Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmuQPqoE8LvoiATGy18Wb_3FTgc.roa
File: zmuQPqoE8LvoiATGy18Wb_3FTgc.roa (raw, json)
Hash identifier: 4E/ZzGbexkOKr9ypEAx5jlAjZif2ChKdiENhax7+8Cw=
Subject key identifier: CE:6B:90:3E:AA:04:F0:BB:E8:88:04:C6:CB:5F:16:6F:FD:C5:4E:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AA6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmuQPqoE8LvoiATGy18Wb_3FTgc.roa
Signing time: Fri 01 Sep 2023 10:08:08 +0000
ROA not before: Fri 01 Sep 2023 10:08:08 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 123.193.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10918 (0x2aa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:08 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CE6B903EAA04F0BBE88804C6CB5F166FFDC54E07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a7:ea:e7:7a:93:7e:da:68:99:a9:6b:da:fb:
8a:94:fb:7d:05:dc:0e:3d:c5:20:72:67:1c:cb:8a:
c4:73:fe:07:3b:ae:10:b7:e0:75:22:28:24:a1:6c:
fc:1e:ae:ee:1c:8f:83:fa:dd:32:5f:9d:c1:99:9f:
5f:b2:5e:de:c8:eb:69:d9:6d:0b:23:83:af:7a:4f:
cb:37:59:49:98:9c:2f:46:4e:ad:69:81:ce:ab:56:
43:5f:68:b0:74:17:e6:fe:fd:e9:1e:09:1c:d7:4f:
b1:71:32:b4:99:a6:44:59:47:ae:e8:3d:35:06:7b:
44:43:b1:67:09:9e:d3:0d:24:54:ad:7b:29:46:52:
c0:5b:d1:4a:bd:6c:4a:88:b9:ba:7d:e6:cc:00:d0:
10:c1:7c:9f:5d:71:99:29:e7:db:d0:48:cd:6e:8e:
20:03:e5:fb:4b:2c:3a:8f:ac:8a:1e:c8:0f:9f:b5:
8b:b3:10:bd:73:2e:e4:c9:ae:1d:25:53:0c:63:69:
71:95:ca:bc:0f:65:94:6c:99:79:a9:80:9a:b0:c1:
8c:9e:20:ca:84:12:5e:f2:47:f9:87:24:9a:4f:96:
53:6a:73:14:a4:a7:da:b0:3a:b2:03:ba:23:e6:60:
2c:69:65:64:46:8d:63:7e:cc:f8:74:16:8a:2c:6f:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6B:90:3E:AA:04:F0:BB:E8:88:04:C6:CB:5F:16:6F:FD:C5:4E:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zmuQPqoE8LvoiATGy18Wb_3FTgc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.247.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:85:ac:25:1f:12:7f:79:57:59:58:41:66:09:fe:99:5c:3b:
0b:34:f6:0b:42:74:1b:75:b0:7a:b0:6f:4f:b1:71:39:67:5b:
41:61:86:3b:1d:e0:89:f8:b9:71:e8:4f:aa:24:5f:ae:29:47:
84:83:34:8d:78:8b:ca:ae:50:ea:0b:e9:78:22:e2:e5:b7:16:
2c:60:88:98:60:d8:dc:77:50:d7:b0:69:5a:ad:64:d0:ce:d3:
fd:ba:5d:f0:a4:07:eb:b5:2c:02:ee:4a:bc:78:8c:69:7a:e6:
d9:d2:b7:c4:00:30:6d:c6:71:82:06:fe:b1:a0:da:cb:f5:da:
7e:12:f1:d6:c4:98:fa:68:75:80:c4:c9:17:22:80:75:ad:72:
51:ef:63:19:fe:85:6e:25:e6:1f:d6:0d:29:4b:4d:0d:d4:3b:
b4:62:03:62:96:b2:78:99:2d:3a:c8:a5:81:63:37:08:35:46:
50:a7:50:a5:78:c7:18:e1:99:89:d0:aa:8f:a8:41:54:a3:61:
e4:99:61:57:8d:c8:9f:20:d2:d7:dd:65:2d:1b:3b:f5:06:25:
e1:91:af:63:51:2d:6e:5c:ef:25:fe:ec:13:c0:78:83:04:82:
29:ba:b2:37:29:df:24:cf:ab:68:76:95:0e:8b:f1:17:b9:ad:
7c:af:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:20 2024 by rpki-client on console-ams.rpki-client.org