Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oNFziMOLGGARuj-oy8oi-e79WMw.roa
File: oNFziMOLGGARuj-oy8oi-e79WMw.roa (raw, json)
Hash identifier: BUIlC85KNaAgu2ScRcYBUfgjM1cNFEFzggoSwc8jnLo=
Subject key identifier: A0:D1:73:88:C3:8B:18:60:11:BA:3F:A8:CB:CA:22:F9:EE:FD:58:CC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 298B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oNFziMOLGGARuj-oy8oi-e79WMw.roa
Signing time: Fri 01 Sep 2023 10:06:44 +0000
ROA not before: Fri 01 Sep 2023 10:06:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10635 (0x298b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A0D17388C38B186011BA3FA8CBCA22F9EEFD58CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:99:56:07:d6:bb:71:13:02:9d:33:a8:4c:c6:
4d:47:c9:7a:20:de:f6:5a:83:cb:13:22:99:38:7c:
1d:9f:a3:a5:5c:89:b8:f3:a5:66:8c:22:4c:f1:35:
57:90:53:e9:f5:ef:82:6a:a8:05:77:9a:d9:02:21:
44:b1:2d:8b:e3:79:43:fb:01:0f:c4:97:d8:4c:a2:
cd:90:09:f2:43:5e:6c:52:58:43:16:e5:27:ed:af:
13:e2:84:49:bf:62:50:9f:c9:25:c9:3b:29:03:f4:
23:18:bc:41:02:89:c6:db:81:14:7b:0a:22:c0:82:
18:f1:51:bc:81:73:c8:dd:d5:c9:75:18:e9:7d:ae:
d9:8e:9c:b3:f5:c3:95:af:a5:f9:2e:43:8e:f2:b6:
8d:dc:21:67:64:1f:e3:ba:2c:2f:11:c4:d3:b9:20:
dd:cf:40:72:54:00:0c:7d:2f:a5:b7:07:1e:f7:25:
d6:60:ed:6e:35:cf:81:34:58:8e:e6:8a:a5:16:01:
06:89:3e:c5:74:b5:d7:57:d9:5b:63:47:8e:db:f6:
9e:0b:ba:9b:33:3b:04:90:29:ac:e3:0f:7a:5d:58:
d4:50:3d:c8:91:47:75:4a:5a:04:f0:ba:b5:70:7b:
ad:68:59:95:17:17:ff:ef:e0:f8:4f:cd:eb:1b:6e:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D1:73:88:C3:8B:18:60:11:BA:3F:A8:CB:CA:22:F9:EE:FD:58:CC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oNFziMOLGGARuj-oy8oi-e79WMw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.112.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:6c:25:26:76:cf:18:57:ba:6e:23:38:df:1a:13:a7:1b:ec:
15:ec:bb:0b:64:ff:5f:43:4a:0b:58:ed:60:39:9e:0a:11:58:
4f:19:8a:aa:f5:a0:42:35:27:22:d5:93:78:09:8d:00:93:a0:
6c:8b:78:6b:04:32:ad:fd:01:09:4c:51:55:ae:12:ea:b4:f7:
6f:36:42:87:e9:95:05:8b:a7:27:0c:c1:70:27:79:92:7a:96:
54:94:3e:8f:e5:29:50:c5:ee:0e:4d:97:42:8e:44:eb:37:4a:
a1:d6:3d:27:e2:2c:24:4e:38:2b:d1:93:06:ce:fc:91:3a:4e:
8b:b3:c8:9f:10:92:54:72:21:ca:36:12:37:a9:a8:08:b8:99:
2a:29:b6:07:89:0a:d5:66:32:9b:e6:40:13:01:e7:96:29:91:
ba:25:98:21:6c:ff:97:75:60:4c:bd:72:4b:bb:66:f0:71:43:
d2:69:0e:f6:02:da:18:85:0d:f2:a4:0a:6d:6c:b0:d8:70:0a:
6e:1b:9e:3d:8f:5e:fc:47:96:43:f6:d0:34:1a:32:38:fc:13:
8a:2a:3b:1a:84:c6:2e:d5:63:94:5d:39:e0:b3:48:01:c4:e3:
13:77:60:85:6c:56:4b:09:ec:87:56:c0:77:45:ac:cf:2d:48:
56:1d:01:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org