Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/mwKDTMazJzVPV9KBroOKIdqe2n4.roa
File: mwKDTMazJzVPV9KBroOKIdqe2n4.roa (raw, json)
Hash identifier: Hmj4wBfLncNY6exy3cPNOc+Et5XPKMhKjn0Jg2pqft8=
Subject key identifier: 9B:02:83:4C:C6:B3:27:35:4F:57:D2:81:AE:83:8A:21:DA:9E:DA:7E
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 10C9
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mwKDTMazJzVPV9KBroOKIdqe2n4.roa
Signing time: Mon 10 Feb 2025 13:56:29 +0000
ROA not before: Mon 10 Feb 2025 13:56:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 210.209.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4297 (0x10c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9B02834CC6B327354F57D281AE838A21DA9EDA7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:3c:ad:88:3c:7d:c7:52:a1:bb:66:c4:b1:
0c:30:a0:e1:58:cc:ee:51:87:3a:bc:85:ec:c7:29:
0f:f7:6f:65:6f:f7:1e:b5:f7:98:c1:51:7b:60:fe:
80:a8:17:4b:da:46:0c:c9:89:27:37:a6:0a:77:b2:
67:3b:70:1d:ce:16:a3:27:f8:5a:cb:e8:aa:c4:20:
36:fc:80:27:92:75:40:40:3c:99:d8:c7:f1:c9:53:
8a:17:81:36:96:5f:83:03:d1:53:33:1f:07:8a:61:
ef:ea:1d:c2:aa:6c:a4:9c:03:ef:17:fd:3b:68:93:
53:72:c7:69:5c:71:d7:13:11:ca:93:75:1a:fb:63:
a5:b3:e6:83:ad:c1:eb:c2:c9:7c:f0:3a:7e:59:9f:
82:e5:b2:3e:a7:83:8c:83:07:44:38:2e:04:c9:ba:
14:b4:70:70:62:39:ca:3d:9f:6f:6b:64:0e:d2:ae:
05:48:ae:b1:01:b8:41:b7:da:fc:36:f8:8f:3f:df:
14:34:60:f7:01:77:d5:f0:98:ca:42:22:3c:ff:b7:
bc:7f:ea:93:c8:50:b1:60:b5:74:e4:48:8f:bd:4f:
f6:76:b0:24:b5:50:14:c5:b6:c4:4d:55:84:e5:e0:
26:83:59:32:68:9d:3b:94:17:f0:e0:b7:86:d4:1b:
4b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:02:83:4C:C6:B3:27:35:4F:57:D2:81:AE:83:8A:21:DA:9E:DA:7E
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mwKDTMazJzVPV9KBroOKIdqe2n4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.192.0/18
Signature Algorithm: sha256WithRSAEncryption
ab:29:85:5e:a6:5b:76:e2:09:5e:3b:13:f6:e7:d7:9e:47:4b:
f8:6c:19:3e:d5:2a:56:d4:bb:04:d2:e2:d3:16:a2:29:c7:11:
1f:af:83:cf:7d:07:55:5d:b9:fa:ed:69:07:e4:ea:10:8f:ce:
ba:36:37:ba:1f:5c:e1:a3:3e:8a:f2:d0:58:0c:24:34:6c:d0:
54:49:f3:20:85:a5:92:50:98:a5:5b:92:ad:8d:a2:58:61:26:
63:1e:46:dc:5f:20:7e:ab:10:c4:9b:fa:1f:53:14:c4:0c:46:
fd:77:56:db:50:00:1e:6b:4e:47:c9:89:3a:98:de:dc:da:44:
ee:1c:53:e2:42:66:0d:37:11:26:a4:38:fb:c2:8e:1b:03:89:
e3:87:e7:1d:e8:b5:b7:51:9a:70:2e:dc:f3:7f:5b:25:12:09:
9c:22:3e:c9:fb:3a:5c:19:7b:94:8a:c3:cc:d0:63:4e:d7:68:
b9:48:61:b9:77:d7:65:56:0f:a4:23:5c:d0:f6:8f:dd:ac:ba:
9a:87:22:7d:91:03:16:f3:df:2e:df:a1:de:af:20:f8:4f:3c:
90:99:e6:3a:ec:76:8f:06:23:d7:1e:11:f9:9a:04:54:1b:52:
50:fa:5f:aa:85:b3:68:78:04:49:1f:15:13:cc:b0:52:ba:15:
fc:99:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:00:52 2025 by rpki-client