Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lQCRisHzBRMSJKbbqa-icr8XcqE.roa
File: lQCRisHzBRMSJKbbqa-icr8XcqE.roa (raw, json)
Hash identifier: TV8lksU8eVywK1wupotj7heon1EckXhsEqcHsgjJlNo=
Subject key identifier: 95:00:91:8A:C1:F3:05:13:12:24:A6:DB:A9:AF:A2:72:BF:17:72:A1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2913
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lQCRisHzBRMSJKbbqa-icr8XcqE.roa
Signing time: Fri 01 Sep 2023 10:06:07 +0000
ROA not before: Fri 01 Sep 2023 10:06:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.193.64.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10515 (0x2913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9500918AC1F305131224A6DBA9AFA272BF1772A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:9e:cc:6d:76:10:03:d6:a1:b6:85:56:b7:
5c:b2:2a:d1:b4:32:02:92:3d:e7:9d:65:cd:50:72:
1f:6f:32:23:5b:94:df:f5:72:33:91:c4:97:7b:de:
5f:e8:f4:61:20:26:3b:c2:3d:34:cc:09:3e:5b:35:
f3:eb:b6:b8:34:a3:f2:d7:d6:a6:01:84:d4:ca:98:
7e:91:fe:52:3b:78:8d:6c:c4:74:ad:f2:80:db:17:
6c:53:fe:57:52:c3:88:48:15:b6:0a:ba:95:bc:0a:
82:a1:f7:d6:0f:db:09:b8:65:8f:76:60:91:55:3b:
61:e8:91:fa:1b:ac:b5:3a:03:29:6e:41:99:69:a5:
60:33:f3:c6:60:69:52:33:31:e9:de:88:13:e1:b5:
21:00:14:7f:85:cb:39:a5:e5:cf:a1:9a:30:e5:a2:
8c:82:d7:18:1c:cd:25:b3:36:e6:07:f9:d3:fa:fc:
02:fe:26:6f:5f:a0:b8:77:20:aa:36:79:63:c2:47:
a4:67:91:15:d7:6f:89:19:b7:17:c3:d5:42:16:97:
8d:d9:05:00:7b:a3:4f:ef:0c:89:61:4f:79:60:75:
1a:36:a5:cf:ea:e7:36:b0:e3:9f:cb:4b:53:d1:1e:
e0:6d:f8:69:e1:7f:2e:35:ff:f9:a0:c1:e9:fd:fc:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:00:91:8A:C1:F3:05:13:12:24:A6:DB:A9:AF:A2:72:BF:17:72:A1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lQCRisHzBRMSJKbbqa-icr8XcqE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.64.0/20
Signature Algorithm: sha256WithRSAEncryption
20:84:71:ff:59:36:e4:68:29:89:95:8f:37:95:7e:e7:e0:d8:
8e:03:49:9c:66:a7:3b:ad:cb:05:0c:91:7f:82:ab:3c:a0:7f:
ba:42:92:8b:8c:91:42:b8:f4:f3:1f:f6:00:97:63:68:8c:0b:
ed:60:f4:52:c8:3b:2e:db:2e:e6:7d:c0:b1:b9:66:f9:76:4f:
58:b7:21:64:89:33:bb:38:c4:45:2e:91:ae:5a:70:d7:95:e4:
a4:b4:24:01:69:a6:76:5a:4c:bb:2d:a7:25:bd:b2:44:75:48:
86:9e:4c:c1:f8:f0:a2:05:d6:31:7a:8b:8f:fc:3a:60:d3:16:
65:c4:0a:1b:3d:7c:bd:27:0d:75:1d:ba:11:e8:d9:64:4e:8f:
ac:5a:1f:1b:5b:f5:35:ac:4a:27:69:93:a1:3a:07:15:d0:d7:
2d:d2:f7:95:4f:c4:7e:e4:9f:87:4c:c8:af:6e:6b:4b:6b:af:
97:d2:d2:e0:c4:19:29:54:89:f3:8a:73:9a:24:13:02:73:2c:
c6:eb:78:dc:17:4f:53:90:37:ed:a5:05:8e:7d:cc:d0:21:44:
20:c4:2c:97:6a:56:f3:71:c0:6b:2a:50:b9:9e:6a:a4:0c:43:
b4:c3:e0:22:b3:bc:ed:3f:bc:2c:d8:a1:51:99:a4:c4:55:45:
51:4f:9b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org