Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vLN-1qks013oeyheEon9v5DJcdY.roa
File: vLN-1qks013oeyheEon9v5DJcdY.roa (raw, json)
Hash identifier: R/WkRNlkE9PdrbVi5C3f4+gDU1taykLDyN35mc2Ip3U=
Subject key identifier: BC:B3:7E:D6:A9:2C:D3:5D:E8:7B:28:5E:12:89:FD:BF:90:C9:71:D6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 29CA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vLN-1qks013oeyheEon9v5DJcdY.roa
Signing time: Fri 01 Sep 2023 10:07:04 +0000
ROA not before: Fri 01 Sep 2023 10:07:04 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10698 (0x29ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:04 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BCB37ED6A92CD35DE87B285E1289FDBF90C971D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:8b:1a:c1:e8:bd:d6:75:86:49:63:23:65:
e0:e9:b9:10:d6:2d:07:50:04:a8:54:f9:69:3f:b7:
6c:7e:4d:8e:49:69:15:62:21:7d:39:1e:21:f7:bd:
7a:2a:e1:d4:a1:aa:80:4d:b7:ba:e0:53:e2:6c:04:
da:2d:11:79:ed:9a:e4:50:9c:df:3d:9f:fe:2c:ab:
cb:9b:76:bc:a6:04:91:ea:7e:f4:0e:a0:b2:8f:85:
00:04:18:5c:53:83:8e:2a:d6:b0:28:8a:ff:35:f8:
a6:30:7d:39:4c:88:35:04:2f:fb:f1:7b:c5:bc:39:
55:d7:df:f4:b4:5f:8c:eb:ce:b7:00:3a:4d:19:8b:
b3:ce:6c:be:2d:b6:ad:7d:85:c6:f5:ad:55:eb:d9:
bc:14:be:b5:57:aa:b4:fc:c7:ef:c9:d1:b8:9d:66:
0c:9b:be:5b:36:55:91:73:f1:26:e0:7e:c2:aa:f6:
dd:aa:4f:51:49:7d:80:8a:85:f8:58:89:a1:93:18:
2a:41:12:cf:9f:92:01:e4:80:2e:3f:24:30:f5:cb:
bd:8c:e7:ef:9c:d7:21:1e:de:40:d7:26:6d:2f:eb:
65:70:c7:3d:52:4d:61:2f:e8:4c:b1:a7:39:9a:98:
47:b9:8f:e3:b5:ad:2c:4b:7d:60:84:0f:77:92:21:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B3:7E:D6:A9:2C:D3:5D:E8:7B:28:5E:12:89:FD:BF:90:C9:71:D6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vLN-1qks013oeyheEon9v5DJcdY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:bd:f9:34:5b:a4:a8:59:ea:ac:a2:c6:cb:1a:28:26:cf:bc:
7a:83:ea:1d:0c:d4:60:92:de:59:9f:72:41:0e:de:ff:c4:1b:
82:55:3d:b1:72:34:fb:e8:bd:e8:5e:31:8f:d3:41:ed:d5:7e:
1e:a1:ab:72:b2:0d:e4:ee:f7:d7:f9:79:68:99:a0:67:20:1e:
e5:eb:1f:63:dc:c5:9d:07:bc:65:0e:c5:a7:79:10:1d:d3:3a:
5e:4f:ff:e0:d1:a5:19:cd:a3:7b:e3:ee:c3:49:b2:41:2f:a2:
ee:94:82:eb:42:29:de:74:ba:95:8f:35:b1:f3:3e:81:f7:dc:
69:0a:c8:f1:bd:c9:7d:21:7b:b2:91:e3:0e:f9:6f:7a:80:dd:
bf:fd:2e:6f:98:20:14:c1:34:80:d8:be:7c:6b:ac:5a:25:e8:
04:ff:5a:0c:82:70:ca:58:0c:55:64:4b:cb:18:61:41:19:8b:
de:7b:8b:d2:34:cd:79:d0:e4:2a:0e:1a:8b:ac:5f:b0:b3:65:
b0:da:9f:6b:8b:1b:28:26:0f:e8:98:17:aa:44:a1:9c:29:fc:
86:ce:30:01:ca:1b:90:cf:90:2e:94:6b:4f:ac:87:a9:5f:da:
79:ef:31:84:7d:a8:fd:ed:07:2c:89:e2:95:c6:aa:bb:3a:f2:
24:7c:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org