Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/GUka7EMs8mo-h_wdbrtMm04EaUE.roa
File: GUka7EMs8mo-h_wdbrtMm04EaUE.roa (raw, json)
Hash identifier: TnyjJ103FptrSvcl8hE4Ob7dXfDNDsaCuyga14MZoCk=
Subject key identifier: 19:49:1A:EC:43:2C:F2:6A:3E:87:FC:1D:6E:BB:4C:9B:4E:04:69:41
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E3B
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GUka7EMs8mo-h_wdbrtMm04EaUE.roa
Signing time: Fri 01 Sep 2023 08:49:27 +0000
ROA not before: Fri 01 Sep 2023 08:49:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 113.61.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3643 (0xe3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=19491AEC432CF26A3E87FC1D6EBB4C9B4E046941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:16:fe:b7:cf:df:15:db:40:ce:66:9c:10:
04:44:66:f9:5b:60:0f:cb:f4:eb:60:94:8b:98:52:
c9:29:fd:39:af:6a:52:f2:2e:c0:ba:b3:bd:ca:ef:
46:01:ea:b6:0e:e3:d7:b7:be:09:2f:0b:77:3d:1a:
54:c5:10:15:c3:2a:c9:d4:20:7f:b0:ff:34:c9:c3:
ec:4b:a6:a9:23:89:ed:fd:ac:9c:df:1d:bf:f2:6b:
50:bf:cf:9f:a2:56:20:e5:d9:e4:98:a7:0f:e5:7b:
60:8f:86:a6:38:d1:41:c1:ff:ce:1f:bd:8a:1a:a6:
3a:59:d4:0d:f7:b0:ae:38:8e:72:a4:3b:53:1a:b0:
07:08:1a:1d:6d:ac:58:48:c5:47:a0:3f:4a:39:a0:
54:b8:2e:94:1a:21:8c:e9:a9:ee:86:ae:8c:fb:ea:
5f:57:92:6a:96:99:c3:a3:8b:62:57:30:17:91:17:
24:ac:5f:f6:bf:07:fc:eb:e6:e9:51:e3:c6:69:20:
8d:d7:e5:ac:e3:ba:a7:41:ea:aa:73:45:99:70:a9:
5b:f9:95:35:35:f7:41:2e:cd:d5:52:5e:7e:7d:c0:
89:40:33:9d:24:4a:2f:cf:18:f1:b5:24:28:36:30:
2d:b8:66:a3:10:b2:b4:4e:10:5c:1e:f3:2e:22:2e:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:1A:EC:43:2C:F2:6A:3E:87:FC:1D:6E:BB:4C:9B:4E:04:69:41
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GUka7EMs8mo-h_wdbrtMm04EaUE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:74:ec:4a:80:ae:15:0a:b3:7b:d8:2e:4c:9f:7c:f8:05:c0:
32:6e:f4:38:f9:64:8e:5d:c1:9e:98:eb:32:bc:0c:3e:8e:fa:
da:f4:d8:d0:59:51:4e:42:6d:f6:43:c1:82:91:7d:ca:e3:6a:
de:1a:02:8d:c9:9e:94:5a:78:ef:e7:68:39:61:8b:2e:ec:c1:
eb:cf:bc:1e:d0:39:c7:a1:4c:e2:a1:13:f0:6e:cd:62:d7:89:
41:a6:05:8d:f5:e0:a0:ae:ea:b0:1e:4b:a2:f7:4b:9a:c3:88:
ec:8d:6a:27:7d:85:31:39:14:04:95:73:9d:0a:e8:bf:9d:ac:
21:28:53:f7:51:c2:20:66:71:8b:80:cd:8c:da:68:16:86:55:
3d:ec:3d:54:00:32:50:5c:0a:53:43:dc:f3:82:42:4f:33:ba:
08:96:6c:0a:fe:80:67:18:50:c9:c4:68:00:43:0a:b6:7d:cc:
de:a0:9a:b8:85:03:4e:7f:86:33:24:8f:29:ba:94:65:d8:0e:
7a:71:05:d9:47:28:57:d0:2f:93:fc:a0:65:66:96:d0:bb:05:
70:31:0b:82:e7:1c:5f:10:c2:ba:1b:c5:e8:55:ef:38:14:60:
89:73:0f:6f:b5:49:5c:fa:0e:10:e6:8d:52:8d:9c:df:f4:9b:
e2:98:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org