Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uTil4-lQQz013GDZMVPIdM5_NZc.roa
File: uTil4-lQQz013GDZMVPIdM5_NZc.roa (raw, json)
Hash identifier: p7rGfTowaYe2nXZMftXpxFZkoq9pyszZq1DNFiyCOnw=
Subject key identifier: B9:38:A5:E3:E9:50:43:3D:35:DC:60:D9:31:53:C8:74:CE:7F:35:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28F8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uTil4-lQQz013GDZMVPIdM5_NZc.roa
Signing time: Fri 01 Sep 2023 10:05:59 +0000
ROA not before: Fri 01 Sep 2023 10:05:59 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10488 (0x28f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:59 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B938A5E3E950433D35DC60D93153C874CE7F3597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:c3:48:e9:18:35:6b:e9:c6:6a:f0:e7:c7:
31:9c:45:9d:89:50:12:a5:8d:e6:d5:4d:93:ea:78:
53:51:84:61:19:62:2f:ea:07:4b:2b:f2:07:94:71:
21:73:98:2f:a7:0f:38:9d:e9:47:ea:ec:f8:ab:27:
f7:fe:04:ec:d4:24:af:fb:99:42:ce:a2:89:45:02:
14:db:d9:0e:ca:a1:15:c6:0d:55:ea:f1:3c:c1:25:
b2:5f:eb:17:ed:ce:3e:31:82:8d:94:de:ff:8e:c5:
d4:a3:4e:34:e6:9e:cb:53:ea:24:4c:41:99:79:60:
07:5b:69:6c:74:14:29:88:5f:45:50:f4:2f:64:a1:
dd:e5:62:1a:ef:ad:4f:ed:e8:8f:f1:8b:b3:05:01:
e9:9a:8d:7f:6a:38:3a:1c:a7:e6:58:13:e5:d0:46:
19:44:0d:fc:ef:cc:3b:20:2e:3a:83:cb:46:a5:9d:
14:ae:87:7e:e2:34:f0:9b:58:dd:f4:f4:fd:8f:54:
f0:37:1d:82:ca:7e:9d:9d:b3:de:a5:19:1d:e8:c5:
62:2e:ef:cc:bc:74:3e:71:22:f1:28:56:55:bd:ca:
f3:35:c9:19:6b:cc:bb:53:66:47:f9:e7:32:56:7f:
d4:90:2d:75:f9:1f:c0:4a:35:37:43:4c:24:56:89:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:38:A5:E3:E9:50:43:3D:35:DC:60:D9:31:53:C8:74:CE:7F:35:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uTil4-lQQz013GDZMVPIdM5_NZc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:6a:f9:e1:e7:1b:b0:2a:e8:b9:c8:a0:e3:da:d9:78:c6:5e:
e7:be:b1:bf:fd:39:0a:6a:fe:cc:b8:48:4a:a4:1a:10:a7:73:
5d:85:c7:be:8e:fc:88:71:b9:8f:3a:61:9b:21:aa:6c:52:c1:
21:c5:0b:43:78:45:56:28:be:1c:11:9a:64:fb:cb:54:65:85:
58:be:1d:12:6d:c6:8c:01:06:48:43:64:d4:cf:d5:7e:54:04:
27:69:e9:a8:b3:e7:29:c9:fe:64:8a:20:f5:2f:08:20:f8:52:
34:9c:44:2f:c3:49:8c:3c:cc:a7:01:4a:cf:02:c2:ad:79:16:
8b:fe:bd:1d:92:15:74:44:12:ba:1f:78:8f:da:5e:f6:6f:90:
70:04:07:05:0e:c7:94:f4:12:5a:46:b6:a0:9d:5a:3a:fb:b7:
5d:43:e8:25:08:c7:14:99:00:bb:1d:84:68:5c:30:ad:29:90:
e7:77:22:81:57:02:01:b8:5f:c5:6b:72:a9:70:eb:58:ad:d9:
fc:0d:e1:27:46:01:f9:31:5e:d3:9c:ed:2a:e1:a8:32:5b:22:
ed:8f:26:62:a3:67:54:d1:50:32:97:68:8a:53:13:6a:82:14:
86:49:ab:72:84:c5:90:86:0f:43:d7:4a:b0:12:3f:ac:65:09:
02:72:17:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org