Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q7R0DRSW3bxHXu44t5JQOGmk40E.roa
File: q7R0DRSW3bxHXu44t5JQOGmk40E.roa (raw, json)
Hash identifier: 7f7UBaK21/XcglyLthPhCY3YUHJJrKXXls1F/n0lhUU=
Subject key identifier: AB:B4:74:0D:14:96:DD:BC:47:5E:EE:38:B7:92:50:38:69:A4:E3:41
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A27
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q7R0DRSW3bxHXu44t5JQOGmk40E.roa
Signing time: Fri 01 Sep 2023 10:07:33 +0000
ROA not before: Fri 01 Sep 2023 10:07:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.84.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10791 (0x2a27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ABB4740D1496DDBC475EEE38B792503869A4E341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:93:33:5b:63:ed:de:f8:21:16:c5:c5:bf:62:
3c:00:36:f9:32:45:14:a4:b0:65:a2:cd:60:d3:95:
9a:93:d1:fe:0b:65:05:13:b7:12:b3:53:10:da:c7:
cb:f9:ca:85:99:41:1f:fe:8c:c4:65:3c:fa:59:ee:
28:6b:c6:4e:89:3c:41:23:f0:74:1f:b3:be:91:e8:
9b:1c:9b:fb:a2:c7:78:04:aa:ad:15:d2:b7:aa:5b:
9b:c0:a1:1a:be:93:96:49:29:18:b4:c8:9d:2e:16:
28:24:a4:d9:bd:f0:03:51:06:bb:aa:08:c8:6c:a9:
24:a8:91:62:d5:49:06:91:5b:33:d3:c6:45:bc:96:
eb:74:b0:0a:e9:b8:8b:d0:26:a3:a3:84:b8:2d:3e:
f5:84:47:40:0a:b2:8c:64:8a:ec:c8:11:50:05:71:
e1:2d:d2:35:4b:29:94:44:54:83:07:84:46:b9:26:
73:eb:29:72:9a:a1:e6:2c:d2:cc:4b:31:6e:c4:98:
08:37:15:0a:14:0a:cc:c6:9e:b7:0b:22:12:9d:12:
54:ab:6e:c1:9d:f8:01:0e:34:07:5c:b6:1c:5b:d7:
33:7e:32:10:a6:5c:fd:87:44:76:1e:30:46:5d:15:
db:e3:57:00:e0:dd:a1:28:38:34:5a:59:71:b5:90:
e3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B4:74:0D:14:96:DD:BC:47:5E:EE:38:B7:92:50:38:69:A4:E3:41
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q7R0DRSW3bxHXu44t5JQOGmk40E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.84.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:58:ab:96:f9:a3:1d:5a:74:95:a3:87:84:d9:67:20:cc:15:
9a:5a:7c:31:18:f7:2e:95:ed:32:a5:6d:74:d5:6b:e8:ea:16:
86:17:0b:7b:df:2b:99:82:db:be:8c:87:4d:03:91:8a:fc:73:
09:64:1d:97:76:8c:69:01:ea:b8:c9:05:f6:db:8c:03:56:b8:
3f:58:d4:cd:b3:b2:83:13:ea:63:45:37:a7:89:60:db:d1:0d:
2f:d1:32:8c:9f:4b:25:53:96:38:08:27:24:2b:1d:69:37:4f:
de:ae:f6:60:78:58:4f:7f:d1:04:d8:a7:89:97:5c:8e:80:c9:
c3:66:ac:2c:3d:81:c4:9d:83:26:ad:34:16:cc:dd:48:83:5d:
bc:42:87:51:f9:06:1a:78:5c:00:2e:52:dd:6e:f5:38:5a:9f:
c4:dc:57:19:20:82:3e:56:c7:b8:6c:d6:50:7c:86:e8:78:b6:
07:49:22:cd:2e:6c:98:c1:2e:5a:ed:4b:63:02:44:99:1d:52:
9f:5d:15:3b:37:bf:33:6b:93:da:69:bb:7e:50:ff:76:8e:cd:
9f:24:8f:e2:6e:2a:67:20:49:a7:23:2a:6c:9f:69:4b:60:68:
41:e1:b8:85:5a:86:e3:85:86:71:96:0e:89:7c:f0:82:e3:f8:
f0:ce:4f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org