Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rQK5lnNwF4VRmmxj9dpMeeU2CTE.roa
File: rQK5lnNwF4VRmmxj9dpMeeU2CTE.roa (raw, json)
Hash identifier: YLv3YPgJIeckTjqRSvnVdAsWroyPblRXFTzN3K3XNiI=
Subject key identifier: AD:02:B9:96:73:70:17:85:51:9A:6C:63:F5:DA:4C:79:E5:36:09:31
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2811
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rQK5lnNwF4VRmmxj9dpMeeU2CTE.roa
Signing time: Fri 01 Sep 2023 10:04:54 +0000
ROA not before: Fri 01 Sep 2023 10:04:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.152.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10257 (0x2811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AD02B99673701785519A6C63F5DA4C79E5360931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:62:3a:17:18:18:cd:6e:0b:1d:64:56:62:
c0:33:cb:f4:11:b4:64:a2:ce:3f:80:43:af:7b:24:
97:87:94:fa:9c:5f:bc:f5:bf:68:c7:76:e9:b2:2d:
83:10:3b:36:7b:86:49:52:06:24:f5:b8:2d:75:a5:
5a:b2:38:23:47:1b:b8:8e:cf:87:89:8d:b3:65:0a:
52:32:c7:28:c9:1c:ba:03:84:08:bd:7f:f1:08:a8:
55:0e:7c:f6:03:4b:d4:a5:b6:37:f0:a9:36:67:e4:
e3:3c:8f:47:c9:d0:a3:e3:56:98:88:a1:e0:86:c9:
0a:fc:f0:41:b5:73:ff:34:0b:77:08:7c:08:7e:c5:
c5:6a:a4:28:93:e0:a4:b6:51:23:e2:a4:b6:9e:53:
3c:54:49:e8:c0:0b:ef:f1:af:0c:46:87:ee:8a:aa:
a7:2c:18:15:3d:2b:d2:4b:60:2e:76:1d:7c:d3:2c:
22:03:e0:80:31:af:c3:72:33:26:6f:e1:a9:99:f1:
fa:f1:e6:65:66:8d:e1:bd:c6:81:8c:11:d1:38:78:
c5:42:f6:58:c3:3c:40:e5:3c:99:c0:30:2d:29:5e:
5e:c6:ef:22:6e:8e:1b:aa:56:68:e2:bc:bc:f3:c2:
5d:54:ce:c7:85:59:f1:59:16:fa:de:5d:c9:a6:e1:
79:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:B9:96:73:70:17:85:51:9A:6C:63:F5:DA:4C:79:E5:36:09:31
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/rQK5lnNwF4VRmmxj9dpMeeU2CTE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.152.0/22
Signature Algorithm: sha256WithRSAEncryption
17:5a:e8:27:ca:76:d0:91:5d:e5:17:38:f9:5e:9b:af:16:e0:
0e:04:ea:50:c7:61:bc:9a:4e:d2:3a:75:90:01:c4:ac:13:44:
32:d3:85:d0:65:ec:22:a9:b8:86:58:f5:8d:a1:f4:87:f6:ea:
7a:ef:7f:07:f3:13:a7:17:de:9e:0e:d5:d2:25:5f:81:59:f0:
2e:98:f4:c4:84:9d:d5:3f:68:0f:9b:2c:65:17:60:b8:2f:c0:
0a:6b:c0:02:31:95:b9:48:c9:94:e8:46:61:60:8f:c2:e1:74:
06:7e:92:2b:5a:e2:50:ba:f5:e9:10:7c:e6:ec:9b:d6:eb:12:
88:e3:b3:76:10:b8:fd:8e:87:05:7b:d8:e1:c3:aa:d2:96:f3:
8e:8b:dd:6d:cd:37:88:9d:22:61:68:fa:19:0f:1d:05:0a:70:
44:b4:5a:8e:38:d8:c0:e4:0d:d5:4b:3d:9d:68:7e:a5:70:7a:
7c:43:11:d3:98:c7:b1:d9:bc:4b:5d:e9:99:62:74:89:15:d7:
14:9f:65:14:0e:b9:ec:f4:e5:3a:09:d6:44:80:ac:9b:0c:f5:
ae:c8:55:d6:41:9f:5d:ca:31:4e:32:a3:fb:c0:bc:12:0d:d6:
88:c2:5a:81:33:b0:72:bf:05:c4:ee:9c:c3:eb:12:1b:b9:51:
8a:58:ef:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org