Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hTaBEX7pcA6UG-XnzyjO4x_JBuQ.roa
File: hTaBEX7pcA6UG-XnzyjO4x_JBuQ.roa (raw, json)
Hash identifier: SvYW5kcdPQnPsD3HQA0OscvNbuHgMjNff+yRe81vzZw=
Subject key identifier: 85:36:81:11:7E:E9:70:0E:94:1B:E5:E7:CF:28:CE:E3:1F:C9:06:E4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28F0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hTaBEX7pcA6UG-XnzyjO4x_JBuQ.roa
Signing time: Fri 01 Sep 2023 10:05:57 +0000
ROA not before: Fri 01 Sep 2023 10:05:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.111.192/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10480 (0x28f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=853681117EE9700E941BE5E7CF28CEE31FC906E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:75:20:f7:63:1c:18:dc:8c:3d:d6:51:5e:
a4:3c:05:0b:aa:72:50:97:b1:5e:e9:b7:c3:bf:a3:
5c:9e:0d:d7:c2:36:5e:e3:52:2b:74:bd:a9:05:76:
d2:0b:d6:f2:3e:3c:88:88:86:30:25:06:0e:26:02:
b9:c0:32:bf:5c:ed:09:51:27:ea:6d:42:ce:79:6d:
07:71:5a:64:7b:a8:4e:2c:94:f6:24:ef:9d:e7:7d:
72:f2:80:37:0f:0d:f3:35:93:93:04:59:e1:c6:83:
c3:14:01:35:f8:79:26:53:a6:85:7c:56:db:a0:71:
fa:42:a1:dc:fd:fe:e4:76:74:15:4c:6e:69:6d:65:
6f:55:f9:20:19:fa:18:c1:0a:e0:0f:b0:62:6a:05:
2c:c6:74:c8:31:84:a5:96:de:05:14:c1:45:66:00:
3d:f6:b8:ec:a6:c2:e7:74:01:35:cf:83:d8:27:54:
5a:06:01:9a:d0:d7:19:20:1f:f0:a7:ba:5e:ab:2c:
87:e9:53:3b:38:66:6e:e3:13:fd:81:65:65:da:6d:
0d:55:10:3f:2b:c4:a6:da:60:12:35:96:1d:5f:d7:
3a:0c:03:0f:47:bf:9a:c9:aa:73:2e:10:82:aa:46:
80:70:ce:dd:6b:6c:14:07:0e:cd:2e:ee:28:ad:0e:
5a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:36:81:11:7E:E9:70:0E:94:1B:E5:E7:CF:28:CE:E3:1F:C9:06:E4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/hTaBEX7pcA6UG-XnzyjO4x_JBuQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.111.192/28
Signature Algorithm: sha256WithRSAEncryption
1e:6a:f0:df:46:fa:4d:89:c7:63:98:76:08:88:ba:d7:9a:91:
46:f7:be:32:08:91:8b:b6:4a:2a:c4:f2:51:dc:f6:80:70:34:
61:bc:28:d4:10:13:97:c4:94:80:8b:f9:d1:28:48:dd:b8:30:
61:c5:d5:19:39:40:52:73:d5:02:70:05:e9:59:13:8d:29:36:
d9:8d:1a:f7:6f:d8:0b:53:a2:66:a5:14:67:b7:0a:8e:04:86:
7e:0f:ca:78:ba:b6:8f:a9:22:85:54:3e:f2:cd:45:1e:be:80:
70:96:6d:5d:bf:ce:f7:7b:ec:40:12:4a:67:be:a8:42:66:2c:
72:d4:8c:5b:44:96:9c:90:62:df:66:f5:ce:41:85:ed:8f:8b:
97:0f:e5:9c:fa:b1:5f:05:6a:3f:61:1c:f6:e7:ba:a7:05:0d:
48:34:fa:a2:7c:73:d2:03:31:21:0e:df:eb:11:a1:13:9e:42:
7f:f9:33:50:63:81:70:0e:b5:fd:0d:37:51:dc:57:90:45:28:
37:13:c1:8c:e9:7f:cf:b7:90:c6:c7:7d:01:fc:62:9c:3c:c0:
e9:03:8d:0e:af:2e:cc:44:9d:5f:ef:1c:f0:b2:27:ab:ee:bd:
7a:ee:87:f1:13:ad:8e:19:05:67:62:62:cd:c6:62:fe:9a:53:
63:47:cb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org