:ba:8c:e3:9c:ea:
41:1d:62:bf:76:28:63:6f:7a:25:af:bd:0a:a5:9a:2e:2e:e6:
04:4a:31:aa:20:8c:90:5e:06:d4:0f:2a:b9:f2:a0:16:7a:33:
84:c1:f8:41:ed:1b:29:50:4e:c7:1d:dd:e0:81:a2:a1:84:bc:
0b:95:56:c2:15:53:6f:55:73:89:d4:7e:9e:d1:24:7f:7f:16:
c1:a0:28:e8:de:4d:28:f3:39:24:a9:f0:63:b2:8a:dc:7b:d6:
a5:db:c2:1c:fe:b3:50:71:72:2b:52:4c:33:66:5b:f0:59:5a:
6d:07:8d:ac:0d:96:6c:57:35:d8:17:85:8e:7d:46:8a:b2:05:
42:73:25:b4:a2:27:e8:51:9d:c3:5a:b5:c2:7f:44:d6:71:67:
7a:46:9b:80:47:b1:cd:52:a0:59:b8:b3:e9:49:ce:6e:84:ab:
a1:37:2a:4e:58:74:e6:af:a5:52:ac:46:34:20:49:ac:94:f4:
68:72:4d:c1:16:d0:9e:24:69:07:a0:47:2b:23:13:60:2a:a8:
d0:6d:94:90:cf:b0:39:9f:64:a4:80:b9:82:e9:0c:17:8c:e7:
fc:d7:8b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org