Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lvBJoHgpab2PxOQe1dSH8fYfgIU.roa
File: lvBJoHgpab2PxOQe1dSH8fYfgIU.roa (raw, json)
Hash identifier: OCCxx500bQyu0dU1s1XaYnL7zkMh3EXqmRvBHRwQU/Q=
Subject key identifier: 96:F0:49:A0:78:29:69:BD:8F:C4:E4:1E:D5:D4:87:F1:F6:1F:80:85
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2ABD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lvBJoHgpab2PxOQe1dSH8fYfgIU.roa
Signing time: Fri 01 Sep 2023 10:08:14 +0000
ROA not before: Fri 01 Sep 2023 10:08:14 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10941 (0x2abd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:14 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=96F049A0782969BD8FC4E41ED5D487F1F61F8085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:c7:99:1b:98:01:fb:ac:ca:52:7a:f1:8d:
46:e5:76:26:e6:1b:de:e0:20:70:a4:3d:6c:7a:a2:
3f:63:26:b9:47:9f:86:17:9a:2f:90:84:b4:0c:72:
50:86:5a:7b:60:c5:c3:c1:89:19:a1:2e:ab:96:11:
b8:2a:49:5c:4c:32:a0:f5:58:28:0f:fb:0a:b8:cd:
40:17:a1:50:59:0f:63:cc:f4:f4:a4:38:c8:ea:4a:
04:30:42:dd:a2:08:30:27:1a:7f:26:16:2b:6a:9a:
58:03:0b:ee:17:31:8a:8a:17:6f:f0:d6:81:9e:96:
33:d0:34:35:ae:96:11:13:55:ab:df:69:69:d1:ac:
8b:b1:90:bb:a3:62:b2:48:5f:e9:4f:68:ac:c1:66:
0b:d1:f9:83:2e:d6:1c:ad:dd:9d:04:61:2e:62:58:
58:6c:14:5c:0b:c0:a3:bb:fd:f1:d5:56:0f:85:c3:
d6:d5:1b:9e:16:d8:60:d0:00:04:02:f1:ac:0e:61:
45:f1:2f:98:98:01:c8:41:c7:d1:3c:b6:18:a3:0b:
8c:d2:8a:aa:d7:11:51:f0:6a:39:da:c1:0b:8a:fa:
7b:c2:c7:4f:e0:61:02:cc:98:f8:51:14:f9:14:8d:
b4:29:6f:57:65:78:5e:7b:c7:c1:c1:ab:5f:de:b6:
39:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:49:A0:78:29:69:BD:8F:C4:E4:1E:D5:D4:87:F1:F6:1F:80:85
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lvBJoHgpab2PxOQe1dSH8fYfgIU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.144.0/22
Signature Algorithm: sha256WithRSAEncryption
03:84:d9:fe:ce:45:a9:df:68:c3:c6:a7:8b:ec:6a:fa:3d:d4:
3b:eb:fc:a6:bc:0e:b8:a9:70:6e:7c:4a:b5:30:d1:01:4d:c5:
c9:3a:8a:a6:e6:86:5f:81:83:43:aa:f7:4f:a8:fe:db:37:a8:
c9:83:e4:d1:f0:2a:0f:a5:ea:d6:ce:98:67:46:de:0d:f0:7e:
12:e9:ca:bf:9e:85:2d:04:d4:82:f3:07:fd:b4:64:47:c1:52:
96:5e:7b:c4:35:eb:92:92:f0:12:7b:70:5f:cf:e1:02:dc:42:
3c:b6:7e:06:51:bd:e5:84:b8:2c:ab:dc:6d:6d:43:66:bf:d0:
59:cf:4c:1c:c4:09:a7:0f:1b:67:2c:8a:4c:c1:f7:21:00:f1:
bf:c8:d3:78:1e:03:27:16:c3:8b:4d:75:4e:80:9d:d9:66:9e:
70:ab:12:95:6d:60:39:4e:19:43:06:de:9d:1f:f2:46:3d:19:
9c:a3:cb:12:6a:60:c9:2a:fd:aa:b1:a3:b1:ea:31:8b:4c:50:
42:b5:f3:b1:b0:3b:75:ad:7f:c0:d9:ff:1d:27:a1:82:dd:7e:
8b:27:88:a8:eb:5f:d8:87:0c:a2:6f:1e:25:37:d1:53:83:49:
30:d2:5a:e7:51:0d:1b:2c:1b:be:bc:85:db:07:62:95:8e:c7:
85:9c:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org