Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kaoesruxRxZka6hqHwU8Qn9S3fM.roa
File: kaoesruxRxZka6hqHwU8Qn9S3fM.roa (raw, json)
Hash identifier: dQJFfJJ0KSMvxa37k+oVVunjy3n28ZUGT6JtU3N5t90=
Subject key identifier: 91:AA:1E:B2:BB:B1:47:16:64:6B:A8:6A:1F:05:3C:42:7F:52:DD:F3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kaoesruxRxZka6hqHwU8Qn9S3fM.roa
Signing time: Fri 01 Sep 2023 10:04:34 +0000
ROA not before: Fri 01 Sep 2023 10:04:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10191 (0x27cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=91AA1EB2BBB14716646BA86A1F053C427F52DDF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:57:cc:c6:80:44:b0:63:79:f5:de:b6:0c:
43:37:a7:6f:ae:da:32:4d:bc:b8:d2:c4:73:ab:82:
ae:ec:2d:b9:41:a8:67:f4:02:8c:bc:b3:d2:1b:1b:
a0:64:da:41:04:87:00:17:58:23:b0:f5:42:b7:a4:
ae:d4:f5:9a:46:59:20:e3:b4:ae:f2:99:82:84:23:
ea:74:cb:a5:f6:d6:47:cd:60:69:59:e2:cf:57:e7:
2e:ae:22:cc:3e:db:b2:06:0f:51:6f:94:86:4b:70:
be:d9:c6:14:79:4a:81:7a:df:80:9e:6a:6a:d9:e1:
3d:d4:26:f1:ac:c0:2f:98:42:d6:1d:bc:f2:0b:23:
d2:71:41:e4:06:95:52:c8:c7:f5:2a:4a:26:0a:2f:
84:67:02:95:9b:5d:c1:11:f1:06:c8:3e:7f:32:44:
54:4f:47:4b:ce:36:92:80:3a:eb:5b:f3:a7:98:ac:
23:ee:91:40:74:31:ad:17:b8:77:9f:b6:ff:91:c3:
9d:f4:19:ae:bc:35:87:d7:be:6b:70:b9:a4:d4:ad:
37:42:c1:f6:50:55:7e:a0:d3:24:38:3c:be:28:0e:
3a:9e:ee:5c:0d:43:31:4c:2c:ff:6b:cd:58:76:1d:
4a:ad:fa:78:3f:04:74:c6:7d:b9:c9:42:39:94:45:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AA:1E:B2:BB:B1:47:16:64:6B:A8:6A:1F:05:3C:42:7F:52:DD:F3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kaoesruxRxZka6hqHwU8Qn9S3fM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.152.0/21
Signature Algorithm: sha256WithRSAEncryption
67:4f:8c:a0:52:11:86:8e:9b:22:6b:38:51:a2:0c:0e:2d:58:
43:67:c1:dc:11:22:b3:c6:33:16:a9:6c:7c:d0:f9:ae:be:01:
a4:8a:3b:18:53:88:05:af:42:67:19:3a:48:b0:1b:5a:3b:4f:
cc:8b:f4:f9:e3:6d:b9:40:dc:b8:80:38:d6:8d:95:5c:9d:7f:
a6:f2:d7:d2:75:c4:88:79:ca:b6:7c:94:eb:cc:85:11:1b:a2:
10:47:3b:0c:df:00:fa:f7:6f:0c:80:c8:70:7c:62:cc:1d:81:
5f:8c:79:45:0b:3b:d9:6e:f0:7b:aa:14:7f:5f:2e:0a:07:f6:
24:6c:d6:e4:8f:79:c3:b8:14:e5:f7:c3:da:13:99:65:f6:28:
be:a7:73:bb:2d:b8:14:fb:5a:a5:3b:32:44:85:01:5f:38:73:
62:46:ad:65:61:a2:48:07:e3:18:7b:d9:fd:45:b4:97:a7:84:
79:e1:b4:07:17:d9:21:d0:6d:73:9f:56:25:88:11:25:d6:25:
95:bc:c0:52:79:3b:12:0d:d8:f8:e2:36:99:55:57:0b:73:ca:
6c:39:fe:dc:d4:49:a8:fd:53:04:66:98:3a:25:8d:83:1b:d1:
c5:11:f2:5a:3c:74:b3:d2:9c:5c:07:95:72:26:6c:8d:23:d4:
fe:10:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org