Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mLS_FZjjo9YaVWTFB0hW62fwTvo.roa
File: mLS_FZjjo9YaVWTFB0hW62fwTvo.roa (raw, json)
Hash identifier: MJ5jZbDg2ax7jmq6Kq8ggoWkwa2Yd7iHncJWvx7rDPU=
Subject key identifier: 98:B4:BF:15:98:E3:A3:D6:1A:55:64:C5:07:48:56:EB:67:F0:4E:FA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2ACE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mLS_FZjjo9YaVWTFB0hW62fwTvo.roa
Signing time: Fri 01 Sep 2023 10:08:18 +0000
ROA not before: Fri 01 Sep 2023 10:08:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10958 (0x2ace)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=98B4BF1598E3A3D61A5564C5074856EB67F04EFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:3d:6f:ef:80:b2:ee:88:20:9f:7f:d3:cf:
5a:06:f3:24:2e:9c:c8:c0:ff:4e:f3:36:a6:7e:f3:
2e:8c:3c:9e:1d:35:d2:52:cd:1d:c1:ca:63:3e:95:
19:5d:19:4e:29:9f:b9:a5:59:19:3e:7d:03:09:48:
d4:65:cd:ee:79:90:db:1b:ce:e9:91:aa:2f:11:35:
26:5e:c0:8a:e2:88:94:32:c1:a3:c6:e0:3c:36:f9:
cb:e0:a2:30:9e:62:1e:ef:23:5c:47:c3:4f:83:35:
c9:f4:7a:3a:2d:1a:87:d0:02:c4:c5:45:52:f5:7e:
9e:44:82:c3:06:90:8b:13:e4:00:bc:79:0e:d1:4d:
d5:4a:6f:bf:34:e0:cb:09:28:48:14:11:6a:b4:6a:
c7:52:18:98:dd:a8:d3:cf:13:60:52:8e:e6:6b:b3:
34:34:cc:27:e2:33:2f:5b:29:28:01:e3:4c:9d:31:
2c:c0:cc:d9:71:0b:e6:d6:ee:fb:e6:16:ba:f8:4b:
ad:64:1d:b6:cb:6b:aa:8f:22:52:cd:b2:c0:de:9f:
7f:5f:92:a8:15:3e:b4:db:0f:98:11:7c:7d:2c:a0:
14:90:41:4e:e9:78:38:ab:72:d8:97:fe:ef:e3:6f:
25:44:36:c1:bd:a3:7c:e5:d3:bd:18:dc:b8:89:28:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:BF:15:98:E3:A3:D6:1A:55:64:C5:07:48:56:EB:67:F0:4E:FA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mLS_FZjjo9YaVWTFB0hW62fwTvo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.140.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:70:8d:f5:c7:fe:5b:7c:ed:ff:5f:11:ab:8e:6b:30:3b:d1:
07:96:e2:3b:14:34:67:e4:2e:a6:28:a9:67:c2:88:4f:80:af:
99:a2:72:48:8a:cc:9a:d8:2d:83:6d:cc:08:e0:3c:13:d8:3e:
28:04:d2:d9:6e:da:5d:cd:06:c1:df:b1:fc:42:50:8e:be:18:
dc:0d:2a:d1:cd:09:37:da:cc:dc:15:17:7e:9f:04:9d:f9:dd:
9b:25:ec:4e:04:a0:f5:3f:4d:e6:d9:81:68:9f:03:22:b9:c6:
ee:ed:c8:a6:dd:78:e6:2c:ad:5c:65:2a:e9:10:b0:b2:6c:93:
e4:bf:c7:f9:f2:b6:91:e5:e3:fb:cf:d1:36:a1:90:22:f7:f8:
6c:0d:68:78:0e:13:00:99:6f:8c:cb:f9:4b:b2:20:0d:c5:79:
aa:e1:e7:4d:0a:d4:b8:0b:75:8e:0c:3e:07:aa:57:dc:94:ef:
95:92:3b:26:42:06:91:06:90:d0:98:92:5b:3e:d3:2d:2c:bc:
19:9d:54:ec:1b:16:dc:07:07:fb:8c:65:83:71:3c:1a:80:47:
cf:f2:be:c3:92:b2:f9:53:3d:ea:8e:0e:fe:65:9b:8d:25:e5:
f4:f2:e1:5e:0c:24:8e:e7:ae:87:62:74:38:f2:e1:d3:95:33:
76:63:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org