Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJy4RLqR1rYq0A40mEqNbb_YaeM.roa
File: lJy4RLqR1rYq0A40mEqNbb_YaeM.roa (raw, json)
Hash identifier: 8fc2oGZiy373zLWYrPRMqqnOuzDHislSY4uZhETx0yc=
Subject key identifier: 94:9C:B8:44:BA:91:D6:B6:2A:D0:0E:34:98:4A:8D:6D:BF:D8:69:E3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2875
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJy4RLqR1rYq0A40mEqNbb_YaeM.roa
Signing time: Fri 01 Sep 2023 10:05:21 +0000
ROA not before: Fri 01 Sep 2023 10:05:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.176.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10357 (0x2875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=949CB844BA91D6B62AD00E34984A8D6DBFD869E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f9:53:54:3e:48:e3:90:78:af:19:37:ce:9f:
30:0c:46:68:3e:02:75:56:0a:e9:66:9b:65:08:77:
52:27:e5:af:75:04:30:6b:45:af:c1:ed:52:f7:8b:
31:21:e0:18:86:39:8a:d2:87:5b:5a:a8:20:fd:fe:
ae:20:1e:25:5f:61:b9:ed:7d:93:c0:ed:59:e3:32:
58:bc:7e:72:54:b2:b4:9d:e4:c7:5e:9c:f8:89:18:
3a:84:aa:22:e8:52:7e:fb:0c:fb:63:10:0a:6a:fd:
ac:1f:ef:89:d5:39:1f:99:20:58:2d:7c:25:d9:e3:
12:f0:68:b0:9b:a8:be:60:97:30:0f:67:f8:4b:5a:
90:8b:99:f2:b5:2c:12:5c:6e:02:a5:35:4f:52:9a:
42:b5:40:9f:a0:36:10:29:b7:2d:0b:ba:75:75:cc:
64:03:3e:c9:88:02:16:d8:af:91:04:60:ab:ad:15:
a1:18:b5:f8:57:05:ce:2e:b9:e6:48:f0:a4:40:a5:
9a:e8:d2:09:30:c1:a9:33:65:df:73:bd:4a:78:f1:
d9:af:c3:82:f4:35:19:36:1c:f0:65:0e:02:08:02:
d5:d6:38:2f:5c:31:6f:f7:27:bb:62:6d:94:6a:1a:
d1:3f:e3:2f:f9:61:89:48:88:83:f4:dd:40:73:8e:
8e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9C:B8:44:BA:91:D6:B6:2A:D0:0E:34:98:4A:8D:6D:BF:D8:69:E3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lJy4RLqR1rYq0A40mEqNbb_YaeM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.176.0/20
Signature Algorithm: sha256WithRSAEncryption
31:b0:7e:39:33:af:13:b1:1c:91:22:5c:5d:ba:a4:1b:3e:7e:
47:df:0f:aa:22:ea:1e:ab:1d:79:a7:c9:99:42:68:af:82:17:
f8:81:3c:1c:4a:38:f1:e6:f5:78:63:8f:da:43:ea:e8:e7:2f:
f9:15:b0:3c:2a:a4:fe:4b:09:84:d7:c6:3d:f5:4a:7a:a7:57:
a1:57:3c:ff:6b:6c:a5:0e:ad:d1:21:cf:ea:31:4b:9a:d5:55:
f7:49:36:b6:93:2d:7f:27:ed:37:e9:be:b4:55:45:19:10:bf:
ae:ca:e7:a7:19:e1:c4:a6:05:38:34:df:45:13:46:f1:5c:8d:
8f:78:fb:67:ce:07:80:9f:2e:79:03:be:6e:32:f6:db:53:72:
e6:94:4f:ae:cb:3a:86:4a:eb:4c:9a:c0:37:c7:0f:5c:7a:54:
b7:5e:61:25:ec:52:6e:c1:49:cd:82:62:39:97:37:71:69:2f:
e4:be:b5:f8:43:cf:e9:91:4e:56:2e:19:f2:f2:7c:87:87:af:
99:f5:f0:25:f9:80:70:c2:25:62:81:e0:d1:75:9a:a6:17:29:
fc:a0:15:06:77:a5:1b:80:ce:1e:8a:bd:f1:e1:9a:e8:ae:26:
84:e3:4d:aa:ee:a3:07:3e:cb:e8:07:43:c5:4b:96:72:f8:59:
20:37:be:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org