Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i7UZ2kOlw4EeDGVwagy9zRo9fXk.roa
File: i7UZ2kOlw4EeDGVwagy9zRo9fXk.roa (raw, json)
Hash identifier: anIx+rMkiJhKx+Td3xH0Qcbh/2M1aK75cjryaeY0qdI=
Subject key identifier: 8B:B5:19:DA:43:A5:C3:81:1E:0C:65:70:6A:0C:BD:CD:1A:3D:7D:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 299A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i7UZ2kOlw4EeDGVwagy9zRo9fXk.roa
Signing time: Fri 01 Sep 2023 10:06:48 +0000
ROA not before: Fri 01 Sep 2023 10:06:48 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10650 (0x299a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:48 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8BB519DA43A5C3811E0C65706A0CBDCD1A3D7D79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:03:c6:c3:88:aa:f9:16:85:8d:7d:64:69:90:
a3:de:1f:05:72:00:eb:40:cd:75:c8:68:1e:53:8f:
c5:9f:27:61:ed:fc:1c:d8:76:f7:9e:d0:a8:f9:1c:
75:2c:61:b7:d1:24:8d:21:d2:7e:83:da:96:67:66:
9c:43:30:a3:61:e2:ff:f3:b5:e5:2a:d8:60:c2:1c:
32:6f:fd:b3:cd:f6:b0:99:15:4a:72:86:37:72:f1:
8a:d8:f1:ff:60:14:a9:9a:13:b2:7c:a8:c3:39:38:
34:c3:7a:91:52:b8:3c:ff:47:7b:25:5c:54:bb:54:
ab:1b:b2:52:ac:2f:cb:35:ce:0c:9f:c0:9c:b4:90:
d7:f3:49:78:be:56:6d:23:78:74:1e:cc:9d:08:de:
54:be:f8:3c:ec:d2:2a:29:80:cf:92:cb:8a:83:3a:
28:12:2e:63:67:89:99:8c:81:d8:4b:4f:1c:1e:5b:
07:a3:34:4a:77:de:cc:fa:12:47:da:5c:37:8d:4c:
ba:d4:52:c1:95:86:b4:ea:fc:b9:d6:b8:6d:38:76:
17:df:21:a8:be:a8:a1:04:6a:a2:77:50:1a:c2:37:
24:98:9a:a5:2e:71:ef:9d:f3:a1:60:3e:16:e9:a2:
d9:47:84:6b:73:83:a6:80:ed:94:b2:55:fa:9b:f5:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B5:19:DA:43:A5:C3:81:1E:0C:65:70:6A:0C:BD:CD:1A:3D:7D:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i7UZ2kOlw4EeDGVwagy9zRo9fXk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.4.0/22
Signature Algorithm: sha256WithRSAEncryption
61:31:68:fb:07:eb:af:99:50:35:d3:c4:6a:d5:8c:88:02:15:
a2:55:3f:7b:c2:88:00:fb:f6:9a:3d:f8:17:2f:92:42:54:51:
e9:0b:a7:ca:f7:df:12:b4:14:ac:97:d3:31:64:3f:88:ab:dc:
7c:30:7b:d4:6a:84:ec:d1:c2:fa:99:40:b6:9a:0c:c2:33:6e:
05:c2:55:8e:a6:74:db:e6:46:a2:ef:a1:41:06:af:69:6f:31:
e1:65:3d:fd:45:d9:44:c9:1a:86:f2:f6:1a:92:b3:c6:e0:87:
74:c8:80:df:dc:0f:34:1b:1f:9b:f3:70:31:3f:a5:32:d2:de:
a7:29:0c:13:0e:65:b1:ea:b1:29:c7:db:4d:6c:0a:c9:52:32:
5d:31:de:21:fa:6d:64:91:2a:fa:2f:cc:a6:5d:ab:e7:ae:4a:
dd:ad:7f:b2:88:78:3f:0f:50:aa:d0:8c:2b:84:c7:68:76:98:
6b:89:93:ce:4e:35:7b:1d:f1:6e:60:98:23:f7:f8:2c:f3:cf:
e5:a6:f7:37:fc:6f:32:29:1c:6d:e8:31:86:73:23:8f:61:ee:
34:e7:16:06:c4:36:c7:f9:15:24:3e:f7:e0:c8:dc:09:ef:a9:
14:a8:d5:51:c7:7c:9b:e6:2c:6a:26:39:fe:ff:03:ef:c0:06:
14:e0:d0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org