Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wOPD-okTbLLBw1Zdl5ZMl5ENGOY.roa
File: wOPD-okTbLLBw1Zdl5ZMl5ENGOY.roa (raw, json)
Hash identifier: i3Q93wxCNeevzJtp1lXtTmnQG8N20x984OXSz8anTSQ=
Subject key identifier: C0:E3:C3:FA:89:13:6C:B2:C1:C3:56:5D:97:96:4C:97:91:0D:18:E6
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2963
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wOPD-okTbLLBw1Zdl5ZMl5ENGOY.roa
Signing time: Fri 01 Sep 2023 10:06:27 +0000
ROA not before: Fri 01 Sep 2023 10:06:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.194.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10595 (0x2963)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C0E3C3FA89136CB2C1C3565D97964C97910D18E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:1e:bd:fe:6c:8d:4f:b0:67:a5:9b:43:df:
f8:28:0c:f9:d1:7c:e5:f2:5f:17:d1:4c:bf:13:14:
c1:a6:c3:4d:9e:38:ca:7e:bb:82:98:1e:2c:c2:45:
d3:60:e1:e4:54:56:5b:0e:66:e0:b6:7b:ea:29:6b:
13:c7:51:c9:f4:59:28:9f:54:1c:cf:30:7a:6d:1d:
ac:93:be:99:c4:9d:ab:23:70:ad:25:47:e4:cd:b1:
2c:8c:0d:2f:b8:49:62:51:79:4a:64:b3:55:bb:11:
c6:47:78:bf:80:01:f3:6b:66:a3:7c:f3:32:52:70:
5b:6f:c7:ae:2f:bc:a4:1c:2c:18:eb:b1:80:ef:97:
2a:5f:cc:d9:f0:30:ae:b3:28:03:34:c8:6f:52:99:
ee:fa:36:a5:e7:c4:54:bd:72:cf:c0:84:a9:64:3c:
e1:b1:0c:e7:75:02:10:82:df:e3:1a:a1:1e:6e:85:
f3:7a:cf:d0:cc:57:8f:14:aa:f6:3f:9e:cc:61:1e:
e3:28:d9:6e:93:1f:19:18:87:14:6c:da:05:2a:90:
79:7b:02:7d:a7:cd:b1:2b:74:d4:93:0c:6b:e2:9b:
af:e7:b3:72:33:b6:c7:54:f3:d9:17:46:01:70:18:
00:d1:91:3b:73:89:c6:f5:12:9d:b3:73:63:63:46:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:C3:FA:89:13:6C:B2:C1:C3:56:5D:97:96:4C:97:91:0D:18:E6
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/wOPD-okTbLLBw1Zdl5ZMl5ENGOY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:53:98:03:1e:18:41:06:be:4b:fa:6c:30:11:03:eb:b6:36:
15:60:9a:61:d4:4d:8d:4a:93:08:e8:40:ba:26:3c:a2:b9:ef:
c8:d9:05:36:05:85:c0:ce:1e:e2:fd:62:a4:1e:fb:fd:3b:2e:
ae:4b:25:28:b0:55:26:05:68:9e:9d:97:94:1b:bf:48:92:03:
e4:ef:c8:c0:ee:b7:ad:f2:77:ab:73:5e:99:1f:16:60:81:93:
26:cd:d4:5a:d8:fc:41:25:c4:4c:cd:fc:e2:b4:f2:4b:37:5c:
91:b2:5f:99:15:83:41:32:dc:22:eb:99:72:80:42:c9:49:18:
f4:07:61:83:5d:54:3a:c7:a1:3d:d9:b8:d4:23:08:66:ea:24:
8d:87:a1:5a:e6:b5:03:0b:9a:7a:b0:55:04:63:3d:33:b1:25:
e5:6a:fc:6f:4b:96:82:fc:e9:dd:e4:f5:81:41:c0:01:b7:b2:
e9:3f:af:93:d1:4b:0a:e9:73:64:de:62:eb:93:f9:65:ca:42:
12:5c:a2:80:75:51:ad:d8:02:c6:8c:c0:e8:8a:63:fc:2c:17:
6d:5e:8a:13:46:10:78:d5:86:f2:9a:74:8c:50:df:ff:0d:5e:
7c:5d:78:27:5c:c4:a9:af:5a:2c:e7:d9:3a:78:a3:6d:12:54:
2b:39:23:fc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKWMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEMwRTNDM0ZBODkxMzZD
QjJDMUMzNTY1RDk3OTY0Qzk3OTEwRDE4RTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9tB69/myNT7BnpZtD3/goDPnRfOXyXxfRTL8TFMGmw02eOMp+
u4KYHizCRdNg4eRUVlsOZuC2e+opaxPHUcn0WSifVBzPMHptHayTvpnEnasjcK0l
R+TNsSyMDS+4SWJReUpks1W7EcZHeL+AAfNrZqN88zJScFtvx64vvKQcLBjrsYDv
lypfzNnwMK6zKAM0yG9Sme76NqXnxFS9cs/AhKlkPOGxDOd1AhCC3+MaoR5uhfN6
z9DMV48UqvY/nsxhHuMo2W6THxkYhxRs2gUqkHl7An2nzbErdNSTDGvim6/ns3Iz
tsdU89kXRgFwGADRkTtzicb1Ep2zc2NjRhPnAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwOPD+okTbLLBw1Zdl5ZMl5ENGOYwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3dPUEQtb2tUYkxMQncxWmRs
NVpNbDVFTkdPWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wvgwDQYJKoZIhvcNAQELBQADggEBAFtTmAMeGEEGvkv6bDARA+u2NhVgmmHUTY1K
kwjoQLomPKK578jZBTYFhcDOHuL9YqQe+/07Lq5LJSiwVSYFaJ6dl5Qbv0iSA+Tv
yMDut63yd6tzXpkfFmCBkybN1FrY/EElxEzN/OK08ks3XJGyX5kVg0Ey3CLrmXKA
QslJGPQHYYNdVDrHoT3ZuNQjCGbqJI2HoVrmtQMLmnqwVQRjPTOxJeVq/G9LloL8
6d3k9YFBwAG3suk/r5PRSwrpc2TeYuuT+WXKQhJcooB1Ua3YAsaMwOiKY/wsF21e
ihNGEHjVhvKadIxQ3/8NXnxdeCdcxKmvWizn2Tp4o20SVCs5I/w=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org