Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/1f4R3zB-vgdXuUStlFrQk-Jvj3M.roa
File: 1f4R3zB-vgdXuUStlFrQk-Jvj3M.roa (raw, json)
Hash identifier: 9gbaAy9SJVR+l00co8rgj+yWQCUl7qq8u6oT/ZzhzyM=
Subject key identifier: D5:FE:11:DF:30:7E:BE:07:57:B9:44:AD:94:5A:D0:93:E2:6F:8F:73
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E3E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/1f4R3zB-vgdXuUStlFrQk-Jvj3M.roa
Signing time: Fri 01 Sep 2023 08:49:27 +0000
ROA not before: Fri 01 Sep 2023 08:49:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 121.254.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3646 (0xe3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D5FE11DF307EBE0757B944AD945AD093E26F8F73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:aa:3a:b6:3e:9e:87:50:d2:a5:54:5e:1d:
fe:8e:16:ed:3f:e1:6e:a3:1a:25:95:4e:ad:85:07:
32:5b:61:94:e9:ca:e1:9e:e1:68:da:18:d8:36:10:
83:f8:76:f3:fe:d1:f4:da:bb:b1:b8:15:c6:77:79:
0c:3f:cb:6e:0d:47:f1:cf:76:56:85:4e:69:0a:4b:
aa:84:dc:04:c2:4b:51:0e:4c:8d:b1:d1:64:bc:ea:
4f:eb:77:d8:d8:66:c3:b6:70:35:18:7e:90:62:9c:
f3:49:d5:0a:2e:f5:5b:cf:67:c8:94:b9:89:85:79:
25:ce:2b:ee:53:fb:58:c5:f0:90:bd:79:68:48:38:
c2:8f:75:cf:ff:8b:00:4c:c0:d0:26:10:3b:49:82:
d7:30:32:d6:c4:41:b3:3e:d2:42:f9:05:d2:96:5d:
c6:42:63:3b:9c:0d:0e:fa:8e:96:98:d9:8b:00:84:
41:93:f6:06:a7:e3:3c:2c:c5:16:62:8e:df:a6:bf:
8a:1d:55:f6:81:61:fd:fd:08:97:5d:11:ba:f9:17:
a2:b5:7b:7e:97:69:95:8a:c9:e8:df:be:4b:75:dd:
5f:50:01:0c:5d:ea:7f:17:b1:d7:25:5e:16:c1:8b:
c4:b6:8d:b6:c3:3c:99:76:ac:83:6d:0d:9d:37:c6:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FE:11:DF:30:7E:BE:07:57:B9:44:AD:94:5A:D0:93:E2:6F:8F:73
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/1f4R3zB-vgdXuUStlFrQk-Jvj3M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.80.0/21
Signature Algorithm: sha256WithRSAEncryption
93:2c:27:8b:73:d2:77:1b:f9:b4:0f:3b:d6:4a:f8:47:43:92:
c3:3e:2f:21:62:64:d3:dc:df:6c:33:7f:37:61:bb:d9:4d:81:
90:1b:e8:83:82:58:d1:64:e6:99:20:4d:d5:91:79:89:d4:09:
55:d8:56:b5:ea:90:c4:e9:f4:fc:ce:4b:6e:15:c9:54:0d:d0:
25:e1:72:c9:f7:6b:24:3f:80:53:de:7a:30:7b:ce:18:a5:ab:
c8:99:c0:c0:95:c1:0e:f9:4b:01:29:56:01:0c:c7:2f:60:f9:
0c:eb:35:6e:95:e5:a5:65:ee:90:e9:b7:09:7c:19:c9:46:84:
63:f3:33:67:16:9f:94:12:ff:92:56:03:05:a1:03:a9:08:9c:
ea:c2:e9:b3:59:5f:86:94:e1:53:5e:30:59:20:fe:87:66:cd:
64:eb:8c:31:46:dd:99:2e:d2:f5:97:dd:bf:6d:10:66:db:08:
0d:9c:c1:79:3b:13:b0:7b:ab:9f:8b:4a:34:f8:61:f9:bb:d1:
83:81:cb:2a:e6:82:a5:ed:ac:2e:98:1d:9b:a6:6c:34:e9:10:
0a:5e:3c:53:4e:b4:4d:18:e0:66:61:f8:a7:d5:35:f0:86:38:
6a:a2:34:63:59:a0:25:97:7a:0d:8a:e3:b0:23:f6:3a:d7:fb:
12:77:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org