Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/VJknFlsAIu-8BpvujNBcXAuZZdk.roa
File: VJknFlsAIu-8BpvujNBcXAuZZdk.roa (raw, json)
Hash identifier: LkPOCWKEXtPvUkt/O2KKBKYETurl3wQrx2iIdg9tkFg=
Subject key identifier: 54:99:27:16:5B:00:22:EF:BC:06:9B:EE:8C:D0:5C:5C:0B:99:65:D9
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1103
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VJknFlsAIu-8BpvujNBcXAuZZdk.roa
Signing time: Mon 10 Feb 2025 13:56:43 +0000
ROA not before: Mon 10 Feb 2025 13:56:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 203.217.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4355 (0x1103)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=549927165B0022EFBC069BEE8CD05C5C0B9965D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:af:22:c3:34:c1:6e:ad:fd:5d:07:77:04:
6b:7a:3f:e7:cd:01:1a:f1:77:10:5b:5c:c5:c4:00:
34:05:ad:d7:e5:94:83:13:42:17:d0:e7:fc:3d:38:
78:37:77:39:a2:b6:dd:11:e5:7b:a9:9d:e1:96:0c:
08:66:6a:8c:43:c0:f5:f1:b5:78:9d:9f:c2:89:c8:
30:ba:de:6d:47:e2:d6:6a:49:84:5f:d3:94:fa:d7:
f7:ef:01:20:63:0b:18:d0:cb:35:5f:66:1a:6b:15:
7c:af:4a:a6:09:92:8e:12:7f:0f:e5:49:50:a2:8f:
d4:9f:48:2a:1a:ac:43:93:46:6b:bf:57:5b:d4:d7:
d6:e7:68:2a:47:9e:a5:f1:22:25:d0:dc:32:d7:fd:
b3:59:d5:74:4c:a7:93:86:77:ea:25:92:1b:1e:01:
74:ea:31:b1:12:bf:46:59:b2:45:67:bf:60:b0:e1:
dd:9f:f8:1e:a5:f8:e0:fb:a6:5b:c1:14:b7:d7:01:
28:52:69:a9:da:fc:68:68:a1:7b:75:94:77:3b:a2:
cd:93:5b:40:f2:17:11:a7:d3:e5:47:c6:d7:09:f9:
05:99:e0:53:41:77:35:ec:1a:06:71:1c:73:85:e3:
f5:7f:5e:f2:8d:e4:71:b9:03:e8:1e:0a:cc:08:8d:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:99:27:16:5B:00:22:EF:BC:06:9B:EE:8C:D0:5C:5C:0B:99:65:D9
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/VJknFlsAIu-8BpvujNBcXAuZZdk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.217.96.0/21
Signature Algorithm: sha256WithRSAEncryption
65:d6:2a:09:2f:6a:9b:5c:d1:69:f8:c7:80:a5:51:8b:4a:60:
85:97:f1:9d:80:b4:e6:80:2f:a7:a9:3c:2f:7e:b4:ff:66:2c:
2c:80:8b:d4:e3:58:1b:13:08:bc:0e:cf:9b:d2:14:7d:1b:99:
39:dd:5f:f1:10:a9:7d:80:35:37:9d:0e:c0:5c:14:af:ba:8e:
0e:69:4e:d1:3e:87:4c:96:42:cf:04:5c:c4:47:1e:63:85:b0:
a6:cc:4e:6a:53:d6:6f:79:35:68:9c:94:2d:cb:0b:2a:f1:f2:
4e:f5:ce:5c:f7:7a:6f:88:2f:4b:28:6c:f6:87:52:28:fe:90:
ae:ef:4a:c5:43:84:93:c8:4a:d4:b3:ab:ab:2e:8d:5c:56:c2:
d4:80:dd:71:11:fc:f6:65:23:95:96:34:d7:9c:0c:6a:d3:1a:
29:cd:3a:1c:2f:b2:cd:31:af:bf:51:a5:4b:44:72:88:a3:3a:
90:b7:89:27:6c:16:92:b9:89:a7:56:cb:e4:65:08:66:81:6e:
25:34:98:b6:84:be:fa:01:b2:42:30:5c:e7:9f:8c:f2:69:2c:
91:86:7e:d2:94:45:a2:9a:46:21:23:d8:fd:53:78:08:7f:b8:
c9:52:b5:48:bb:6d:60:07:5d:a8:8a:07:21:15:7d:31:46:e3:
18:0b:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:01:06 2025 by rpki-client