Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mFN0Vm5FlVOIePqEwEGtjurRw58.roa
File: mFN0Vm5FlVOIePqEwEGtjurRw58.roa (raw, json)
Hash identifier: 9b6dOlZjXe2tDKTOyvv91hhI1VgwiNuAyFL7eR+g5ZI=
Subject key identifier: 98:53:74:56:6E:45:95:53:88:78:FA:84:C0:41:AD:8E:EA:D1:C3:9F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2ACF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mFN0Vm5FlVOIePqEwEGtjurRw58.roa
Signing time: Fri 01 Sep 2023 10:08:18 +0000
ROA not before: Fri 01 Sep 2023 10:08:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10959 (0x2acf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=985374566E4595538878FA84C041AD8EEAD1C39F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d3:d4:84:3d:e6:1f:76:df:bd:6e:5b:dc:79:
35:56:73:b6:21:b4:3c:9b:0c:b6:36:06:d0:db:dd:
de:60:73:d0:51:5d:20:fc:65:58:dc:16:cb:1f:94:
74:4c:7b:1e:0c:0a:e6:1b:fa:25:b3:7e:c0:43:08:
9c:64:32:69:db:4e:33:1f:1a:eb:51:a1:f4:b5:d0:
66:43:d0:ea:09:36:c1:fa:f4:ac:23:de:e3:99:f2:
cd:8a:8e:e7:d3:36:67:de:58:63:b6:8b:bb:e4:f5:
a0:5c:af:8e:85:cd:5d:d6:fb:47:57:88:85:a8:0e:
a7:b3:84:0f:13:2b:37:b5:b8:95:2a:81:6d:de:8a:
d0:33:6d:c7:d5:56:cf:17:c1:a4:01:4e:ae:18:83:
f1:59:f6:5c:8c:81:8e:89:ab:32:70:09:90:e4:87:
86:98:5d:d2:5c:65:1c:94:b8:80:a2:38:72:6e:75:
4b:db:1b:99:f3:65:49:5d:67:96:f2:f8:a4:b2:55:
0d:28:56:95:f8:0c:e5:c3:1e:91:16:9e:ad:e1:a9:
7d:d9:d6:cb:54:3a:6c:21:95:25:a2:5a:ed:fa:fd:
9b:cc:28:11:4d:fb:1a:ba:a6:a2:7c:0f:03:57:8b:
e8:36:c5:72:64:be:80:04:b9:7c:5c:53:2b:e3:3f:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:53:74:56:6E:45:95:53:88:78:FA:84:C0:41:AD:8E:EA:D1:C3:9F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mFN0Vm5FlVOIePqEwEGtjurRw58.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:e3:f6:82:39:68:8b:d4:96:32:02:ad:78:0a:bb:72:bb:cf:
b6:f2:e1:f9:03:73:67:a5:5b:bb:12:ef:ea:c6:00:81:f9:11:
35:94:81:de:94:d0:b0:86:38:80:15:80:18:40:db:a7:38:a8:
85:69:d9:d0:74:12:f6:ba:91:a8:bb:5d:bc:59:d5:87:73:dc:
d5:7e:ab:e6:2b:a4:c3:b3:e4:cd:36:5d:2c:91:2a:35:34:94:
81:05:35:54:06:81:32:b0:c6:8f:5f:80:a6:71:96:f1:b2:7a:
0b:32:ed:c6:d6:be:24:58:f8:66:29:15:9e:f5:2e:33:fd:43:
d7:b9:6c:55:d7:00:28:18:70:0a:d2:2f:f1:ca:02:52:41:7d:
21:22:2a:6c:7d:62:80:f4:68:f1:8e:e2:a2:e3:76:7e:4e:4c:
ba:a8:ed:34:33:d8:27:bc:32:6f:2b:4b:16:0c:0c:28:19:9d:
34:a0:87:44:9d:0b:71:ed:75:b0:50:59:6d:26:22:41:5f:b1:
69:86:61:94:0d:32:20:8c:43:2e:a8:32:6f:67:3c:91:82:4b:
fb:d2:d1:4b:bb:58:d2:12:31:94:51:e0:b5:b5:6d:f1:73:62:
d9:22:93:03:99:f2:cb:ba:e5:e9:fd:34:fc:c3:f2:03:19:d7:
a7:ec:61:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org