Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jV4wNQ8WD0C_jXMwiWf6dtcPVyY.roa
File: jV4wNQ8WD0C_jXMwiWf6dtcPVyY.roa (raw, json)
Hash identifier: bIXHQkNvB0yj4ScMBuG6aH/lHJECyvqZJgmJYVnjmHw=
Subject key identifier: 8D:5E:30:35:0F:16:0F:40:BF:8D:73:30:89:67:FA:76:D7:0F:57:26
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A7B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jV4wNQ8WD0C_jXMwiWf6dtcPVyY.roa
Signing time: Fri 01 Sep 2023 10:07:57 +0000
ROA not before: Fri 01 Sep 2023 10:07:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10875 (0x2a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8D5E30350F160F40BF8D73308967FA76D70F5726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:29:80:88:da:d2:82:f3:0f:09:cc:5a:05:71:
40:cf:74:af:bd:88:a2:e4:be:eb:82:7a:03:b9:47:
f7:74:a8:28:68:a6:9c:22:67:05:94:c8:6a:79:97:
3a:39:42:16:f7:f7:db:b5:b2:63:7f:8f:c9:d5:57:
91:4b:7c:87:f2:e7:22:0d:97:3b:73:00:27:c5:68:
b7:b4:a6:94:49:fe:53:63:b5:90:35:38:32:8a:03:
0b:d8:92:ae:85:f0:cc:2d:64:fc:bb:bb:3f:bb:f1:
86:fb:e2:e3:e4:ae:5d:50:af:c6:df:f0:3f:7f:04:
a8:22:d4:4e:64:0d:e6:85:3f:41:99:b9:85:27:d4:
1f:7a:6a:86:6d:67:a3:b8:af:79:ec:8a:7b:69:b2:
7a:eb:56:3a:68:de:58:f8:25:fd:9e:5b:49:61:a1:
d5:7d:17:3a:c6:c5:fa:d2:3d:27:5f:1e:f4:d6:e7:
0f:96:5d:d9:6b:4c:2f:d1:28:d5:f2:2e:2b:3e:90:
ce:39:87:13:62:ec:9e:6b:40:88:61:be:cc:3a:50:
83:7f:ec:db:3c:ac:4e:ef:f9:d8:3d:46:b4:aa:ad:
2f:06:c3:a5:2c:d7:9c:4e:10:9b:3d:bc:19:f9:66:
80:57:dc:9d:80:d0:9f:9a:d7:b3:1f:d1:38:ab:a1:
7a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5E:30:35:0F:16:0F:40:BF:8D:73:30:89:67:FA:76:D7:0F:57:26
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jV4wNQ8WD0C_jXMwiWf6dtcPVyY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.64.0/20
Signature Algorithm: sha256WithRSAEncryption
19:81:5f:1a:fc:93:db:15:3b:b2:0a:ad:dc:57:26:65:d8:a0:
85:38:bf:cc:0d:37:4f:4e:33:d3:a0:65:b7:68:66:43:fd:f1:
40:56:a2:be:2c:6d:0e:a6:c4:b7:72:89:e9:eb:a5:7e:ff:72:
9a:79:2f:2e:fb:a0:b6:da:41:0e:7c:4e:a2:b1:f2:24:1b:e9:
ed:76:bf:e0:b8:9a:c5:8f:40:4f:92:06:c6:35:e8:c2:c0:e4:
76:3b:b9:04:54:c7:f4:99:76:03:24:bf:f5:d9:87:dc:5e:4f:
fc:b3:cb:2b:17:3b:52:1e:a7:ef:52:fe:81:89:7a:97:65:48:
e7:3f:73:09:6d:30:74:fe:79:f5:35:f3:b0:3d:fa:5d:df:46:
60:ee:f8:e8:c5:bf:1a:4a:bb:17:20:71:c8:14:69:7d:f9:45:
02:98:45:f5:69:b0:c9:7c:7c:c2:ec:3d:7d:09:16:c6:fc:bd:
29:5a:d1:53:4f:a3:0b:e8:82:a7:5a:05:f4:43:e7:cb:0a:bc:
32:fd:42:ba:d4:3e:46:b9:dc:e5:22:c9:de:49:c2:a4:d2:73:
b2:5a:57:32:ea:b0:57:04:07:f2:bf:5b:92:25:22:aa:c6:ed:
ee:ee:e5:ba:ec:02:f7:12:f7:a1:80:3e:a3:45:b4:1f:74:9a:
fe:fc:98:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org