Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mrNBB6QpYrkwfSue5fbO7WFMV6k.roa
File: mrNBB6QpYrkwfSue5fbO7WFMV6k.roa (raw, json)
Hash identifier: XpZqwLOsAw9oBHMzF7K5S/KNtNxPjS1ADzVsbhJZens=
Subject key identifier: 9A:B3:41:07:A4:29:62:B9:30:7D:2B:9E:E5:F6:CE:ED:61:4C:57:A9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A45
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mrNBB6QpYrkwfSue5fbO7WFMV6k.roa
Signing time: Fri 01 Sep 2023 10:07:42 +0000
ROA not before: Fri 01 Sep 2023 10:07:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10821 (0x2a45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9AB34107A42962B9307D2B9EE5F6CEED614C57A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c2:9e:e7:b0:bf:e8:67:56:f1:80:07:68:58:
1e:99:cb:78:a1:c8:20:dd:61:ce:f6:21:ee:64:15:
ab:56:78:b4:07:53:2e:56:7b:ae:00:76:94:8c:81:
f5:58:2a:69:36:b4:6d:39:7b:fa:da:5d:6a:86:42:
66:21:96:a4:b2:ac:3d:b8:cd:8f:24:68:a9:d9:0c:
7a:f9:dc:64:1f:6e:d8:2a:a8:3f:18:9a:3b:b9:31:
b9:39:a6:29:33:28:cf:f1:bb:10:99:2d:27:e2:f7:
40:3e:3b:ff:2c:c3:54:39:15:dd:c3:7c:3f:96:26:
f1:fe:0e:60:a6:81:e1:12:d5:40:40:a1:99:a4:68:
66:17:1d:c6:92:97:6b:a0:78:a6:05:b4:09:5d:26:
b8:20:5f:e2:59:00:71:45:8b:c0:39:cb:5d:cb:bd:
cd:27:9f:08:4a:f2:49:91:f7:78:23:fc:42:5e:7a:
89:28:b9:af:2f:aa:79:34:e3:9c:ac:95:15:62:57:
40:4d:95:10:1c:5e:e6:a0:f0:a0:16:54:0b:ee:d4:
dc:f9:89:89:e0:92:46:1b:1e:c9:1a:12:6b:a1:86:
8d:44:f8:7f:c0:75:a1:3a:25:6b:49:5f:cd:48:55:
1e:a1:37:39:52:9f:43:39:68:8d:e6:8f:19:f4:3b:
9d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B3:41:07:A4:29:62:B9:30:7D:2B:9E:E5:F6:CE:ED:61:4C:57:A9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/mrNBB6QpYrkwfSue5fbO7WFMV6k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.228.0/22
Signature Algorithm: sha256WithRSAEncryption
18:bc:36:2e:a6:38:04:04:5e:c2:b5:b9:8f:b4:d2:9d:71:f5:
74:dc:b2:01:8b:d8:64:ed:5d:d4:34:1f:74:43:20:b8:a6:ee:
33:31:13:67:c4:a4:69:b5:bc:48:8e:f3:71:c7:98:d4:d5:90:
53:8f:ca:23:3d:b0:0c:e0:82:a0:ee:b7:a7:eb:4d:3e:62:e6:
53:e1:16:61:eb:f8:6e:bc:d7:45:dc:a7:a0:ac:2a:2a:bf:c2:
ab:e5:54:8d:7d:53:63:6e:d4:30:9d:7c:65:f5:47:8b:84:36:
f3:ab:0c:2d:98:db:22:3a:1b:ca:b5:d5:b4:48:b6:ea:56:7e:
9e:0f:4c:0c:cc:46:50:e9:4f:ab:bb:57:d0:5b:be:2b:09:9c:
34:61:fd:19:c7:39:10:77:1c:fe:ce:78:f2:f6:54:a1:16:36:
99:41:58:0d:b3:d2:09:65:d7:7b:49:7d:87:44:13:de:0c:93:
40:1a:25:68:d8:33:da:8e:39:a6:5d:28:b9:4b:f9:cf:87:09:
ad:19:d0:4b:7e:59:12:db:b7:5e:b3:62:2c:52:7a:3b:40:00:
c5:b5:30:86:68:1a:04:27:ea:95:04:92:64:45:97:39:68:a9:
2f:16:78:98:24:7a:26:bd:cc:84:7c:9c:10:e2:22:6f:c2:de:
02:3e:7d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org