Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIaRD1xLMdOiAcV12l_LfwYlDi4.roa
File: jIaRD1xLMdOiAcV12l_LfwYlDi4.roa (raw, json)
Hash identifier: NQqYcb86CrOYC3Dj3xY0y8qBE3n4r1TNRFjt1fHf63U=
Subject key identifier: 8C:86:91:0F:5C:4B:31:D3:A2:01:C5:75:DA:5F:CB:7F:06:25:0E:2E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2ADA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIaRD1xLMdOiAcV12l_LfwYlDi4.roa
Signing time: Fri 01 Sep 2023 10:08:21 +0000
ROA not before: Fri 01 Sep 2023 10:08:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10970 (0x2ada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8C86910F5C4B31D3A201C575DA5FCB7F06250E2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:e6:52:c8:71:ef:6f:99:d1:cd:a3:bb:5e:
00:28:2a:af:b9:09:8d:0b:d3:44:c3:46:5d:7b:6f:
53:bf:f5:0f:15:88:0e:f1:2d:e9:1d:81:b7:59:8d:
23:f6:b9:1a:c1:02:4a:f5:24:f8:95:f0:50:fc:5d:
c2:9c:1b:bd:c7:91:e2:6c:a5:45:83:41:53:9f:98:
05:5c:bb:0a:ce:2b:8e:af:f4:4b:58:11:1e:38:3e:
71:56:85:3f:bd:5a:72:9c:8e:6a:db:0a:55:da:0b:
2f:aa:f7:16:fd:7c:08:d1:1f:a9:2d:86:97:53:bf:
03:bb:c3:24:c2:cd:ba:31:45:af:a6:02:7a:4b:25:
a2:cb:f9:f9:b3:12:62:8f:4c:79:a2:a6:23:2a:e2:
f2:6c:ec:a4:9b:11:71:2e:29:b6:55:49:2b:43:6e:
d9:0c:7b:c5:65:28:27:78:f9:1d:40:55:e2:d0:31:
ee:c9:b3:df:56:ff:a6:45:93:c3:de:5f:32:d1:62:
95:d5:da:a1:50:c6:4e:df:c0:6f:8c:aa:34:e7:53:
d3:99:32:c3:ec:08:3f:19:45:9f:b5:9a:64:09:df:
1d:fd:5f:44:44:9d:03:9d:03:dd:3e:34:c7:76:b9:
23:08:90:d5:a6:46:99:29:9d:85:5a:df:4e:27:f4:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:86:91:0F:5C:4B:31:D3:A2:01:C5:75:DA:5F:CB:7F:06:25:0E:2E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jIaRD1xLMdOiAcV12l_LfwYlDi4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.196.0/22
Signature Algorithm: sha256WithRSAEncryption
34:53:f5:cd:42:44:30:99:76:2e:2e:35:25:20:78:de:ae:06:
01:dd:b5:9d:fa:0c:d2:fd:71:08:5d:8b:ec:a0:73:30:7f:a8:
91:10:96:c0:dc:7a:84:08:50:f1:23:2a:6b:48:59:74:ec:d7:
a9:b9:b6:b4:f5:f0:70:7f:1e:5e:c8:9f:85:8b:13:2f:6e:aa:
14:04:af:2b:15:a5:c2:cc:bb:04:d6:a7:65:61:a3:8d:0a:1e:
ea:ad:7f:80:c2:cf:33:fe:7c:1f:ec:2c:8c:85:99:00:43:c2:
4a:f9:10:51:78:8a:79:0e:f8:20:36:7b:eb:44:e3:3f:d7:5b:
3c:5a:aa:d9:42:c8:2e:ab:f3:49:d2:eb:a6:d6:1e:c9:f0:4c:
da:12:44:40:ae:f2:80:22:0f:24:72:de:11:46:61:07:fd:36:
37:18:ec:6f:50:c9:b9:d6:9a:5b:be:ec:11:7f:61:c4:7e:f2:
36:02:22:13:11:62:b7:e9:65:47:18:08:bb:9d:8f:10:b7:36:
98:af:f4:3d:45:ff:8b:4f:1e:c3:46:ca:d8:a5:12:fc:90:d7:
c6:6e:91:23:6c:ec:75:0a:b0:a7:2a:76:40:4e:b9:83:ed:c6:
9a:cd:d7:b1:7c:6d:66:58:58:b3:f7:a9:35:24:4c:72:a4:9a:
70:3e:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org