Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Dua2jo2GEP3T1aps3DQi1PRCU3E.roa
File: Dua2jo2GEP3T1aps3DQi1PRCU3E.roa (raw, json)
Hash identifier: sFiuv4zaPeHx9IK79MTbrNevi05pL/ZS2Rn1RmD6Lqs=
Subject key identifier: 0E:E6:B6:8E:8D:86:10:FD:D3:D5:AA:6C:DC:34:22:D4:F4:42:53:71
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0FEF
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Dua2jo2GEP3T1aps3DQi1PRCU3E.roa
Signing time: Mon 26 Aug 2024 05:13:13 +0000
ROA not before: Mon 26 Aug 2024 05:13:13 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 121.254.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4079 (0xfef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:13 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0EE6B68E8D8610FDD3D5AA6CDC3422D4F4425371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:29:79:c9:ac:87:ca:da:21:f9:5c:55:40:
03:59:ce:45:39:00:bb:ac:70:42:f3:70:b3:ae:1e:
ee:33:61:00:a4:cb:e1:08:a4:b8:b4:92:78:bd:74:
91:f4:68:eb:aa:0e:82:c4:00:1c:79:c8:26:16:c3:
92:4b:d0:12:6c:d5:17:3a:b9:b7:76:d9:30:5e:e4:
bc:a5:a4:06:b8:b6:6a:05:20:8f:32:0a:89:98:28:
d1:fc:5f:75:ce:e2:c7:94:aa:9d:05:95:07:2d:c6:
8e:97:83:70:ac:ff:32:29:72:21:e9:3b:f5:64:d9:
ca:b5:4d:8a:ca:d3:29:f3:2d:fd:55:0a:e6:8b:03:
e8:21:a0:a6:f4:e4:97:9b:94:a6:38:2b:3e:88:48:
6d:72:c9:1c:34:35:de:21:31:87:6c:76:0b:e9:23:
4e:01:db:42:66:ee:45:19:71:1f:80:3a:40:ff:97:
6c:15:30:af:58:95:f5:62:81:cb:71:fd:50:89:c3:
16:7e:57:0b:62:6f:51:85:5e:43:0f:e5:c1:c3:0d:
55:e1:99:49:13:d0:55:6a:d4:21:fd:c8:51:62:58:
96:f5:3c:2b:1b:63:58:68:b8:93:97:9e:f7:2d:e9:
98:08:9f:2a:17:00:30:fa:b4:fc:dc:a4:cb:f0:66:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:B6:8E:8D:86:10:FD:D3:D5:AA:6C:DC:34:22:D4:F4:42:53:71
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Dua2jo2GEP3T1aps3DQi1PRCU3E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.120.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:aa:36:20:12:f8:95:d2:3b:e0:84:bd:81:fd:8d:e2:c2:17:
57:7d:1a:8f:7b:0d:c9:01:0c:c0:6d:1a:fd:47:ba:65:84:ac:
09:4e:c0:21:07:da:3c:f0:95:8a:f2:ee:94:4f:96:23:6e:d3:
7f:27:67:1a:79:21:49:34:46:85:57:9d:c4:25:d3:38:fb:78:
95:ce:21:86:01:ba:56:e4:57:11:39:81:2e:b8:23:62:69:3c:
3e:08:15:28:1d:78:25:85:d3:bb:4a:96:4f:b7:f1:0f:de:a5:
31:9b:f6:d9:88:11:37:69:2e:f1:a1:a9:0f:d9:11:0b:2f:cf:
ca:00:6f:ad:de:5f:a2:f4:f0:78:b1:42:96:7c:49:86:36:a0:
f2:18:fe:63:e9:36:6a:1a:4e:04:15:8b:3b:ed:d9:07:0c:1b:
d0:d7:c4:72:b4:0d:2d:89:82:bf:72:92:3c:dd:a2:c9:de:8b:
3a:34:d0:48:cf:42:15:8f:cd:a4:1b:b2:d8:48:54:de:61:aa:
8b:6c:24:7d:44:7f:8d:4d:7d:3b:39:7a:1f:07:cb:99:de:24:
cc:77:27:6f:85:33:50:be:c0:61:23:fc:0a:8b:10:25:1a:e8:
72:1c:a3:83:ad:b2:d2:d0:30:7e:12:9b:48:f2:8b:2a:30:7f:
10:26:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:15:12 2025 by rpki-client