Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uThi-p3IuyJNNe3ZxPimKZUzLbc.roa
File: uThi-p3IuyJNNe3ZxPimKZUzLbc.roa (raw, json)
Hash identifier: 5BDXySGqPtDp8RTgt1oleGKokNNYddYFi4LyiFRRDG4=
Subject key identifier: B9:38:62:FA:9D:C8:BB:22:4D:35:ED:D9:C4:F8:A6:29:95:33:2D:B7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29CC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uThi-p3IuyJNNe3ZxPimKZUzLbc.roa
Signing time: Fri 01 Sep 2023 10:07:05 +0000
ROA not before: Fri 01 Sep 2023 10:07:05 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.120.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10700 (0x29cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:05 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B93862FA9DC8BB224D35EDD9C4F8A62995332DB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:31:34:88:fc:d5:c1:1b:c0:c7:0e:f6:65:
72:fb:e6:ee:45:88:c3:f9:45:a9:fd:dd:6e:d6:0e:
ed:07:8f:13:3b:08:36:01:9f:62:df:6f:85:e9:92:
62:88:fa:b7:59:39:b9:3c:b9:a8:14:7e:54:23:15:
7d:00:3d:a6:d5:a3:af:eb:14:09:27:7b:1f:bf:47:
75:b7:91:8f:0e:86:62:4f:6d:49:12:78:b0:a5:a0:
59:36:ec:93:62:92:d8:a4:39:66:0d:9b:23:49:97:
fb:0b:1b:ca:f5:66:46:78:6a:c8:48:6c:5e:ef:84:
39:69:f4:ef:b6:66:fd:59:ff:31:55:79:ee:91:e9:
6e:b7:ce:be:9c:d3:9b:d4:b8:3e:14:f4:8b:c8:9f:
91:2a:ab:63:54:16:9e:c4:f4:e3:ed:85:ec:9f:02:
27:bf:bc:ad:b3:08:9c:04:e4:6d:92:0a:71:21:21:
09:d7:c2:cb:b2:3a:92:ff:39:a4:25:18:ce:cb:5b:
62:fd:4e:bd:9f:7d:63:af:53:72:74:f7:a1:be:4b:
ab:0b:34:76:4e:d5:91:21:23:80:60:8b:cb:cf:f3:
33:7a:7b:e7:ba:f3:1f:1c:fb:96:fc:50:3f:6d:47:
fd:bf:7a:8a:a6:9a:df:34:43:ba:6a:7a:35:a3:7b:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:62:FA:9D:C8:BB:22:4D:35:ED:D9:C4:F8:A6:29:95:33:2D:B7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uThi-p3IuyJNNe3ZxPimKZUzLbc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.120.0/21
Signature Algorithm: sha256WithRSAEncryption
80:9d:a6:0c:79:f8:24:ad:ec:8c:f6:15:88:73:2a:40:7a:7b:
7f:9c:dd:ea:5c:d3:69:76:79:73:d9:2e:b1:9f:ac:f5:87:a0:
7b:5e:c7:86:7e:ed:2a:3a:e7:b3:6f:05:0a:8a:9e:70:d6:52:
26:14:6f:55:2a:ef:ff:98:18:45:1f:8e:14:f6:05:b0:18:6f:
69:2a:16:d7:d5:dd:df:d1:2c:72:d1:0c:85:82:b2:bb:4a:07:
c1:a9:79:21:3f:bb:96:21:dc:c6:f7:f7:0f:38:99:9d:20:0b:
c6:b9:36:03:41:bf:81:8d:23:82:fa:04:53:85:5b:45:71:1a:
59:d2:dc:b9:c8:55:a9:f1:bb:4d:d3:33:b7:47:96:77:a4:e5:
79:9c:41:8c:01:d7:bc:9d:3b:8e:45:75:e0:bc:42:1e:82:6f:
47:eb:6a:a1:64:30:3a:6d:fc:8c:ce:8f:2a:a6:0b:67:40:27:
0a:0b:d7:3f:07:b1:cd:28:e2:b3:a0:e5:ff:ac:d2:5b:fd:a7:
81:b7:f5:43:a2:9e:aa:bc:58:3b:b4:5e:cf:09:4c:8d:26:76:
0c:b8:88:26:5f:1b:97:42:72:d3:be:e6:d8:97:ed:48:b9:f2:
4d:8c:e9:98:25:d7:3f:f7:a9:5a:69:9e:b2:db:bf:85:f0:88:
f3:8c:c1:25
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKcwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MDVaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI5Mzg2MkZBOURDOEJC
MjI0RDM1RUREOUM0RjhBNjI5OTUzMzJEQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzwzE0iPzVwRvAxw72ZXL75u5FiMP5Ran93W7WDu0HjxM7CDYB
n2Lfb4XpkmKI+rdZObk8uagUflQjFX0APabVo6/rFAknex+/R3W3kY8OhmJPbUkS
eLCloFk27JNiktikOWYNmyNJl/sLG8r1ZkZ4ashIbF7vhDlp9O+2Zv1Z/zFVee6R
6W63zr6c05vUuD4U9IvIn5Eqq2NUFp7E9OPtheyfAie/vK2zCJwE5G2SCnEhIQnX
wsuyOpL/OaQlGM7LW2L9Tr2ffWOvU3J096G+S6sLNHZO1ZEhI4Bgi8vP8zN6e+e6
8x8c+5b8UD9tR/2/eoqmmt80Q7pqejWjeyBxAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuThi+p3IuyJNNe3ZxPimKZUzLbcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VUaGktcDNJdXlKTk5lM1p4
UGltS1pVekxiYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wngwDQYJKoZIhvcNAQELBQADggEBAICdpgx5+CSt7Iz2FYhzKkB6e3+c3epc02l2
eXPZLrGfrPWHoHtex4Z+7So657NvBQqKnnDWUiYUb1Uq7/+YGEUfjhT2BbAYb2kq
FtfV3d/RLHLRDIWCsrtKB8GpeSE/u5Yh3Mb39w84mZ0gC8a5NgNBv4GNI4L6BFOF
W0VxGlnS3LnIVanxu03TM7dHlnek5XmcQYwB17ydO45FdeC8Qh6Cb0fraqFkMDpt
/IzOjyqmC2dAJwoL1z8Hsc0o4rOg5f+s0lv9p4G39UOinqq8WDu0Xs8JTI0mdgy4
iCZfG5dCctO+5tiX7Ui58k2M6Zgl1z/3qVppnrLbv4XwiPOMwSU=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org