Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iQdZW7cv1WnWDahK7pEm_EcV7KQ.roa
File: iQdZW7cv1WnWDahK7pEm_EcV7KQ.roa (raw, json)
Hash identifier: 17WLtzTY539egL1YCWkE3PsorJHS2K7wDGJktTOjsNY=
Subject key identifier: 89:07:59:5B:B7:2F:D5:69:D6:0D:A8:4A:EE:91:26:FC:47:15:EC:A4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2879
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iQdZW7cv1WnWDahK7pEm_EcV7KQ.roa
Signing time: Fri 01 Sep 2023 10:05:23 +0000
ROA not before: Fri 01 Sep 2023 10:05:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10361 (0x2879)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8907595BB72FD569D60DA84AEE9126FC4715ECA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:89:35:45:72:03:73:c4:8e:75:26:7e:53:06:
bb:1f:e9:90:47:e5:2a:58:8b:f6:d6:3e:36:58:3d:
a0:2e:9e:b1:f1:14:4d:bb:1b:57:00:ae:52:b5:22:
4c:72:52:cf:50:c2:76:72:f7:72:45:0a:a4:26:44:
0d:3e:ec:63:13:96:2f:d1:07:6f:7e:ba:ce:26:61:
4d:7f:aa:9e:0f:3f:96:db:08:75:39:dc:b5:b2:2a:
cd:86:38:fc:f8:7c:59:a7:34:31:18:35:2e:68:0d:
b3:1f:22:ac:6a:50:c6:91:0b:5a:01:f0:fe:f9:ff:
b7:db:93:1a:88:e9:b5:ea:15:09:24:ee:5f:0b:54:
b4:27:20:da:6b:0e:7c:fa:62:fa:cd:5a:65:ef:06:
0b:76:99:63:87:dd:c3:05:79:c8:55:6c:d9:d9:8c:
4c:17:f0:ad:60:35:96:35:2c:cc:6a:35:bb:25:56:
75:1d:08:9b:94:1b:34:a3:21:73:1a:81:f1:82:e3:
d3:d5:f6:76:49:7f:bd:52:e3:52:90:e6:a6:be:fa:
9e:6b:29:9d:85:a7:5c:1a:72:a5:81:b0:5a:db:30:
41:07:4c:bf:f1:81:83:02:a1:26:51:e0:68:bd:8d:
1b:4b:f4:0b:41:aa:55:59:35:1f:f2:40:68:aa:00:
5a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:07:59:5B:B7:2F:D5:69:D6:0D:A8:4A:EE:91:26:FC:47:15:EC:A4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iQdZW7cv1WnWDahK7pEm_EcV7KQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.152.0/21
Signature Algorithm: sha256WithRSAEncryption
b2:eb:44:2c:f3:71:2b:1e:02:be:4b:7d:6f:04:4c:03:13:49:
d7:3e:79:96:2b:ab:80:d4:19:2d:16:3c:96:a8:cc:d5:f3:20:
2d:9f:87:63:7d:a4:e8:c0:41:c2:0b:ec:11:da:0d:20:7b:55:
a5:00:6e:1f:e7:f8:7a:ad:f8:52:66:78:57:15:d0:64:8c:2b:
fa:2c:07:32:b6:41:5f:3a:79:45:d8:0c:b5:17:40:63:53:81:
48:bb:0d:3a:93:d3:5f:07:f9:9a:dd:5b:6e:45:4e:0b:72:4b:
fb:ed:65:03:a7:5a:e4:25:dd:99:54:b4:22:b1:a8:10:85:f5:
0e:2e:ec:03:d3:a7:a8:e8:65:bc:31:4c:b6:1d:dd:b8:b5:ae:
ec:90:7c:26:76:ae:89:b3:56:32:81:72:b2:3a:52:d9:a0:17:
33:cb:fc:c0:f2:5e:16:4f:7f:9b:a8:83:22:ca:39:10:1b:25:
2f:08:55:91:c9:ce:88:f5:32:d1:88:9a:9f:d4:45:bd:72:c4:
df:d3:d7:0b:30:96:60:ed:16:94:86:60:4f:c8:2e:59:7b:f5:
49:4d:30:7a:2f:51:06:42:e1:14:90:36:ce:6e:64:45:05:e6:
51:67:75:07:1a:e8:85:cd:6e:83:7d:80:b4:20:36:11:ab:1c:
d0:12:6e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org