Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/AdyktAW3Ly77Gws01dz9bIp4luQ.roa
File: AdyktAW3Ly77Gws01dz9bIp4luQ.roa (raw, json)
Hash identifier: Q5OfBhwuyWRQ0DgzfmzS3624OjpqJS2DkOauQnc0fkk=
Subject key identifier: 01:DC:A4:B4:05:B7:2F:2E:FB:1B:0B:34:D5:DC:FD:6C:8A:78:96:E4
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 11E5
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/AdyktAW3Ly77Gws01dz9bIp4luQ.roa
Signing time: Tue 03 Jun 2025 06:09:29 +0000
ROA not before: Tue 03 Jun 2025 06:09:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 210.209.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4581 (0x11e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Jun 3 06:09:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=01DCA4B405B72F2EFB1B0B34D5DCFD6C8A7896E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:96:13:46:85:98:93:86:7b:30:87:5c:c3:
95:eb:37:f3:7f:67:9d:53:ed:8f:aa:78:32:df:8e:
14:29:c5:04:0d:19:ff:9c:43:9c:32:63:9a:d6:04:
cc:2a:8d:ba:1c:6a:af:9c:c0:88:9d:0b:51:16:96:
ee:97:44:7c:fa:80:35:67:a4:9e:63:8b:5f:14:c0:
fb:dc:34:d6:93:88:f2:8d:ef:fd:e5:13:8b:f8:91:
ce:6e:5d:c4:25:c6:6e:7d:aa:8c:a8:ed:61:f5:a1:
40:f9:20:97:ef:f5:63:0f:67:46:b5:aa:58:31:92:
cf:b5:d3:c2:c3:6d:dc:11:35:08:4f:5d:ba:2b:bb:
7d:7a:48:70:ec:0a:95:10:00:3d:a9:f4:76:7e:9d:
9d:93:45:28:72:a4:4f:7b:00:f6:54:c1:40:6b:04:
6d:63:ea:06:4a:e8:0b:38:15:eb:e5:63:2b:6f:f2:
17:5e:d9:1e:6e:3b:80:f2:a4:9d:eb:56:0c:20:49:
84:d1:7b:c8:51:ba:8e:84:57:70:16:bd:8f:89:65:
c7:c1:06:f4:5a:ce:5d:97:59:29:ac:15:c6:f1:b0:
9d:a8:03:1a:c8:d1:ad:f3:ef:df:0c:a2:21:d7:35:
4f:0e:67:14:25:c9:75:c0:a8:26:c2:d0:86:74:8a:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:DC:A4:B4:05:B7:2F:2E:FB:1B:0B:34:D5:DC:FD:6C:8A:78:96:E4
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/AdyktAW3Ly77Gws01dz9bIp4luQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.160.0/20
Signature Algorithm: sha256WithRSAEncryption
15:57:c9:3f:68:30:eb:33:1b:c8:c0:a0:2f:99:ab:fe:db:49:
15:22:14:5a:4a:da:84:9d:7d:86:c4:e5:97:41:62:af:74:41:
97:70:4b:1e:d0:21:74:1c:cf:c8:8a:48:00:d2:cb:30:00:95:
dc:ec:e5:35:e0:08:2f:50:89:36:f7:3f:e5:59:b9:a2:87:b9:
75:5f:e6:43:81:66:d1:7d:24:7c:9f:ca:27:25:47:13:d4:54:
9f:95:82:61:7c:4f:d0:d3:61:1f:1f:d5:75:1b:7b:67:e7:b9:
00:df:64:bc:ef:04:69:f8:96:c1:19:c4:57:02:2e:04:ce:4f:
d1:a7:06:83:4f:5c:22:80:6e:e7:f8:51:84:b9:13:0d:84:81:
28:f6:90:bc:38:15:1f:ee:89:e7:38:ea:76:07:99:1c:80:e9:
8a:8e:8c:e0:d3:29:54:d3:b9:18:a3:02:f7:0a:16:56:75:aa:
9e:9a:3c:3f:58:16:32:29:d5:54:fa:93:29:96:6d:18:99:3f:
db:89:87:0c:75:78:ae:7b:38:b7:d9:f4:8a:a1:03:85:d5:79:
7c:4f:60:e2:00:cf:91:24:27:f5:ac:f8:d9:1c:2d:e5:3a:57:
87:28:fe:32:22:97:19:12:47:cd:a4:97:f6:1e:28:be:5c:10:
f3:22:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 03:01:08 2025 by rpki-client