Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/gN4hCVj9IyI88ymkbPP3wYT8Vzs.roa
File: gN4hCVj9IyI88ymkbPP3wYT8Vzs.roa (raw, json)
Hash identifier: iGMRBBUzfRsb41c39sMir7sW2E0NFOAnrXUhACaWYuk=
Subject key identifier: 80:DE:21:09:58:FD:23:22:3C:F3:29:A4:6C:F3:F7:C1:84:FC:57:3B
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 110F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gN4hCVj9IyI88ymkbPP3wYT8Vzs.roa
Signing time: Mon 10 Feb 2025 13:56:46 +0000
ROA not before: Mon 10 Feb 2025 13:56:46 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 2401:ab00::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4367 (0x110f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:46 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=80DE210958FD23223CF329A46CF3F7C184FC573B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:04:83:b5:45:5f:1f:61:00:89:9e:24:09:
52:49:c3:25:34:ba:24:0c:a2:1d:d8:e9:57:dd:fe:
b2:8a:b4:29:43:14:78:26:bf:de:71:fd:5d:db:28:
04:cd:45:98:04:66:4f:22:3c:0c:95:3d:72:c8:c3:
c7:09:fb:86:1b:61:fd:4f:bd:99:00:f5:dd:41:e3:
08:8a:37:4d:9f:84:21:f1:f2:39:ed:aa:7a:75:2a:
aa:37:e9:ed:f0:06:82:5a:a5:b8:b0:c2:48:97:ea:
14:3b:63:97:a3:72:1b:7e:79:da:29:4b:3c:8a:a7:
94:b2:5e:cf:30:45:21:ec:58:d2:5f:62:84:4b:1b:
aa:f5:10:35:27:39:79:f4:8d:0c:a4:de:8b:b9:fb:
e1:9c:7e:db:5c:58:dd:a8:98:e0:53:d7:89:5e:98:
dd:e5:6f:e9:9c:32:97:56:8e:26:7f:eb:db:d6:e6:
d8:ee:72:98:5c:20:c2:fa:d5:e1:8b:6b:43:83:88:
40:06:7e:d6:b3:69:6a:91:c5:5f:74:a0:a7:05:56:
c6:f8:cc:61:c2:d1:aa:53:cf:6d:84:c0:a0:57:5f:
89:34:3b:ae:bf:29:cc:75:17:bd:a7:37:ae:93:96:
00:fa:a9:82:dc:95:e6:7a:a2:da:49:de:15:d9:ea:
79:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DE:21:09:58:FD:23:22:3C:F3:29:A4:6C:F3:F7:C1:84:FC:57:3B
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gN4hCVj9IyI88ymkbPP3wYT8Vzs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:ab00::/32
Signature Algorithm: sha256WithRSAEncryption
26:a6:55:36:ed:8a:2d:a9:a2:22:cf:ff:74:eb:44:67:e6:81:
00:34:52:27:8f:dd:62:42:01:e0:da:34:89:83:84:db:fb:03:
7b:10:c8:07:87:87:11:78:db:3c:b2:99:ac:a8:36:28:e5:16:
ae:a3:44:42:fe:19:cc:4c:4d:2f:e6:3d:9e:cc:67:cb:e5:39:
1b:7b:e7:e7:c0:33:78:7c:a8:e5:e9:e5:50:67:55:ef:98:5c:
e7:2d:f2:b3:7f:c3:c8:2d:53:58:14:68:3b:bd:e4:58:fe:86:
ab:08:8b:e2:55:1e:04:24:b2:d9:4f:43:13:ab:9a:28:24:7c:
e6:c1:70:d7:4f:d3:8e:67:4b:cc:f4:84:10:36:ff:dc:9b:e3:
8e:7e:c1:05:5c:e4:bd:05:bf:52:27:d3:4b:0e:a1:49:04:07:
a8:df:94:e9:26:93:4a:a4:bd:b7:02:a5:10:7a:3c:61:aa:05:
52:de:d0:c1:96:87:98:c8:bb:b5:d3:af:75:d3:15:10:de:5f:
2f:54:41:6e:df:25:3f:92:30:e3:e8:31:17:a8:35:ea:79:cf:
2f:15:1a:5c:98:98:11:db:61:e9:78:ce:36:c4:b1:35:74:8b:
86:3c:90:f5:68:94:01:a7:f5:7b:32:46:5e:30:ec:b7:8a:96:
eb:0b:e9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:10:26 2025 by rpki-client