Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i4L12sNWtt1IEwPUbzoK4p5vrXg.roa
File: i4L12sNWtt1IEwPUbzoK4p5vrXg.roa (raw, json)
Hash identifier: PeiTMrnpfl77prmYlYunFTY5CAgnXKIKEdWoQKwhPjI=
Subject key identifier: 8B:82:F5:DA:C3:56:B6:DD:48:13:03:D4:6F:3A:0A:E2:9E:6F:AD:78
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i4L12sNWtt1IEwPUbzoK4p5vrXg.roa
Signing time: Fri 01 Sep 2023 10:07:06 +0000
ROA not before: Fri 01 Sep 2023 10:07:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10703 (0x29cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8B82F5DAC356B6DD481303D46F3A0AE29E6FAD78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:09:53:2b:cd:31:6a:df:00:88:d1:73:64:
03:66:38:f3:9f:52:57:a3:51:2a:2d:3f:f0:13:ac:
f1:d1:87:24:30:59:4e:ec:0f:f6:2b:45:eb:c3:9b:
03:a8:2f:f7:b1:19:8e:b6:c7:75:7a:44:8f:e7:d3:
ef:22:7d:44:c2:6c:e1:ec:68:c4:57:07:0d:77:3c:
4d:de:1d:56:9b:0f:49:06:12:97:8e:fc:42:a4:9c:
31:22:e3:12:f0:ff:e0:1e:8d:dc:07:0d:7d:70:55:
af:24:24:4a:34:63:20:6f:1b:e5:2c:85:c0:6e:eb:
14:3f:d4:85:68:3f:0e:a0:6f:5a:d5:c3:69:a5:1c:
12:4e:8a:c1:1a:26:a9:62:84:d5:a7:2d:37:84:8a:
c5:61:6b:b4:26:61:5f:51:c0:43:4e:fd:b4:c1:44:
b7:5c:0b:c8:e8:1d:32:5a:bc:36:ba:f1:e6:fe:39:
28:aa:12:f5:79:dc:a8:de:81:90:64:64:3e:a7:db:
c2:61:1a:bd:ee:29:c0:28:7c:bf:db:6f:c8:90:5f:
a6:b3:dc:87:d4:93:26:d4:f3:a7:66:8e:c6:3c:ce:
88:4f:58:38:2f:55:fe:01:2f:88:d3:14:71:10:a8:
69:9e:54:90:67:9d:6c:ad:8c:53:c7:c7:da:0a:f5:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:82:F5:DA:C3:56:B6:DD:48:13:03:D4:6F:3A:0A:E2:9E:6F:AD:78
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i4L12sNWtt1IEwPUbzoK4p5vrXg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/22
Signature Algorithm: sha256WithRSAEncryption
16:8c:b9:1e:68:7f:fb:06:69:3e:eb:5c:9e:37:4b:f3:6c:8c:
0f:20:1d:46:45:d7:2b:82:e6:0e:52:69:b2:39:0e:cd:55:d1:
93:a3:68:16:59:68:20:61:b4:fa:45:32:28:d9:84:d8:a7:2d:
c2:98:2b:13:0d:df:44:b2:97:9a:2d:e2:89:29:e0:72:bf:e4:
e5:3e:4d:9c:64:a4:e7:42:bd:72:fe:97:10:11:bc:fb:4c:fb:
58:72:7a:23:bb:4f:ee:f4:3b:38:1c:ec:f4:26:15:11:6e:05:
9c:39:95:74:c6:23:73:c4:bb:38:56:25:fe:0c:9d:9e:32:b5:
4a:00:71:e5:ca:62:f1:62:72:70:1e:f8:fc:9a:d3:cc:16:ea:
fc:6f:8b:78:f1:89:cd:4c:9b:91:60:66:3d:6e:dd:42:1f:48:
81:cb:7f:2e:e3:e5:c7:4e:95:5b:ee:43:b2:4e:20:52:89:1d:
44:5b:4d:82:d3:d7:09:93:cd:d7:bf:b5:e0:f0:ea:89:81:1d:
40:91:ec:99:de:9a:4d:92:4d:10:59:d9:e5:79:2f:5a:8a:e0:
68:da:eb:00:55:20:75:48:f1:c1:c7:5a:bc:7a:b0:6c:93:22:
19:7b:1c:03:06:d0:52:5d:43:c7:4a:6d:a1:c8:51:7a:32:73:
c2:01:39:09
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKc8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhCODJGNURBQzM1NkI2
REQ0ODEzMDNENDZGM0EwQUUyOUU2RkFENzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdvglTK80xat8AiNFzZANmOPOfUlejUSotP/ATrPHRhyQwWU7s
D/YrRevDmwOoL/exGY62x3V6RI/n0+8ifUTCbOHsaMRXBw13PE3eHVabD0kGEpeO
/EKknDEi4xLw/+AejdwHDX1wVa8kJEo0YyBvG+UshcBu6xQ/1IVoPw6gb1rVw2ml
HBJOisEaJqlihNWnLTeEisVha7QmYV9RwENO/bTBRLdcC8joHTJavDa68eb+OSiq
EvV53KjegZBkZD6n28JhGr3uKcAofL/bb8iQX6az3IfUkybU86dmjsY8zohPWDgv
Vf4BL4jTFHEQqGmeVJBnnWytjFPHx9oK9RbtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUi4L12sNWtt1IEwPUbzoK4p5vrXgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2k0TDEyc05XdHQxSUV3UFVi
em9LNHA1dnJYZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w6AwDQYJKoZIhvcNAQELBQADggEBABaMuR5of/sGaT7rXJ43S/NsjA8gHUZF1yuC
5g5SabI5Ds1V0ZOjaBZZaCBhtPpFMijZhNinLcKYKxMN30Syl5ot4okp4HK/5OU+
TZxkpOdCvXL+lxARvPtM+1hyeiO7T+70Ozgc7PQmFRFuBZw5lXTGI3PEuzhWJf4M
nZ4ytUoAceXKYvFicnAe+Pya08wW6vxvi3jxic1Mm5FgZj1u3UIfSIHLfy7j5cdO
lVvuQ7JOIFKJHURbTYLT1wmTzde/teDw6omBHUCR7Jnemk2STRBZ2eV5L1qK4Gja
6wBVIHVI8cHHWrx6sGyTIhl7HAMG0FJdQ8dKbaHIUXoyc8IBOQk=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org