Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vnmh8gHVj036_MgbvksKg8Clj1Q.roa
File: vnmh8gHVj036_MgbvksKg8Clj1Q.roa (raw, json)
Hash identifier: ynkHF3G1dZDTQHT1aPkVbqxm2ci497iL6/4SgIuSl1U=
Subject key identifier: BE:79:A1:F2:01:D5:8F:4D:FA:FC:C8:1B:BE:4B:0A:83:C0:A5:8F:54
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2877
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vnmh8gHVj036_MgbvksKg8Clj1Q.roa
Signing time: Fri 01 Sep 2023 10:05:22 +0000
ROA not before: Fri 01 Sep 2023 10:05:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.192.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10359 (0x2877)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=BE79A1F201D58F4DFAFCC81BBE4B0A83C0A58F54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ca:b6:2a:c4:99:f9:e9:a1:52:57:06:f7:86:
0f:d4:fb:f4:8a:8b:ef:5f:71:b1:27:8d:4d:f2:ec:
fd:b3:6c:4f:34:ea:32:61:40:bb:d9:d2:96:d7:49:
b3:ac:04:95:b5:13:57:00:3f:d1:62:31:63:ce:80:
29:88:d9:b0:bc:54:90:81:6e:42:fc:8a:25:71:ea:
f6:ae:f3:bc:88:b7:ab:e0:33:57:6e:72:4d:fd:3c:
d5:3d:31:9a:82:e3:80:0a:92:c2:fa:34:7f:fc:2c:
24:4d:d7:82:78:05:ec:c3:30:38:ff:08:05:a7:02:
bb:c5:2e:8e:1a:3d:b1:1f:d6:33:4b:13:5b:09:d1:
d4:82:c7:76:23:e6:3a:aa:06:53:1e:e5:1f:08:ee:
74:fe:db:e1:e6:de:07:1e:f9:f3:d3:81:14:2c:96:
ba:78:1a:1a:24:3e:cb:ed:91:66:96:8b:92:de:08:
0b:58:57:aa:2c:cc:25:71:ed:24:bb:29:f1:b4:28:
23:54:db:0b:87:78:cf:85:95:2d:74:96:45:3f:83:
fc:a2:de:2e:71:64:bb:55:82:9d:4e:d5:58:88:0c:
61:69:25:ea:4a:35:26:3e:62:20:6b:86:df:f7:9e:
9f:58:50:d9:48:5b:a4:14:0e:59:cd:fe:80:da:95:
ad:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:79:A1:F2:01:D5:8F:4D:FA:FC:C8:1B:BE:4B:0A:83:C0:A5:8F:54
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vnmh8gHVj036_MgbvksKg8Clj1Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.208.0/21
Signature Algorithm: sha256WithRSAEncryption
14:fe:d8:31:2b:87:f0:ab:a7:52:97:23:29:30:ed:06:00:fa:
44:0c:ca:d9:4a:40:17:10:24:2a:ca:84:c0:66:e3:b4:51:a0:
ac:b0:27:6a:59:b1:60:17:99:57:a8:8c:c5:35:ad:a6:e4:cc:
9a:60:a5:70:d2:ea:76:12:e5:b3:b5:3c:1c:c9:a4:99:86:2e:
de:0d:14:5a:4e:d0:f3:0f:96:2b:d3:32:aa:d9:e6:66:41:da:
be:b9:38:a4:5d:db:2b:4b:89:49:e1:fd:a6:34:15:ef:4a:8c:
a9:43:72:d7:9b:1a:75:f9:08:9e:f2:50:ed:0e:0c:b7:f3:17:
b0:eb:51:58:1c:d5:3b:47:36:64:93:16:16:9f:18:9f:71:0d:
97:75:51:11:2a:6e:5c:97:ed:33:71:3c:69:de:87:4b:4e:95:
00:3a:9d:ed:37:14:08:d5:5b:f9:0a:a8:8f:fa:54:7b:9b:05:
79:b4:8b:19:e8:48:7f:0c:f8:b8:ca:14:58:0f:20:31:95:ac:
4b:a1:19:c0:80:52:62:76:73:17:78:9f:a7:3d:13:0f:c3:d0:
84:7c:ec:4b:4b:5f:62:e3:87:cf:99:f2:6a:7c:bc:0c:40:6d:
1e:7e:98:9d:dd:dd:2c:b0:bb:0f:12:b9:ef:5c:e0:13:fa:71:
8a:7c:11:9b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKHcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA1MjJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEJFNzlBMUYyMDFENThG
NERGQUZDQzgxQkJFNEIwQTgzQzBBNThGNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdyrYqxJn56aFSVwb3hg/U+/SKi+9fcbEnjU3y7P2zbE806jJh
QLvZ0pbXSbOsBJW1E1cAP9FiMWPOgCmI2bC8VJCBbkL8iiVx6vau87yIt6vgM1du
ck39PNU9MZqC44AKksL6NH/8LCRN14J4BezDMDj/CAWnArvFLo4aPbEf1jNLE1sJ
0dSCx3Yj5jqqBlMe5R8I7nT+2+Hm3gce+fPTgRQslrp4GhokPsvtkWaWi5LeCAtY
V6oszCVx7SS7KfG0KCNU2wuHeM+FlS10lkU/g/yi3i5xZLtVgp1O1ViIDGFpJepK
NSY+YiBrht/3np9YUNlIW6QUDlnN/oDala0NAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvnmh8gHVj036/MgbvksKg8Clj1QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZubWg4Z0hWajAzNl9NZ2J2
a3NLZzhDbGoxUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wNAwDQYJKoZIhvcNAQELBQADggEBABT+2DErh/Crp1KXIykw7QYA+kQMytlKQBcQ
JCrKhMBm47RRoKywJ2pZsWAXmVeojMU1rabkzJpgpXDS6nYS5bO1PBzJpJmGLt4N
FFpO0PMPlivTMqrZ5mZB2r65OKRd2ytLiUnh/aY0Fe9KjKlDctebGnX5CJ7yUO0O
DLfzF7DrUVgc1TtHNmSTFhafGJ9xDZd1UREqblyX7TNxPGneh0tOlQA6ne03FAjV
W/kKqI/6VHubBXm0ixnoSH8M+LjKFFgPIDGVrEuhGcCAUmJ2cxd4n6c9Ew/D0IR8
7EtLX2Ljh8+Z8mp8vAxAbR5+mJ3d3Sywuw8Sue9c4BP6cYp8EZs=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org