Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/CedR6UibPJ3g8v2NhzziGbWOL1s.roa
File: CedR6UibPJ3g8v2NhzziGbWOL1s.roa (raw, json)
Hash identifier: boykge/+fL7zRvBk/a0rdxvXaV7XQP/sC1sR6nGqZW8=
Subject key identifier: 09:E7:51:E9:48:9B:3C:9D:E0:F2:FD:8D:87:3C:E2:19:B5:8E:2F:5B
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E61
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CedR6UibPJ3g8v2NhzziGbWOL1s.roa
Signing time: Fri 01 Sep 2023 08:49:38 +0000
ROA not before: Fri 01 Sep 2023 08:49:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 203.222.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3681 (0xe61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=09E751E9489B3C9DE0F2FD8D873CE219B58E2F5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:46:3d:6b:8c:7b:f8:8d:11:63:aa:4f:c5:4c:
38:6c:4f:36:21:5a:0a:d0:a8:2c:01:b7:69:99:64:
81:fe:93:54:f3:dd:f9:1a:b3:ce:4c:eb:fa:b9:ec:
ae:83:03:d2:b4:45:9b:ca:3b:ec:04:ab:be:50:8b:
74:58:08:72:b1:10:ab:b9:88:09:4a:c4:be:8c:08:
ec:0e:3e:7b:97:51:5f:7c:75:32:15:c7:98:4b:04:
60:aa:b7:a1:4b:ee:d2:50:3b:ef:84:a3:4e:3c:23:
78:d2:86:4f:8f:e5:01:5e:12:80:b6:74:d4:64:4b:
7b:70:0d:bd:84:e5:70:dc:f6:78:7c:00:74:46:44:
a8:ac:e2:d7:44:27:31:c9:4a:29:03:c5:ef:de:5d:
a8:90:11:c6:79:46:06:9c:d1:be:02:b1:43:57:e0:
ba:ec:65:35:5a:a0:95:c5:f7:0d:d9:f9:d6:64:62:
2e:26:5d:f6:8f:11:c1:78:5c:4a:7b:8c:96:e1:ac:
91:5d:d7:ae:41:26:9e:25:15:36:88:7e:07:a7:83:
3d:5f:27:a9:84:a5:24:d8:ea:4d:dc:7f:11:30:77:
66:84:ce:08:47:5f:2d:52:61:36:66:01:01:52:5e:
67:ae:50:b6:cf:5b:03:ca:b6:7c:92:48:fb:6f:72:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E7:51:E9:48:9B:3C:9D:E0:F2:FD:8D:87:3C:E2:19:B5:8E:2F:5B
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CedR6UibPJ3g8v2NhzziGbWOL1s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:7a:ae:98:45:8e:51:7e:e7:f6:36:eb:4f:0d:1d:73:b9:cb:
3b:23:68:e5:1c:15:9b:84:11:80:3c:f2:52:80:ba:f3:74:87:
93:d0:e4:02:fd:e4:16:af:e4:b8:9a:ba:e5:79:85:58:d5:03:
18:3c:7a:6a:67:68:a0:ac:fb:8e:d1:f7:23:28:cd:fb:b9:f7:
b8:44:d0:07:be:8b:3a:ad:ea:02:a5:01:a8:4b:be:0e:2e:04:
1a:50:5e:68:a9:24:fc:e5:f1:42:cf:93:ae:52:5c:af:22:14:
d8:e1:ef:49:c6:45:44:e2:fc:39:c6:79:f7:04:ec:01:2d:9f:
32:d2:13:0e:79:8e:8b:94:9a:30:9a:76:6a:78:23:8b:9f:d7:
1f:ab:60:c3:e8:96:d4:e0:f7:47:a1:37:38:9b:07:a3:8d:e8:
9f:8a:b0:f1:0f:39:b6:cb:91:76:7b:68:b8:2b:fc:3d:f3:e2:
73:df:9c:ad:40:54:18:41:1c:63:d2:b0:b2:2b:12:42:f2:5c:
a4:7d:75:cd:37:6a:b8:a7:7c:11:c5:e1:fc:b2:e9:b6:54:46:
86:34:e7:c3:ff:7a:28:92:4a:12:b5:ea:e9:ae:ae:6c:37:b1:
a0:ac:ba:cb:97:ee:65:45:0e:41:51:76:b0:be:3a:7f:a1:21:
7c:98:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org