Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/WcscaxcUIumlJ8FdFa-jGaJkvmc.roa
File: WcscaxcUIumlJ8FdFa-jGaJkvmc.roa (raw, json)
Hash identifier: DWq27z5YGsfYp65PKlkEig3P9H7L9DfrjgYuFQxT+J4=
Subject key identifier: 59:CB:1C:6B:17:14:22:E9:A5:27:C1:5D:15:AF:A3:19:A2:64:BE:67
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1014
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WcscaxcUIumlJ8FdFa-jGaJkvmc.roa
Signing time: Mon 26 Aug 2024 05:13:21 +0000
ROA not before: Mon 26 Aug 2024 05:13:21 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 121.254.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4116 (0x1014)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:21 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=59CB1C6B171422E9A527C15D15AFA319A264BE67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:5a:a1:23:80:6e:1d:8c:05:68:fe:f2:eb:
4c:02:dc:a1:a1:3b:3c:44:0c:24:15:39:c1:a8:49:
7b:ae:d1:fa:ec:ca:a6:6f:81:0f:9d:04:9a:a6:2c:
36:af:ca:c9:db:86:21:09:47:66:63:eb:95:f0:6a:
88:43:f7:db:7d:17:01:45:e1:65:be:45:90:89:ce:
4f:b9:99:9f:b3:9c:a2:34:a4:94:3b:8c:b6:1f:18:
d6:b2:90:cc:a7:6e:c2:87:74:26:f9:37:41:92:fb:
6f:0e:e2:b2:d6:4d:54:dc:e9:dd:a2:28:61:7a:d6:
1f:26:6b:67:35:3e:27:d1:b5:7b:15:3a:f8:cf:7c:
44:28:c3:e5:cf:e5:5c:3b:81:a2:94:ce:01:6b:7c:
d2:7d:9c:89:ee:2d:7f:18:03:87:f8:fd:bf:a2:12:
9f:9e:cd:e6:27:74:e4:11:d1:fe:27:10:83:16:f7:
3c:66:04:8d:2d:aa:69:ae:4b:a6:6c:07:0f:89:e1:
95:05:dc:a1:43:7f:06:2a:7d:f4:98:43:be:39:c1:
32:65:ea:c2:b3:70:d0:2c:f6:87:e8:21:b8:48:f2:
06:01:56:d3:4e:91:5d:e7:36:84:39:90:d4:7e:80:
0d:01:1b:ad:05:88:ab:6f:aa:b8:6b:64:43:fc:b1:
ff:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:1C:6B:17:14:22:E9:A5:27:C1:5D:15:AF:A3:19:A2:64:BE:67
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WcscaxcUIumlJ8FdFa-jGaJkvmc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.64.0/18
Signature Algorithm: sha256WithRSAEncryption
85:89:8e:20:82:9d:9a:55:98:8f:42:c0:3a:20:4a:65:16:fb:
5d:03:02:97:a7:32:6e:00:19:77:89:0d:c8:21:58:bc:32:27:
01:dd:a7:90:3c:06:d3:1f:ca:42:30:df:56:a3:f8:a6:ba:6e:
cc:29:ad:42:d6:17:1b:ce:30:2f:b3:4d:aa:98:5d:a3:ac:d0:
d3:a6:7c:97:fb:d5:8f:95:0d:f4:43:90:b0:4b:29:4b:6b:3a:
89:00:dd:9d:9b:9e:32:6d:28:19:db:42:56:33:59:26:8e:28:
82:40:8e:e8:56:af:df:3b:7f:34:6c:d2:22:1b:3e:a4:32:97:
bc:d6:33:11:0c:b4:f7:82:28:af:08:c8:cd:ae:08:61:df:57:
c5:a1:aa:dc:d1:fa:db:ef:dc:f0:95:e8:29:96:b3:42:16:8c:
93:0e:e5:dc:b6:4d:4c:25:68:77:fc:fa:36:2e:6f:b8:93:82:
76:04:23:2d:2a:79:16:1c:4f:fc:aa:97:64:6a:01:b4:db:ba:
53:c7:b9:9c:7b:ca:a8:0e:02:21:db:95:bb:7a:04:d2:6b:05:
db:1e:5c:37:b5:b5:b1:e4:14:ef:6e:fd:f5:50:f7:44:23:78:
8c:75:62:b0:d3:b3:0c:d3:0c:13:78:c0:83:77:fd:87:a8:9b:
29:48:a3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:03:55 2025 by rpki-client