Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t_k-s0TU6uSd-jZy_zgf0URKG6E.roa
File: t_k-s0TU6uSd-jZy_zgf0URKG6E.roa (raw, json)
Hash identifier: f7kB7oWk5f/VQtJIuyGlXpzw2WkctGnXezU2AKTcCh8=
Subject key identifier: B7:F9:3E:B3:44:D4:EA:E4:9D:FA:36:72:FF:38:1F:D1:44:4A:1B:A1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2872
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t_k-s0TU6uSd-jZy_zgf0URKG6E.roa
Signing time: Fri 01 Sep 2023 10:05:20 +0000
ROA not before: Fri 01 Sep 2023 10:05:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10354 (0x2872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B7F93EB344D4EAE49DFA3672FF381FD1444A1BA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c3:fe:7f:07:a5:dd:39:b8:33:10:cd:f7:5b:
8c:56:b9:06:5d:66:dc:a5:21:d5:9b:38:fc:72:50:
b8:69:55:0c:f9:4d:8c:25:7b:18:7d:89:2f:3f:ed:
27:c3:a7:6e:7f:6e:8a:27:05:5b:82:d8:a7:a8:3a:
ee:31:df:2e:d7:c6:d6:02:39:fd:67:b1:a6:02:79:
58:52:bf:78:6e:eb:da:2c:2d:b2:2f:f3:9a:8c:9e:
9d:da:b5:07:fc:7d:26:cc:3a:c6:a1:e2:59:cb:65:
e5:08:19:4d:f4:29:51:01:63:99:10:68:6e:c6:b7:
66:db:b9:33:2f:36:1f:7a:a6:f4:cc:87:eb:99:33:
0b:8a:bf:67:be:28:a9:5c:a8:a1:6b:d9:91:41:e0:
46:12:65:a1:24:9e:e9:e4:ef:b3:ba:1a:39:b0:0e:
db:14:47:d4:1c:c2:b4:dd:9f:37:6e:f9:43:11:a4:
2e:e7:e4:34:c5:1c:39:85:53:80:31:bf:6c:b7:5b:
f2:d6:a5:95:c3:c1:59:34:85:3d:d6:57:e6:0d:96:
e6:66:dd:e4:64:91:c2:2a:de:f7:9c:be:4d:be:6c:
b7:48:4f:af:8e:10:37:68:df:53:6b:1f:8e:3c:69:
bb:98:e5:a5:13:1d:51:66:3b:a6:1f:7d:6b:c7:d9:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:F9:3E:B3:44:D4:EA:E4:9D:FA:36:72:FF:38:1F:D1:44:4A:1B:A1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t_k-s0TU6uSd-jZy_zgf0URKG6E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.188.0/22
Signature Algorithm: sha256WithRSAEncryption
34:18:72:5f:e8:7d:5a:7c:d2:66:dd:ed:2d:99:b7:e0:a7:e0:
d0:20:bf:37:28:27:20:01:9d:27:0e:3f:76:da:5f:a4:54:a1:
8d:75:5c:0a:a2:a1:b4:47:3a:ea:39:c4:43:ce:e4:95:0e:a0:
39:a7:26:9d:0a:67:0b:41:d4:c1:54:64:0f:47:1b:ea:8a:fe:
1e:29:66:18:f8:76:51:c8:6b:c6:81:62:0d:ec:0f:30:c5:17:
38:e5:b8:46:68:0d:c5:f3:e0:e5:d1:e6:d5:9c:16:76:9c:dc:
36:91:fc:ae:8f:89:06:96:18:48:b4:62:04:39:bb:e4:83:1b:
5a:38:f0:d7:02:5e:44:5b:21:03:04:24:86:1e:69:fc:3e:bd:
fa:20:26:81:73:04:fb:70:49:15:37:0e:ad:a2:98:d4:ab:61:
2d:01:30:47:0b:aa:7c:a8:6e:ec:96:9f:b3:bc:e0:33:53:5a:
7a:8e:c4:b4:5e:6e:0e:2b:e1:b1:73:f6:9c:66:1d:54:89:7a:
d2:e8:30:31:11:a8:5c:73:c5:c1:d3:bb:1f:86:96:bc:33:81:
39:52:d5:7b:2c:a5:33:56:cf:af:34:91:26:a7:48:3b:fe:ff:
2f:0e:dc:35:ff:35:b7:34:f0:08:47:5c:88:3b:03:2d:01:27:
8f:f6:03:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org