Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wLshgjQ2pWsFUstdhtkoAviejXQ.roa
File: wLshgjQ2pWsFUstdhtkoAviejXQ.roa (raw, json)
Hash identifier: Ywi4I8UH2uYAh9fKimxOcNl8RLnAreRW8hHes9XQTZs=
Subject key identifier: C0:BB:21:82:34:36:A5:6B:05:52:CB:5D:86:D9:28:02:F8:9E:8D:74
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2843
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wLshgjQ2pWsFUstdhtkoAviejXQ.roa
Signing time: Fri 01 Sep 2023 10:05:08 +0000
ROA not before: Fri 01 Sep 2023 10:05:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 123.195.24.0/21 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10307 (0x2843)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:05:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C0BB21823436A56B0552CB5D86D92802F89E8D74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:e5:76:19:d6:0c:98:36:c2:e2:1f:9a:f7:
bb:a3:07:4a:e3:f4:27:c9:86:08:79:aa:10:28:fc:
6b:7b:51:36:08:73:06:ae:6a:79:0c:54:d6:1e:23:
c8:d0:cf:9e:9c:93:83:ae:37:86:1b:36:0b:61:0b:
1c:53:79:5d:61:69:34:ec:6f:08:56:c5:cc:18:96:
83:a6:83:37:ad:a0:98:96:b4:f2:e0:2d:85:af:39:
5c:f5:6b:c4:60:fe:fe:af:ba:39:e7:81:c3:b1:12:
fb:b5:9c:82:f9:08:d2:34:77:00:cb:1c:c4:4f:4f:
f2:f0:26:c1:f8:13:50:14:d2:65:8a:db:e7:55:53:
d2:b0:ad:56:a4:66:4e:c6:6c:bd:33:c4:dd:35:11:
10:39:b8:24:25:1f:ca:d0:97:73:96:45:85:18:85:
b0:aa:72:f4:0f:f6:9f:59:f6:d7:74:72:07:98:5a:
00:50:15:23:83:95:49:be:ec:b9:15:a0:a0:a1:99:
15:be:30:a4:4a:2b:62:f3:11:dc:4d:31:de:4f:24:
1d:e7:be:ea:c3:d4:91:b0:b9:9d:a0:90:1b:b3:b5:
80:1b:94:e8:3b:c8:c3:5f:92:e5:9a:e9:cd:08:d6:
e4:19:6a:ba:51:da:fe:32:12:2d:2a:4a:c1:25:ec:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:BB:21:82:34:36:A5:6B:05:52:CB:5D:86:D9:28:02:F8:9E:8D:74
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wLshgjQ2pWsFUstdhtkoAviejXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.24.0/21
Signature Algorithm: sha256WithRSAEncryption
af:a7:53:d4:be:fc:77:ea:11:81:46:66:4e:a9:c1:36:95:a5:
15:d8:db:43:79:23:53:d3:e3:08:b8:9b:a3:ea:ad:3d:2d:c0:
a2:25:3f:f3:f2:af:c1:ee:32:d5:f9:9b:36:dc:c8:4d:66:88:
d5:ce:a0:75:32:9d:20:b0:f3:5a:05:76:24:70:7e:95:3c:50:
0b:55:f1:16:65:74:36:0e:5b:cc:1e:20:6d:f3:e9:42:9b:56:
a5:02:bd:9b:03:8b:1a:85:0d:f8:c3:54:89:f3:ca:e7:ba:eb:
85:6f:8b:3b:2e:a2:e4:1c:18:cc:9a:55:b3:40:30:b0:67:ac:
af:0b:0a:ec:31:d9:06:f5:5c:1c:36:6a:38:66:fc:88:c9:9a:
85:41:4c:02:74:8b:f7:11:78:cf:2e:ce:bd:6b:92:ff:83:0f:
f6:33:95:39:0b:d5:e5:e4:88:73:fa:34:53:25:67:82:93:e1:
12:c7:94:d9:ea:83:84:52:7a:07:08:9d:0d:a2:a2:25:48:39:
53:2f:48:ac:f0:ce:66:3a:5f:7b:c8:00:e9:c5:44:e9:d1:4a:
f4:32:43:a8:8a:40:57:31:41:63:d7:00:a6:a5:19:7c:a9:2e:
55:ec:52:3e:70:68:14:82:53:1a:03:69:6f:fc:d7:cb:93:e7:
7f:78:9e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org