Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/G-XgUzWL2fmUtijNkI2VSm3_2FE.roa
File: G-XgUzWL2fmUtijNkI2VSm3_2FE.roa (raw, json)
Hash identifier: z236k0HRf/Ty6yFWwvpV/v3+KxHuoiHHbXk+fViAUWM=
Subject key identifier: 1B:E5:E0:53:35:8B:D9:F9:94:B6:28:CD:90:8D:95:4A:6D:FF:D8:51
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E1D
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/G-XgUzWL2fmUtijNkI2VSm3_2FE.roa
Signing time: Fri 01 Sep 2023 08:49:18 +0000
ROA not before: Fri 01 Sep 2023 08:49:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38851
IP address blocks: 119.15.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3613 (0xe1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1BE5E053358BD9F994B628CD908D954A6DFFD851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:58:de:0b:1e:a5:b2:b5:d7:b1:18:e1:24:
c0:b1:72:9f:08:dd:5f:d1:b9:39:b3:f4:79:e4:d5:
91:3e:39:d5:7a:d6:02:22:28:96:42:7a:c6:22:54:
da:0e:fe:e8:62:26:28:b2:94:5f:81:bb:59:ed:1f:
ba:fc:a1:09:30:d3:f9:e7:5c:fd:cb:aa:11:99:34:
c0:a1:91:ce:53:ec:34:35:94:be:8f:1d:d0:27:4d:
9f:b4:18:11:76:22:43:5c:0e:22:7a:46:13:86:d8:
94:dc:b2:cc:fd:21:eb:fb:2d:f6:b2:0b:d7:5b:66:
6d:be:33:32:ba:15:4c:86:b5:d3:66:1a:1e:a2:3d:
57:33:c7:b1:23:92:a3:43:73:26:4c:5e:06:14:d5:
1e:5e:e9:ae:73:4c:21:7a:ae:3d:f9:58:e6:67:25:
62:c5:f6:66:1e:5e:c0:67:43:3b:23:a0:5b:5f:a5:
b2:54:76:59:24:49:9b:65:22:56:b3:d1:32:22:7b:
fa:27:96:73:76:66:4a:63:3c:99:97:00:ca:4c:1f:
e8:79:30:5e:15:83:53:7f:69:bc:4d:05:c3:04:75:
3d:68:5b:80:5b:94:b0:24:e1:da:32:ec:75:ca:e5:
0b:db:48:38:7a:94:e1:16:31:14:5e:35:8f:a7:fe:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E5:E0:53:35:8B:D9:F9:94:B6:28:CD:90:8D:95:4A:6D:FF:D8:51
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/G-XgUzWL2fmUtijNkI2VSm3_2FE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.200.0/21
Signature Algorithm: sha256WithRSAEncryption
63:cb:72:61:87:f6:48:ce:3f:ee:39:67:e4:93:fa:33:4d:16:
a1:cb:85:3e:c4:8c:d7:2c:da:f1:25:20:7e:1d:7c:c2:55:ad:
fd:15:73:47:ad:91:51:f8:73:8a:11:66:e5:66:47:72:60:77:
85:5b:39:3b:16:df:c7:68:fa:60:49:33:7b:fc:80:5f:a9:95:
54:3d:0f:1d:db:ba:7d:3d:ab:af:4e:49:f4:a6:67:98:d6:3a:
10:7c:9c:1a:4f:5e:5a:cc:2d:2f:4b:e8:8d:14:c2:68:fe:34:
cf:89:c5:dd:2a:ec:4a:e2:71:d1:09:e3:97:6b:3e:82:01:a8:
85:d1:11:20:4a:96:f6:f0:6c:fd:85:52:be:80:90:ec:82:a1:
1a:cf:6c:1e:a8:5b:da:87:3b:cc:ca:89:32:f9:1c:d9:73:19:
d3:16:88:b5:e9:47:09:d8:f9:21:bf:3e:59:fa:49:af:e7:13:
6f:aa:6a:3d:3e:0f:7f:bc:17:35:25:28:27:31:57:36:f2:88:
2a:11:fc:33:ca:19:38:d2:8b:65:31:e9:b5:b6:24:df:84:8a:
8e:b9:a3:f7:a2:12:57:c7:5a:4e:fd:a5:6c:2b:01:9b:af:df:
9d:bf:44:0c:ce:a0:2b:f7:2c:b3:91:87:21:1d:07:52:24:31:
4c:60:99:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org