Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tbBaEgfPaGaRpsJbal-IKy6tw4M.roa
File: tbBaEgfPaGaRpsJbal-IKy6tw4M.roa (raw, json)
Hash identifier: jAE3SWurDlCObhwRo19Id3kUwoeHcfrenbwNLGXZyXk=
Subject key identifier: B5:B0:5A:12:07:CF:68:66:91:A6:C2:5B:6A:5F:88:2B:2E:AD:C3:83
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AB5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tbBaEgfPaGaRpsJbal-IKy6tw4M.roa
Signing time: Fri 01 Sep 2023 10:08:13 +0000
ROA not before: Fri 01 Sep 2023 10:08:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.193.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10933 (0x2ab5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B5B05A1207CF686691A6C25B6A5F882B2EADC383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:af:72:bf:83:46:67:d3:47:84:86:f2:65:0d:
d3:57:38:6c:08:7f:3f:b6:e8:26:42:83:d9:75:24:
bc:1b:f5:aa:4b:4f:c8:7f:12:25:ea:29:49:d6:ac:
42:52:97:a8:71:a3:33:ca:94:3c:87:b8:9a:97:67:
09:51:2c:39:cc:b9:c1:a4:fc:01:2f:53:76:1a:ab:
48:d6:d5:db:84:38:a2:a1:30:c9:d6:18:c8:91:e7:
53:5a:66:9f:0e:53:e3:e9:77:a1:11:47:9b:db:73:
ec:b3:01:68:4e:66:8d:29:4f:1e:a3:5b:89:c9:47:
ba:0e:5f:e6:b7:c8:80:13:20:98:fa:bf:ed:d8:28:
63:2e:28:58:31:5a:ee:4b:16:ce:9b:3a:ae:b6:22:
a9:82:98:2c:0d:0b:dd:e6:ff:7b:ba:e8:5b:69:bf:
da:f4:22:fa:90:aa:cf:4e:71:f1:e8:bd:cb:4b:3e:
79:cf:63:bf:8b:d6:c7:82:cf:64:bb:0d:53:bf:bb:
06:e3:a4:b6:85:dd:1f:b9:27:0a:d8:28:44:ec:78:
21:b4:c7:81:e4:b4:c0:55:89:09:75:df:c4:a8:22:
cf:dc:e2:18:84:f2:e5:27:cd:01:a0:10:67:32:77:
1b:17:54:3c:a4:7a:94:df:6c:d7:a8:12:31:4f:fb:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B0:5A:12:07:CF:68:66:91:A6:C2:5B:6A:5F:88:2B:2E:AD:C3:83
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tbBaEgfPaGaRpsJbal-IKy6tw4M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.0.0/18
Signature Algorithm: sha256WithRSAEncryption
4b:5a:d0:1b:20:64:fb:73:a1:2f:ff:40:58:91:63:b1:c1:36:
14:1d:51:a1:a7:c8:df:44:71:6d:16:58:58:3e:8a:0c:a1:fa:
43:0a:2a:a1:ab:98:0b:96:04:9f:d4:36:4e:60:96:9d:bc:0a:
79:91:a9:29:b6:44:46:9f:e8:31:3d:d0:5d:30:66:57:07:39:
f8:bf:b5:e5:6d:b4:d0:1a:27:3d:a3:39:98:d8:e2:f0:6d:b2:
21:51:05:85:3d:91:9d:ba:77:b8:70:0e:cb:0c:33:60:43:ba:
71:7c:37:f3:03:27:b5:1c:e7:22:d5:c4:34:79:41:e2:ae:64:
f0:a9:e5:da:5c:d4:f4:89:10:77:be:80:3d:67:a4:21:45:3d:
fa:a4:7e:f2:6b:2b:aa:7a:bb:ad:4b:25:a5:3b:d4:e4:b8:2c:
f2:7f:87:4c:32:b0:bf:9a:f0:d4:2a:21:d4:85:0b:08:8e:5b:
fe:30:d1:e2:dc:42:18:f4:34:f5:d8:92:9a:b6:0e:6c:5b:c2:
b8:b4:7c:2a:24:dc:39:16:fe:97:57:71:d0:0e:90:97:72:5b:
df:21:1e:93:5f:5b:f4:02:26:a0:56:0a:f0:0f:0a:2b:36:90:
91:03:0c:10:2b:89:25:f0:48:17:76:dc:54:5c:a5:6e:96:28:
08:29:be:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org