Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uf9zcVOoCYW-aHrZF0xmRHadDYw.roa
File: uf9zcVOoCYW-aHrZF0xmRHadDYw.roa (raw, json)
Hash identifier: mZhlnJqEyjXXy0ZmtZ+gPYlH90haGr33FV50KUG3454=
Subject key identifier: B9:FF:73:71:53:A8:09:85:BE:68:7A:D9:17:4C:66:44:76:9D:0D:8C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29C9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uf9zcVOoCYW-aHrZF0xmRHadDYw.roa
Signing time: Fri 01 Sep 2023 10:07:04 +0000
ROA not before: Fri 01 Sep 2023 10:07:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10697 (0x29c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B9FF737153A80985BE687AD9174C6644769D0D8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:1e:39:28:51:d1:d5:82:cd:ff:cf:2c:9f:
d0:35:b8:c8:89:89:00:fa:b2:c2:87:7d:c6:eb:71:
da:99:c3:b5:46:00:8f:a8:48:07:31:2e:66:21:fa:
28:2b:97:23:06:f0:08:3f:03:21:2a:72:48:70:62:
b7:ec:c3:7a:d5:8a:f6:09:76:45:42:ec:82:c4:b0:
1a:4e:d6:9c:c3:48:fd:58:fb:34:66:3b:77:6a:b5:
98:07:ea:81:a2:7a:6d:ad:03:7f:45:fa:49:f2:13:
c3:cd:36:d3:dc:61:9e:73:36:12:16:0a:3d:d6:cb:
6a:fd:6a:83:7f:df:ce:0f:12:b8:f8:68:56:ff:0a:
2e:d6:f5:8e:54:83:8f:0f:fa:a1:1f:ce:7d:6b:28:
82:52:84:61:c4:3b:86:03:0d:44:ce:dc:5c:14:d5:
09:cb:29:aa:6d:e9:e3:ad:01:5c:f7:fc:6e:91:81:
34:fe:13:cd:50:26:46:63:4b:b5:3c:03:e4:5c:e3:
dc:02:8d:1c:ac:5f:ea:8c:bc:7f:b2:04:64:1c:a6:
b1:15:6b:28:b2:02:bd:34:0a:30:ad:4e:91:65:66:
d9:cf:95:d5:aa:4c:cd:b5:87:17:32:e5:8e:de:c4:
44:69:5c:c4:5a:fd:9c:11:6f:6b:c7:d0:49:a4:f3:
60:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:FF:73:71:53:A8:09:85:BE:68:7A:D9:17:4C:66:44:76:9D:0D:8C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uf9zcVOoCYW-aHrZF0xmRHadDYw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.0.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:f3:bd:9e:4b:30:09:34:7b:fe:40:b0:db:01:34:66:41:55:
ee:c9:b3:71:fd:22:ad:64:14:5a:b1:68:cb:f0:0e:13:4f:a9:
d0:5f:78:d5:27:16:92:38:e6:ea:7b:02:30:1c:5b:1c:03:32:
20:d8:d8:ec:cd:a2:dd:30:4e:93:fa:b3:b1:43:0b:cb:26:13:
63:fb:52:94:d1:0c:81:dc:9f:fe:70:d0:9f:17:31:96:03:ad:
ab:19:8a:92:98:ed:bf:7a:3d:b7:c4:40:af:f7:25:6c:d9:4d:
f1:48:96:19:22:6a:2e:54:80:ce:87:d5:03:85:cd:54:16:75:
93:2d:68:7e:2b:f0:75:d7:50:27:60:3c:71:cb:8a:62:62:af:
0c:5c:64:71:a7:83:c9:ce:1c:fc:6c:96:69:33:b8:e8:74:f8:
dc:3e:f4:0e:97:c7:e4:8f:41:fa:60:aa:be:a8:7e:1a:3a:3c:
01:30:c7:49:bb:f3:8e:e4:81:a2:72:07:94:91:08:a8:17:b0:
ea:17:38:85:3f:00:6f:e0:1c:ef:4d:09:49:a1:af:b1:26:46:
22:0e:b4:c7:d9:91:d3:f1:66:6f:08:2b:fd:84:37:77:4b:9a:
1c:56:a6:69:4f:e9:4a:59:d5:9c:91:f2:8a:21:1e:48:42:38:
f3:af:04:9f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKckwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3MDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEI5RkY3MzcxNTNBODA5
ODVCRTY4N0FEOTE3NEM2NjQ0NzY5RDBEOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2dB45KFHR1YLN/88sn9A1uMiJiQD6ssKHfcbrcdqZw7VGAI+o
SAcxLmYh+igrlyMG8Ag/AyEqckhwYrfsw3rVivYJdkVC7ILEsBpO1pzDSP1Y+zRm
O3dqtZgH6oGiem2tA39F+knyE8PNNtPcYZ5zNhIWCj3Wy2r9aoN/384PErj4aFb/
Ci7W9Y5Ug48P+qEfzn1rKIJShGHEO4YDDUTO3FwU1QnLKapt6eOtAVz3/G6RgTT+
E81QJkZjS7U8A+Rc49wCjRysX+qMvH+yBGQcprEVayiyAr00CjCtTpFlZtnPldWq
TM21hxcy5Y7exERpXMRa/ZwRb2vH0Emk82ABAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUuf9zcVOoCYW+aHrZF0xmRHadDYwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3VmOXpjVk9vQ1lXLWFIclpG
MHhtUkhhZERZdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wQAwDQYJKoZIhvcNAQELBQADggEBADvzvZ5LMAk0e/5AsNsBNGZBVe7Js3H9Iq1k
FFqxaMvwDhNPqdBfeNUnFpI45up7AjAcWxwDMiDY2OzNot0wTpP6s7FDC8smE2P7
UpTRDIHcn/5w0J8XMZYDrasZipKY7b96PbfEQK/3JWzZTfFIlhkiai5UgM6H1QOF
zVQWdZMtaH4r8HXXUCdgPHHLimJirwxcZHGng8nOHPxslmkzuOh0+Nw+9A6Xx+SP
Qfpgqr6ofho6PAEwx0m7847kgaJyB5SRCKgXsOoXOIU/AG/gHO9NCUmhr7EmRiIO
tMfZkdPxZm8IK/2EN3dLmhxWpmlP6UpZ1ZyR8oohHkhCOPOvBJ8=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org