Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/-8Z2t_1whPzF9a8sa6p1QUTl1to.roa
File: -8Z2t_1whPzF9a8sa6p1QUTl1to.roa (raw, json)
Hash identifier: hok/xrEj6NevqTlcOw7q3+U0opOjKWUvC3+o5krvcxk=
Subject key identifier: FB:C6:76:B7:FD:70:84:FC:C5:F5:AF:2C:6B:AA:75:41:44:E5:D6:DA
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E1B
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/-8Z2t_1whPzF9a8sa6p1QUTl1to.roa
Signing time: Fri 01 Sep 2023 08:49:18 +0000
ROA not before: Fri 01 Sep 2023 08:49:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 210.209.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3611 (0xe1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FBC676B7FD7084FCC5F5AF2C6BAA754144E5D6DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8f:de:fa:5c:4d:76:24:04:73:e1:e8:66:76:
ce:a2:cc:ff:72:03:db:ba:df:9a:b7:ea:a8:6e:0f:
dc:0e:b6:1c:3c:4a:46:cd:48:85:10:a3:81:91:59:
db:97:f7:f9:b2:d9:69:e3:16:42:0c:3f:9c:c2:84:
04:74:2b:0a:e4:d8:f7:5b:a0:5e:10:a3:82:1d:01:
d9:c1:25:b0:51:d0:54:6d:8e:ae:66:34:55:57:34:
af:3f:15:14:ff:ee:90:09:b7:63:5c:ff:9d:13:e0:
8f:56:61:79:79:d9:2e:3c:a9:15:ba:08:f7:7b:6b:
20:c5:e7:2f:02:79:63:f7:36:43:5a:52:f3:94:2a:
ab:40:fb:bf:4e:16:ab:23:76:32:85:39:37:fe:cd:
6c:39:85:3b:b4:41:4a:35:7e:d7:12:49:99:8a:52:
0f:b5:9a:50:69:26:73:b1:c3:65:c0:9d:66:12:ff:
66:c0:96:3b:1d:e4:6b:f0:a8:d0:92:27:cf:fe:a8:
eb:25:da:4b:30:ea:94:03:a3:a6:6c:b2:6b:7f:2e:
7a:48:37:36:24:c4:a5:93:64:9f:83:24:c2:2e:11:
7e:be:c6:0e:9b:24:50:b9:92:15:ac:14:1b:65:64:
46:3b:1d:b2:0b:7c:70:7f:6f:7b:1a:5d:2a:b2:70:
2d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:76:B7:FD:70:84:FC:C5:F5:AF:2C:6B:AA:75:41:44:E5:D6:DA
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/-8Z2t_1whPzF9a8sa6p1QUTl1to.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
4b:fa:a4:8e:3b:d7:56:a0:31:0d:46:c4:c3:f2:bc:8f:ce:e2:
7e:22:be:f4:3e:e2:71:e0:90:82:a1:0e:bd:32:d3:92:61:8f:
06:ab:56:81:42:89:d1:33:b5:2f:ce:eb:7d:30:6a:ea:c8:b6:
0e:ce:45:50:19:ae:7c:bc:04:e3:1f:d2:64:44:35:49:ae:13:
14:1e:1d:87:41:31:61:0f:f7:fb:93:5b:31:fa:36:ff:90:cb:
52:cb:cb:02:41:f7:15:3a:a0:26:b5:aa:0d:fc:bb:bd:be:d3:
d4:1a:38:f9:c5:cb:b0:80:65:69:58:8e:7b:fd:6e:92:ba:b1:
fc:be:71:26:bd:8b:9c:5a:03:eb:99:64:ea:9d:33:b9:e8:58:
87:e6:f9:c8:54:c5:ad:b2:fe:69:40:49:71:36:31:65:46:4e:
07:42:be:3d:d4:87:6a:dd:32:3a:f8:b9:05:b2:46:a2:b6:ad:
eb:db:b4:77:30:f3:8b:d7:2f:28:45:14:0b:00:2e:87:09:da:
92:ed:67:26:1b:fd:1a:e9:36:4a:65:55:cc:81:66:8a:42:70:
ae:48:92:f5:36:14:4c:59:93:86:b1:eb:11:22:cf:c9:05:3a:
b3:26:51:a1:aa:db:cb:67:d9:51:cc:02:44:d1:16:98:07:dd:
50:3b:51:bc
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDhswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw
ODQ5MThaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZCQzY3NkI3RkQ3MDg0
RkNDNUY1QUYyQzZCQUE3NTQxNDRFNUQ2REEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1j976XE12JARz4ehmds6izP9yA9u635q36qhuD9wOthw8SkbN
SIUQo4GRWduX9/my2WnjFkIMP5zChAR0Kwrk2PdboF4Qo4IdAdnBJbBR0FRtjq5m
NFVXNK8/FRT/7pAJt2Nc/50T4I9WYXl52S48qRW6CPd7ayDF5y8CeWP3NkNaUvOU
KqtA+79OFqsjdjKFOTf+zWw5hTu0QUo1ftcSSZmKUg+1mlBpJnOxw2XAnWYS/2bA
ljsd5GvwqNCSJ8/+qOsl2ksw6pQDo6Zssmt/LnpINzYkxKWTZJ+DJMIuEX6+xg6b
JFC5khWsFBtlZEY7HbILfHB/b3saXSqycC0LAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU+8Z2t/1whPzF9a8sa6p1QUTl1towHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvLThaMnRfMXdoUHpGOWE4c2E2cDFR
VVRsMXRvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdLRoDAN
BgkqhkiG9w0BAQsFAAOCAQEAS/qkjjvXVqAxDUbEw/K8j87ifiK+9D7iceCQgqEO
vTLTkmGPBqtWgUKJ0TO1L87rfTBq6si2Ds5FUBmufLwE4x/SZEQ1Sa4TFB4dh0Ex
YQ/3+5NbMfo2/5DLUsvLAkH3FTqgJrWqDfy7vb7T1Bo4+cXLsIBlaViOe/1ukrqx
/L5xJr2LnFoD65lk6p0zuehYh+b5yFTFrbL+aUBJcTYxZUZOB0K+PdSHat0yOvi5
BbJGorat69u0dzDzi9cvKEUUCwAuhwnaku1nJhv9Guk2SmVVzIFmikJwrkiS9TYU
TFmThrHrESLPyQU6syZRoarby2fZUcwCRNEWmAfdUDtRvA==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org