Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vVGk20JDWdI4G7M-8PyOnh-IVt8.roa
File: vVGk20JDWdI4G7M-8PyOnh-IVt8.roa (raw, json)
Hash identifier: pfuZWuHRgvPe0nO1P6SSe/lShaHG47NE248pc0C+2N4=
Subject key identifier: BD:51:A4:DB:42:43:59:D2:38:1B:B3:3E:F0:FC:8E:9E:1F:88:56:DF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 281F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vVGk20JDWdI4G7M-8PyOnh-IVt8.roa
Signing time: Fri 01 Sep 2023 10:04:58 +0000
ROA not before: Fri 01 Sep 2023 10:04:58 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.195.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10271 (0x281f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:58 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BD51A4DB424359D2381BB33EF0FC8E9E1F8856DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:b5:7a:0e:52:e8:7f:f9:d1:95:bb:f1:38:
f8:c3:02:8a:14:3e:fc:d7:62:20:89:6b:56:10:f1:
3d:f9:32:bd:ab:a8:28:51:0c:f2:28:6c:da:6b:c2:
47:14:97:22:d3:78:cb:6e:97:19:a3:b5:bc:1c:42:
90:e4:98:70:63:9c:2a:3a:8a:c0:08:22:3e:9b:4d:
f4:a0:df:2b:12:80:77:98:06:77:86:5a:af:11:c4:
26:f1:12:2c:ff:57:c5:5b:cb:c2:e1:48:71:55:0e:
ad:fa:f6:3e:c9:af:e1:18:bf:ff:f7:da:65:e2:fa:
7e:2e:22:ce:af:94:5c:bd:f5:84:c7:f6:6c:74:79:
95:fb:d4:aa:cc:b3:98:ce:98:28:ed:4b:bc:90:d0:
52:cb:da:36:c1:0a:a5:27:a2:d7:65:96:03:97:06:
94:76:94:3a:af:42:76:fa:34:15:c1:bc:c8:80:4c:
ed:ef:9b:49:00:8f:c1:f0:d5:8e:19:af:18:72:9f:
1b:a3:12:4f:fa:66:1e:0d:89:4d:7f:79:26:9e:e9:
6b:36:aa:f4:75:d0:91:2e:a2:04:5e:02:9c:22:ea:
d1:ca:a9:4e:34:91:1d:3c:fd:e1:35:7c:93:6e:bf:
dd:5b:cd:ad:57:a0:ae:8b:03:c5:94:e6:cb:97:b5:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:51:A4:DB:42:43:59:D2:38:1B:B3:3E:F0:FC:8E:9E:1F:88:56:DF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vVGk20JDWdI4G7M-8PyOnh-IVt8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:bc:8b:aa:bb:33:d4:c0:dd:61:71:ef:68:16:23:07:ad:50:
8b:fb:43:57:83:13:38:17:8a:e0:e4:8d:60:88:11:08:4f:03:
c0:30:35:82:d2:72:cc:2f:83:3f:7f:a8:e8:94:95:84:76:2b:
f6:b3:82:49:68:00:52:e4:9e:d6:3d:b0:f1:63:7c:cd:ae:d9:
fc:10:83:cb:45:03:61:f5:28:78:67:25:61:92:b7:af:84:03:
28:ac:a6:22:40:cf:7f:d7:66:b3:b3:ba:c9:97:bf:45:02:dd:
db:75:26:b1:44:7d:34:eb:d7:95:57:1e:1d:3d:92:b0:7d:0b:
39:4f:63:19:60:38:37:d7:71:8b:51:36:a2:45:22:f0:14:46:
4f:fb:6d:3c:33:0a:69:3f:8a:b4:a6:cf:a4:b9:cf:6d:49:f3:
25:5d:b6:a6:87:ff:c8:90:37:83:49:47:62:4f:c5:0e:dd:ce:
69:37:66:31:10:1d:48:71:04:84:e1:a8:e6:47:ee:14:72:96:
0a:c7:ff:53:3b:ef:20:42:eb:a6:7d:69:60:b5:a2:22:72:de:
cb:6b:0d:27:09:f4:04:c9:d8:1a:a8:3f:76:04:9c:43:c7:85:
00:af:ae:b3:d1:3c:e7:27:10:ec:9b:8c:99:cf:0a:e8:87:c4:
77:d9:75:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org