Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jby93Z2ZPDJB0qFP6rpkn3ezJLA.roa
File: jby93Z2ZPDJB0qFP6rpkn3ezJLA.roa (raw, json)
Hash identifier: sQKUdjHBaMepEAkAs8JlyPJ4vcye6WTOblx80tqs4Is=
Subject key identifier: 8D:BC:BD:DD:9D:99:3C:32:41:D2:A1:4F:EA:BA:64:9F:77:B3:24:B0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29D5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jby93Z2ZPDJB0qFP6rpkn3ezJLA.roa
Signing time: Fri 01 Sep 2023 10:07:09 +0000
ROA not before: Fri 01 Sep 2023 10:07:09 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.192.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10709 (0x29d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:09 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8DBCBDDD9D993C3241D2A14FEABA649F77B324B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cd:71:65:a8:73:eb:a2:58:fe:8d:36:3a:76:
46:03:2a:72:b7:2a:f5:41:48:95:9b:81:ad:be:e9:
bd:7a:58:8b:88:72:66:bb:ae:d9:c4:1c:5a:2f:78:
87:cc:f5:f4:31:d9:6c:0c:f6:3a:df:36:c3:ed:5e:
c3:ef:2b:6a:18:31:29:92:3e:31:55:2e:77:30:e5:
73:27:7f:03:ba:61:42:0f:f6:9d:2f:7c:83:82:3c:
be:7a:ee:0c:cc:c2:ce:30:8f:d1:16:12:d2:73:8d:
11:54:16:a1:e6:e4:6a:c3:7b:9f:ae:cc:e3:60:03:
0e:d1:e5:bd:55:3a:b6:e3:ee:2e:26:73:da:74:90:
ae:28:74:0d:48:0a:5c:40:d2:b2:3f:96:e8:30:78:
06:f1:5f:58:0e:2b:18:43:8d:41:8e:b4:d0:73:74:
31:a0:70:09:ee:e2:a5:b5:cf:23:12:06:08:8d:b4:
89:8b:6e:a9:ce:5e:50:a5:50:ea:5f:f5:fd:3b:8b:
58:fd:99:0f:41:c1:60:35:ea:34:7d:16:e1:76:c9:
06:f1:fb:e5:2f:74:a0:05:25:2b:43:a4:47:d4:4e:
3f:7b:90:5c:61:fd:03:03:b1:37:f7:54:89:ae:c2:
0f:99:34:6d:86:23:46:77:25:ef:bb:f6:e7:37:16:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BC:BD:DD:9D:99:3C:32:41:D2:A1:4F:EA:BA:64:9F:77:B3:24:B0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/jby93Z2ZPDJB0qFP6rpkn3ezJLA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.192.0/22
Signature Algorithm: sha256WithRSAEncryption
21:75:4a:20:ce:e6:80:80:9a:d5:04:19:4e:5c:d0:71:6f:79:
f9:32:75:60:e3:45:cc:1d:e0:e3:5f:31:ca:49:1a:ba:db:b6:
08:78:43:7a:49:f5:41:10:fc:f0:0a:83:c9:85:60:ba:73:61:
3c:e2:21:45:66:f6:28:ef:e2:2a:2a:d1:24:43:4d:4b:e7:cb:
01:6d:c5:bf:2f:91:d4:7f:d3:a1:8e:86:74:eb:3a:6e:9d:dc:
5c:d3:dd:da:8f:9c:06:42:23:79:ff:53:47:bb:bd:73:d9:70:
ca:bd:10:58:d0:2f:26:cb:68:56:9c:6b:a2:82:d7:0c:2c:cf:
58:c5:e5:7b:31:b0:5b:92:e9:87:ba:11:c1:27:74:64:7e:e2:
dd:01:66:df:e3:7a:3e:e0:a0:4b:37:f3:4a:db:e1:05:62:55:
06:b9:e5:7d:b4:a9:07:1d:47:c7:ab:50:f4:3b:c7:28:4a:4c:
a7:ca:43:4f:96:7e:7e:b2:52:01:86:04:af:b4:8f:93:62:f7:
5d:29:b6:89:1b:6a:57:09:32:23:ad:09:1a:58:19:78:63:f4:
e3:b4:3a:d0:99:56:75:b0:92:8f:c0:7d:84:2c:8d:d0:79:90:
33:11:7d:82:40:99:78:0b:fc:b8:6c:45:ec:9f:85:b5:64:66:
3a:a2:11:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org