Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vd-pOJik8cV7m9Tzoyswge7v_1U.roa
File: vd-pOJik8cV7m9Tzoyswge7v_1U.roa (raw, json)
Hash identifier: QnouKM16fptrFJ6gI07ZvO6LzuuVSSAhVvZt6tZesV0=
Subject key identifier: BD:DF:A9:38:98:A4:F1:C5:7B:9B:D4:F3:A3:2B:30:81:EE:EF:FF:55
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 28FF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vd-pOJik8cV7m9Tzoyswge7v_1U.roa
Signing time: Fri 01 Sep 2023 10:06:02 +0000
ROA not before: Fri 01 Sep 2023 10:06:02 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10495 (0x28ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:02 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BDDFA93898A4F1C57B9BD4F3A32B3081EEEFFF55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:72:73:fb:40:6b:55:7d:bb:ec:ab:72:c9:
cf:c2:e9:8c:9d:6c:db:46:fb:c3:b0:2f:32:f9:8e:
9c:bd:2e:9d:01:c7:8d:bc:64:47:d7:9e:ba:14:e5:
91:75:1b:b0:1b:a1:8c:66:5a:00:7a:cf:9f:1c:79:
b8:45:83:49:c6:b1:45:63:f7:ce:93:14:1f:bb:40:
dd:d5:6b:25:80:5b:3c:4b:8c:52:3d:13:40:ea:a5:
95:0e:bf:75:49:f0:21:19:f4:c2:3a:25:cd:90:d0:
54:d2:04:8b:ca:27:68:90:f6:cc:c2:d8:b0:38:8c:
44:22:da:22:87:b0:07:25:fe:b8:db:c4:24:7c:24:
57:9c:c8:68:57:af:58:48:ca:db:0e:42:5a:c1:97:
95:42:0d:7e:37:8a:27:a9:48:60:d6:b9:d0:65:ce:
51:66:23:01:2d:df:03:9b:23:84:c2:76:cf:2d:b3:
46:c6:fd:e8:b3:d5:d7:ab:55:2c:7a:6a:13:68:64:
e2:9b:eb:bb:72:b0:b5:2c:ea:b0:83:85:db:86:1a:
18:55:81:c3:67:f5:f5:75:75:a4:b4:31:72:8e:af:
34:c2:e5:0d:49:51:03:93:b0:36:96:f7:c7:c6:60:
32:f9:eb:3b:92:61:b3:27:6f:fe:47:c9:95:28:a2:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DF:A9:38:98:A4:F1:C5:7B:9B:D4:F3:A3:2B:30:81:EE:EF:FF:55
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vd-pOJik8cV7m9Tzoyswge7v_1U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.208.0/21
Signature Algorithm: sha256WithRSAEncryption
47:8a:f3:e6:cc:41:e1:2f:1e:ef:1f:79:0d:d6:20:84:41:b3:
1f:ba:e1:32:5c:85:6b:4d:d0:c7:45:67:7f:b9:ca:a0:6c:92:
2b:e8:db:53:38:85:01:89:ee:4c:12:0a:3a:75:3f:84:68:22:
46:d8:bb:49:65:5d:45:27:18:b5:7c:9a:8a:f6:ad:62:f5:04:
6d:b0:89:a0:fc:9e:bd:b6:9a:05:1b:d5:28:2c:86:6e:fb:2a:
6d:a4:41:92:f0:4e:45:64:34:7c:0d:ae:3d:0a:ec:eb:f0:26:
c0:2e:4c:ee:33:c5:f0:d7:49:fd:36:25:30:d8:e8:7b:6c:b3:
bc:86:14:38:df:72:96:69:c5:f9:8a:aa:dd:6a:0c:ff:de:d9:
b0:ae:9f:d7:e0:e8:ba:a1:97:c1:4d:80:a3:4d:77:ed:a7:ef:
b4:bf:e3:86:57:98:ce:68:d9:a5:28:d9:88:f6:35:e2:ff:76:
29:37:e5:11:0a:17:55:6b:9f:c8:21:4f:39:52:60:dd:64:2b:
f8:0e:4c:e0:b2:d8:d3:c6:22:d5:69:7a:74:c1:ff:36:5f:19:
b8:4a:8f:79:e1:5c:61:51:33:68:a1:1a:62:b2:9c:a4:82:cd:
de:f7:b9:a5:82:23:4e:79:5b:69:40:8d:60:a8:63:2a:6a:ca:
ff:c4:94:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org