Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/EeMTzd6dEu0lFfq7jigggViNwcA.roa
File: EeMTzd6dEu0lFfq7jigggViNwcA.roa (raw, json)
Hash identifier: aV+ElqDkSaPZiM2LKAjDPUkbtcTp3PlwQHHz05008cY=
Subject key identifier: 11:E3:13:CD:DE:9D:12:ED:25:15:FA:BB:8E:28:20:81:58:8D:C1:C0
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E13
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/EeMTzd6dEu0lFfq7jigggViNwcA.roa
Signing time: Fri 01 Sep 2023 08:49:16 +0000
ROA not before: Fri 01 Sep 2023 08:49:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 111.67.48.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3603 (0xe13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=11E313CDDE9D12ED2515FABB8E282081588DC1C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fe:64:de:f5:b1:c7:ba:01:04:cb:aa:88:1f:
1c:bf:d6:49:7c:cf:4b:47:ed:0a:fe:fe:55:eb:fa:
22:74:7c:dc:98:74:2b:94:8f:d8:85:e9:98:f5:96:
6e:7f:02:3b:2c:02:97:27:35:5a:5a:77:47:34:2c:
72:0b:81:c0:59:f6:b5:fd:fc:50:43:ca:86:9e:a9:
c0:70:c3:d1:bc:3e:f2:cb:2c:5d:34:3b:e5:f8:7c:
da:25:e6:82:c9:c4:15:2f:2d:1f:a0:07:3e:78:7b:
b9:1e:ab:93:6b:da:d7:6f:db:32:f2:8b:26:5c:24:
9c:12:ae:82:6c:12:05:91:57:36:0b:5c:df:c2:81:
84:63:33:63:f8:d1:c3:6b:3b:48:40:11:e1:36:ff:
bb:98:eb:72:d6:48:e1:70:7b:a8:08:5e:ef:99:ea:
90:c0:8e:98:05:63:b3:da:4a:bd:2c:3c:13:04:dc:
96:34:4e:52:a7:c5:9e:87:f2:97:cb:20:90:10:6a:
88:78:f8:ee:72:dd:57:6c:0a:fe:43:f3:e5:57:a6:
10:c6:5f:12:6f:5a:70:b0:11:11:53:91:be:95:7f:
05:7b:8f:0b:f7:9b:f8:90:2f:07:72:d9:d7:67:66:
7b:2e:58:21:ce:89:fb:67:ed:40:71:01:94:0c:44:
bf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E3:13:CD:DE:9D:12:ED:25:15:FA:BB:8E:28:20:81:58:8D:C1:C0
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/EeMTzd6dEu0lFfq7jigggViNwcA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
111.67.48.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:e9:88:e1:fd:4e:be:cc:77:ce:73:b1:a4:b5:41:3d:0d:43:
8e:32:49:06:25:b3:a3:57:5d:76:ab:5c:d5:a1:11:6a:81:96:
3d:29:b4:22:19:3d:60:62:af:18:32:e8:74:b8:e9:df:27:fa:
3f:b1:19:39:2f:39:ba:e5:b0:52:d4:f9:23:bc:3e:7e:18:e2:
e7:92:c3:21:b2:9b:ad:0e:32:4e:25:8b:05:eb:85:c1:68:9b:
46:5b:97:73:e3:5f:b8:6a:0e:a4:67:c8:83:25:6a:c2:82:2e:
59:bb:c0:62:d8:ff:6d:00:67:01:92:2a:9b:b2:4d:f0:fc:d9:
11:0e:b4:9f:31:58:c0:55:70:e8:36:28:81:b4:45:91:73:a7:
19:51:2f:ce:5f:54:5f:d2:dd:e7:fa:c9:6f:ba:9f:b3:e8:e0:
58:a3:ec:f9:18:db:27:f9:51:20:cf:66:ce:ed:0c:03:db:47:
36:c4:b3:2f:f2:d7:d4:60:b1:5a:d6:87:f1:34:6f:29:15:6d:
76:04:4d:2a:0f:79:2a:45:d2:a6:fa:1d:26:a5:6d:50:57:b4:
59:33:33:83:d5:d1:c0:2d:dd:f2:7b:bb:91:2f:13:52:25:5d:
7b:5b:bf:33:af:e2:32:d5:9b:81:95:38:07:8b:78:8a:61:ea:
fb:de:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org