Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/a9P3wLnd9Hse0_J4vGplGx3HoFw.roa
File: a9P3wLnd9Hse0_J4vGplGx3HoFw.roa (raw, json)
Hash identifier: h+t5VMIr9v20+38xvvLisSlGpqgBGjHZISny3dMCTh0=
Subject key identifier: 6B:D3:F7:C0:B9:DD:F4:7B:1E:D3:F2:78:BC:6A:65:1B:1D:C7:A0:5C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 10E8
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/a9P3wLnd9Hse0_J4vGplGx3HoFw.roa
Signing time: Mon 10 Feb 2025 13:56:36 +0000
ROA not before: Mon 10 Feb 2025 13:56:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 203.217.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4328 (0x10e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6BD3F7C0B9DDF47B1ED3F278BC6A651B1DC7A05C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:a4:cd:6a:fe:31:1b:3c:d8:09:ca:86:a2:
c1:67:ba:ae:31:1d:cd:00:5d:0a:64:52:5c:ed:b2:
5b:b4:36:06:ec:e4:ef:ae:a9:9c:aa:d7:ae:1e:6a:
cc:38:db:b1:ce:2e:80:bb:2d:ad:ca:93:69:89:c6:
b3:29:12:52:12:f5:d8:32:9c:40:d3:da:65:39:82:
98:75:1a:b6:6f:59:96:51:de:e9:d0:ab:0e:dd:56:
26:1f:3e:99:95:77:d5:16:89:c0:ad:34:21:c6:bf:
2a:ad:2c:85:fe:77:9c:63:1b:83:f6:85:56:5c:46:
14:25:dc:b9:02:3b:7f:fd:f9:25:45:38:d0:ce:64:
01:7c:04:26:3b:33:d6:b9:97:c3:61:e1:b0:c3:36:
c3:2d:74:08:b8:3b:3b:10:b1:a5:d9:e8:b2:c2:07:
61:0e:dd:26:65:2c:26:a3:8f:7c:c4:dc:b4:e5:98:
ca:02:04:60:ba:74:36:d2:05:23:55:35:94:04:36:
0a:78:f4:48:f6:fa:03:70:e7:25:44:4d:08:b6:ac:
66:ad:2e:ee:a2:06:f7:2c:e8:31:ae:69:79:7d:da:
4b:f3:4c:1e:5d:11:9e:6b:f5:37:95:7d:73:01:d9:
9a:02:dd:e7:6a:da:0d:e7:78:f9:ae:a5:63:f3:1b:
7d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D3:F7:C0:B9:DD:F4:7B:1E:D3:F2:78:BC:6A:65:1B:1D:C7:A0:5C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/a9P3wLnd9Hse0_J4vGplGx3HoFw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.217.96.0/20
Signature Algorithm: sha256WithRSAEncryption
4e:a3:9c:fc:6c:6d:86:d8:ef:a7:83:7c:f9:7f:ca:42:5d:1b:
75:29:d3:87:27:1c:31:dd:05:0e:31:21:d7:7a:a8:e3:c8:57:
30:c0:d5:68:ea:15:19:2f:24:82:74:31:7b:5c:be:70:46:25:
df:4d:23:2d:31:6f:07:7f:05:6f:5d:8a:70:a2:e2:d8:2c:a6:
9e:4a:b4:7b:d8:eb:a4:b7:19:f8:cb:8c:8d:56:6a:2d:7f:cf:
2f:0d:3e:5c:ae:e3:ce:9a:db:ef:98:7a:82:3f:b5:07:bd:1d:
57:74:2c:e3:5e:d8:4a:fa:71:8a:0e:62:6c:d9:9f:e8:a0:28:
10:36:86:1d:ba:75:6e:3c:ec:22:2a:34:db:41:51:f4:98:cd:
9f:4d:0b:93:62:78:30:3e:01:b6:b6:2e:7a:01:10:04:7e:37:
9e:46:a8:2a:c2:d9:e4:c8:94:97:0c:df:5a:f4:77:ee:3c:00:
8d:c0:31:8e:aa:0d:ea:c9:83:07:03:64:26:dd:2f:05:46:ea:
8d:cc:37:36:3a:86:18:4c:0c:c7:07:50:20:a9:15:83:93:98:
2a:a4:d2:05:c0:ff:d1:a8:ee:5c:6d:f6:22:62:df:4b:57:9c:
8c:6c:bf:f9:a7:99:2a:ca:0a:33:59:ef:10:43:fa:b7:dc:6e:
94:6b:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:06:16 2025 by rpki-client