Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nMhtfMew7cy_8EZzJcbW6wkkudo.roa
File: nMhtfMew7cy_8EZzJcbW6wkkudo.roa (raw, json)
Hash identifier: ZHJlbIC8xY9O+LMMREaPnz72/MkeNhdK+xFLybhNmTg=
Subject key identifier: 9C:C8:6D:7C:C7:B0:ED:CC:BF:F0:46:73:25:C6:D6:EB:09:24:B9:DA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 281D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nMhtfMew7cy_8EZzJcbW6wkkudo.roa
Signing time: Fri 01 Sep 2023 10:04:57 +0000
ROA not before: Fri 01 Sep 2023 10:04:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10269 (0x281d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9CC86D7CC7B0EDCCBFF0467325C6D6EB0924B9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:98:54:de:cd:e8:c4:72:b5:82:25:f0:de:
57:2b:fe:c6:e7:22:44:6e:93:8c:21:b6:54:df:1f:
66:f0:78:0e:1c:e2:e0:aa:0b:6c:02:17:06:8b:0f:
9f:44:d2:fc:81:bb:7a:02:ec:49:95:32:c7:ce:d3:
d0:e5:74:1f:22:a6:1e:37:b9:c7:a7:d3:f2:e8:60:
42:65:93:85:a7:c1:32:54:06:f1:f7:9a:9d:54:0c:
a8:be:02:0a:63:02:e4:d3:2b:26:74:f0:d1:38:59:
ee:f8:73:71:50:60:d5:60:85:d3:6e:04:a9:70:dd:
51:da:7f:53:b9:12:ab:10:ca:96:14:16:ac:b1:e3:
b1:86:dc:1c:43:59:db:c5:87:bd:59:cc:bf:16:46:
66:5d:00:43:af:f3:e6:01:8d:f0:fc:7b:96:6c:d9:
d5:b0:cf:9a:b6:52:83:28:93:a9:d2:48:2b:40:30:
5a:b2:05:1b:3d:ee:5e:f3:7f:f3:e1:ae:b9:87:a9:
d6:51:b2:f3:a7:2e:9a:64:3e:72:66:62:a0:f1:14:
f9:b5:73:e7:c0:a5:84:ab:8d:07:aa:dc:f1:2c:74:
e0:17:ae:55:81:6f:3a:e6:53:78:8f:92:f8:ba:5b:
3b:18:47:3d:67:09:22:33:ef:f6:03:ae:0b:0b:47:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C8:6D:7C:C7:B0:ED:CC:BF:F0:46:73:25:C6:D6:EB:09:24:B9:DA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/nMhtfMew7cy_8EZzJcbW6wkkudo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.24.0/21
Signature Algorithm: sha256WithRSAEncryption
71:8a:0d:c2:12:24:47:a4:32:23:ec:73:08:59:2c:bf:c4:9d:
71:24:ca:a8:ec:9a:8a:f7:5a:93:d7:64:f3:ce:7e:1d:8d:30:
0b:72:d4:72:0f:e9:52:cd:81:3f:fe:94:88:c1:75:1f:6e:a8:
86:4a:cf:dd:8f:1f:8a:8f:4f:fd:ee:98:61:16:c6:3a:22:f7:
d0:2c:b2:76:ac:88:4c:f6:a2:aa:b1:4d:79:59:b2:ba:de:99:
e9:37:0d:72:c2:ad:50:24:59:2b:bb:ba:77:b8:97:7d:a7:09:
8a:7f:77:12:90:06:0c:72:3b:45:4b:2a:f6:d7:b6:cf:94:b6:
a1:57:67:28:ce:26:1f:ce:17:1e:53:45:46:7b:9e:93:9f:e2:
83:8d:a8:81:03:33:13:f6:44:d7:31:30:d9:68:e5:6c:bf:f6:
77:bc:3c:e7:2a:76:a7:e6:22:97:5b:da:e9:e9:13:25:fe:6e:
a3:68:4b:2b:bc:4b:dc:ae:b4:e6:7c:bd:4b:e1:b2:5c:e9:a1:
03:f4:55:05:9f:d7:73:54:57:39:c1:fc:46:37:f5:ce:20:fe:
d7:89:ae:93:a1:34:fd:5b:2c:af:29:81:65:aa:88:6c:f3:71:
c7:9a:d6:b8:11:94:50:d0:72:ea:be:e6:ab:b1:8f:5f:fc:28:
1f:49:03:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org