Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sacDgwm5EGtyF7Z6JKtv33VyURI.roa
File: sacDgwm5EGtyF7Z6JKtv33VyURI.roa (raw, json)
Hash identifier: Pzd/9OgFtdaevrJKTE+m3qGHrlT/RNXEEDBkpXG+N5U=
Subject key identifier: B1:A7:03:83:09:B9:10:6B:72:17:B6:7A:24:AB:6F:DF:75:72:51:12
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28B3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sacDgwm5EGtyF7Z6JKtv33VyURI.roa
Signing time: Fri 01 Sep 2023 10:05:41 +0000
ROA not before: Fri 01 Sep 2023 10:05:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10419 (0x28b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B1A7038309B9106B7217B67A24AB6FDF75725112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:e5:5d:a1:44:21:17:f4:62:b9:d8:77:39:
ba:f0:e6:d6:26:de:b5:41:ad:65:0c:41:6f:f3:ee:
64:84:8a:c8:88:a6:62:c0:48:5f:bd:49:2b:27:ab:
0d:ae:f2:fc:8d:a7:29:22:8e:ec:18:e6:5a:22:f4:
fa:8d:89:47:a7:3f:f7:02:90:66:e0:c1:39:4d:96:
58:d7:37:77:5f:e0:73:c7:6b:f6:c7:31:44:28:9a:
1b:00:ea:77:fb:30:3b:3e:a0:4e:8a:84:a8:be:29:
a9:b7:22:65:60:a1:bd:51:7a:aa:95:98:d3:67:f2:
5d:46:df:5e:71:c0:e6:78:5b:e9:14:e1:d8:c3:eb:
f2:95:10:a1:df:17:76:4b:a1:dd:a3:4f:8c:db:ed:
b5:f2:51:04:e1:ac:53:69:e3:e7:cf:48:69:a6:52:
46:22:8c:40:94:da:66:f0:71:d8:ca:c8:d8:be:73:
4b:ca:fd:a0:68:1a:43:bb:0a:8b:0e:b5:27:82:84:
88:b5:92:54:98:66:0d:46:ea:d5:1b:95:ce:c1:58:
0b:c5:7a:06:ef:3d:7a:26:48:f1:5b:ab:7e:12:46:
7c:3e:b4:41:44:70:f3:e2:85:86:f5:cd:bc:fc:9b:
ad:51:9c:5d:c1:1c:e6:36:d5:26:f6:54:b7:e8:50:
4a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A7:03:83:09:B9:10:6B:72:17:B6:7A:24:AB:6F:DF:75:72:51:12
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sacDgwm5EGtyF7Z6JKtv33VyURI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.107.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:75:82:07:4a:ff:ff:dc:94:b6:ca:fe:8f:cf:90:e9:37:40:
05:89:3b:d5:28:7b:90:22:73:6f:72:be:8b:15:5a:d2:a9:f0:
63:d4:eb:66:bc:eb:d1:11:5e:21:07:07:bf:5b:e3:ee:1e:8d:
09:cf:ba:3d:58:c9:3c:43:c5:3b:ad:b5:37:d8:46:16:76:4f:
a3:91:87:ea:7f:f5:fe:7a:03:02:b6:ce:e8:da:16:d2:4c:50:
87:00:f8:76:8c:1e:db:0c:9a:8c:c9:7c:e6:25:80:de:30:5d:
14:33:fd:07:05:ba:0e:0e:85:03:73:a7:39:18:97:bc:d9:e4:
cf:bc:bc:c2:67:4f:24:18:1b:07:1a:e7:47:c3:35:68:c9:c5:
35:3a:ff:50:3b:2c:60:3e:bf:a2:45:7b:82:18:16:e7:25:e7:
fc:99:c3:04:ef:14:2b:07:1f:61:b2:59:c9:fd:0a:af:1c:36:
c7:2e:5a:e0:aa:85:f2:7d:dd:0d:5e:59:db:f8:50:f1:47:1c:
b4:02:9b:17:98:27:21:a0:d4:82:69:62:50:99:a7:48:7d:13:
ad:64:30:2b:de:18:f8:38:92:2d:49:9c:41:d5:40:7f:89:cc:
1c:9d:e1:1e:b3:c8:5c:95:15:3e:4f:da:5e:0e:e3:dd:2e:56:
8a:88:ae:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org