Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqvPFn43-p12HL_crZNTptpVJnU.roa
File: iqvPFn43-p12HL_crZNTptpVJnU.roa (raw, json)
Hash identifier: Gs0ambZaq5xg8wnazACYQd51ez7VZWhH+HyvfuNgk+g=
Subject key identifier: 8A:AB:CF:16:7E:37:FA:9D:76:1C:BF:DC:AD:93:53:A6:DA:55:26:75
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2939
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqvPFn43-p12HL_crZNTptpVJnU.roa
Signing time: Fri 01 Sep 2023 10:06:17 +0000
ROA not before: Fri 01 Sep 2023 10:06:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10553 (0x2939)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8AABCF167E37FA9D761CBFDCAD9353A6DA552675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:c0:d2:ac:a9:d0:09:77:4a:c2:9d:3c:be:
93:eb:46:1d:29:aa:01:9a:d2:dd:b9:1d:05:f9:c0:
65:8e:ba:0c:b3:2b:4a:cf:f8:79:9b:7b:e4:b9:3f:
8a:65:27:79:bf:22:3d:50:78:ae:fe:a4:61:df:73:
68:32:09:c4:49:3d:e9:11:76:55:0c:b2:34:f4:1a:
f2:14:d1:95:53:26:13:81:dc:95:8c:83:21:e7:e0:
06:5e:ba:7a:81:84:b4:5e:f6:f1:11:e0:82:1c:b7:
21:ef:4e:68:09:fb:99:1c:30:f0:77:ab:28:86:2f:
75:c9:a4:30:45:d3:ef:8d:50:53:46:22:29:4d:7f:
32:50:b1:59:e0:9b:12:e8:c5:bb:32:63:2a:7b:2c:
b8:fb:43:f6:76:b9:a7:73:95:27:d0:90:80:48:8d:
11:56:48:95:36:1c:27:d3:88:77:01:07:86:00:62:
bf:6a:bf:12:71:73:f0:d2:99:54:78:96:90:b3:f6:
9c:12:c9:5e:54:5c:65:49:ca:c3:ac:9b:ab:a0:ab:
a1:0a:74:ab:eb:89:18:20:6d:56:17:7e:98:95:6f:
d2:59:db:e6:b9:7b:2e:89:bf:69:32:44:cb:25:41:
2f:66:bc:81:a6:28:91:d6:5e:23:7a:4b:11:ea:f3:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:CF:16:7E:37:FA:9D:76:1C:BF:DC:AD:93:53:A6:DA:55:26:75
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/iqvPFn43-p12HL_crZNTptpVJnU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.32.0/22
Signature Algorithm: sha256WithRSAEncryption
19:04:a7:a4:84:49:b0:b6:90:cd:2c:07:f0:b7:c2:37:be:de:
0d:02:84:76:cf:f0:9d:34:f4:60:b9:c1:1a:73:82:03:c8:4c:
3e:a0:88:50:14:cc:98:cb:04:c7:f7:e1:8c:26:b0:ed:cb:48:
46:fd:96:7c:e9:94:01:01:fb:18:df:42:79:e7:71:c0:0c:cd:
41:cf:18:7d:55:86:f8:48:85:1f:d1:13:09:73:4e:65:87:04:
00:d5:4e:45:2f:b2:14:85:d3:91:4a:af:22:ca:0e:7d:db:e6:
02:29:a9:fc:f6:7a:32:3c:3a:a2:69:9a:7c:b6:09:1a:dd:bb:
9d:9f:d6:df:e4:f4:7d:52:dd:1f:f1:b4:b2:3c:9e:6f:73:29:
74:1f:9c:7e:c8:ab:06:5d:b8:60:4c:0f:c2:db:8f:e1:6b:63:
40:dd:85:c1:1e:2a:a0:6c:42:2a:fc:59:4b:84:aa:8f:29:f3:
a7:64:b7:bc:82:78:a9:aa:1a:56:95:9e:49:c6:5f:c1:cb:c9:
ea:7e:03:35:d1:c2:db:62:87:fd:a6:7b:e9:b8:ae:87:e7:68:
57:95:98:07:5a:2b:d1:4e:e0:dd:f3:be:9c:00:19:1a:dc:f3:
60:8c:de:2c:a5:15:1f:d9:29:97:29:5d:0a:93:29:21:64:bd:
c8:e2:9d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org