Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oPw5GV01TOR7JoqdMV7sgkqLAnI.roa
File: oPw5GV01TOR7JoqdMV7sgkqLAnI.roa (raw, json)
Hash identifier: gv6g4cVwgW1tsYOyZUSYJcLCbrCRhweHRBBmn1fKYNM=
Subject key identifier: A0:FC:39:19:5D:35:4C:E4:7B:26:8A:9D:31:5E:EC:82:4A:8B:02:72
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AD0
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oPw5GV01TOR7JoqdMV7sgkqLAnI.roa
Signing time: Fri 01 Sep 2023 10:08:19 +0000
ROA not before: Fri 01 Sep 2023 10:08:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10960 (0x2ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A0FC39195D354CE47B268A9D315EEC824A8B0272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:72:dc:b9:a1:cc:72:0f:11:da:9e:3f:53:
3c:8f:5e:9b:1a:0c:70:bf:f6:95:68:02:fc:9c:70:
06:c1:19:dd:0b:7d:96:05:23:a8:f2:c0:e1:1a:1b:
23:51:8f:1a:85:67:5f:9f:94:44:22:a9:1f:23:68:
c3:a6:c7:85:ee:bf:d0:d0:70:dc:d2:4e:35:df:ee:
8f:8c:f3:29:de:9b:be:f1:81:8a:75:3f:bc:bc:80:
45:a0:00:d5:bc:4c:ae:c0:12:30:62:0b:40:63:f1:
27:a4:00:b2:5c:3f:14:0a:4f:45:83:d8:01:8f:6a:
47:f9:d5:94:1d:cc:1c:ba:24:d8:2d:05:30:46:3e:
f2:9e:2d:3e:1e:9a:00:f9:b2:62:93:3e:3e:a4:8d:
34:c3:32:ac:c2:37:a7:a4:ed:02:69:3a:09:d1:2d:
6b:a0:4d:f6:96:40:79:b7:a6:90:c3:55:1f:d3:34:
b7:0e:2d:bb:bf:cb:a5:47:03:e2:fd:fe:6d:77:1e:
41:43:2a:d8:32:dd:64:dd:f3:b2:6d:dd:44:36:63:
0e:99:e1:78:a8:7d:ed:65:bc:d7:8c:bf:48:4b:69:
76:c1:1a:19:01:16:92:19:94:15:a5:55:dd:32:ac:
95:f7:eb:fc:9a:eb:ad:47:c4:8b:b8:62:bf:35:1a:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FC:39:19:5D:35:4C:E4:7B:26:8A:9D:31:5E:EC:82:4A:8B:02:72
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/oPw5GV01TOR7JoqdMV7sgkqLAnI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.188.0/22
Signature Algorithm: sha256WithRSAEncryption
85:7e:c8:24:86:35:b9:a1:5a:b4:e2:62:15:f8:85:07:6e:55:
36:47:67:d0:5d:f2:f9:f3:64:42:d6:30:ba:b5:4f:7d:cb:81:
e5:a3:e2:cb:1d:f7:f3:77:b5:2c:99:6f:b9:6c:43:a9:15:05:
16:a5:2f:7d:1b:b9:f6:07:ac:52:27:36:98:14:78:ea:fb:5f:
35:3e:f2:08:34:23:04:50:b3:5e:d9:9a:08:b4:fb:f1:60:67:
d1:b4:c8:76:a0:4e:81:66:51:fd:0f:2e:c3:14:b1:6a:ad:15:
11:5c:8f:40:6b:17:94:ea:f1:e7:07:07:cb:16:5b:2b:bf:1b:
ca:ea:08:f4:34:4c:f1:60:13:75:bb:de:ca:b5:1f:11:75:14:
b8:43:24:c5:58:6b:59:55:63:85:d1:fc:3e:90:65:86:fa:8e:
75:21:08:c6:99:12:46:cf:94:a7:6f:d7:37:4e:d8:3a:66:b4:
0f:8c:e7:cc:b3:d9:cd:01:ea:7a:32:90:e6:73:47:94:91:43:
aa:db:4c:f1:97:cf:68:52:f0:ed:ae:53:21:c9:ba:41:02:a5:
03:0c:9a:78:51:0f:c5:54:d4:3e:93:d4:e8:98:d5:dc:33:3e:
59:d3:89:1c:8e:12:df:b4:22:6e:36:19:36:67:7f:56:20:8b:
84:5e:53:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org