Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Hd-uz11je1rMauPmSAKZEGmBRBw.roa
File: Hd-uz11je1rMauPmSAKZEGmBRBw.roa (raw, json)
Hash identifier: Wvhdy99PumuuvD7aEyaOSLYdBa32eQ7GpHaDhTpZX5c=
Subject key identifier: 1D:DF:AE:CF:5D:63:7B:5A:CC:6A:E3:E6:48:02:99:10:69:81:44:1C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E6E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Hd-uz11je1rMauPmSAKZEGmBRBw.roa
Signing time: Fri 01 Sep 2023 08:49:41 +0000
ROA not before: Fri 01 Sep 2023 08:49:41 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 211.79.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3694 (0xe6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:41 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1DDFAECF5D637B5ACC6AE3E6480299106981441C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:85:38:a8:3d:e3:dd:0a:99:99:b7:a7:88:30:
91:95:80:65:2e:4d:f6:17:0b:b6:32:29:05:59:68:
59:4d:ba:9e:be:ad:ed:15:c2:49:2e:21:e3:1e:cc:
61:6c:d5:a3:06:2b:86:90:1f:01:6c:79:ef:c9:1e:
98:75:f6:ee:bb:c0:5b:2d:1f:61:f1:f1:25:bb:70:
f2:3a:9c:3a:31:49:5a:4c:d8:09:a1:83:ac:ae:2d:
c8:c3:ab:eb:ea:ea:b2:20:ba:4c:c6:62:12:d3:e2:
6a:3a:72:9e:49:73:31:ad:aa:fd:b4:34:61:84:91:
cd:97:02:54:d3:23:0a:21:8a:4d:72:8d:47:4f:13:
cd:1c:89:0f:06:77:de:f1:31:ad:27:17:d4:62:b0:
d5:3d:14:b1:93:84:89:b5:02:02:fb:f7:16:a1:a6:
13:d8:ec:42:5f:a1:db:36:7f:e9:0d:14:b4:bc:b3:
b4:b5:43:e1:b4:18:f5:0e:1f:89:3b:4b:e8:d1:b7:
86:ea:39:48:80:b0:3c:1b:3e:83:69:6b:06:16:b2:
c6:97:ff:60:59:5f:84:b0:52:e1:28:9e:10:d4:98:
07:be:db:2f:32:c5:32:49:7e:2e:15:e5:82:3e:67:
88:09:f1:ee:59:24:e9:da:41:37:74:01:e7:f7:7f:
ea:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DF:AE:CF:5D:63:7B:5A:CC:6A:E3:E6:48:02:99:10:69:81:44:1C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Hd-uz11je1rMauPmSAKZEGmBRBw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.79.120.0/21
Signature Algorithm: sha256WithRSAEncryption
31:d3:7f:88:df:a6:25:54:f3:e1:de:3d:45:90:d3:39:af:93:
bc:7e:ed:bc:8f:50:cf:a1:f6:62:7c:85:b9:0d:25:7c:f7:2e:
3d:0b:a2:52:e4:18:92:e6:73:4a:dd:57:48:cf:18:e1:0d:bb:
6c:57:7c:78:27:96:de:82:64:f4:9b:f1:8e:26:42:1f:5e:84:
0a:69:09:3a:ea:a8:d1:69:b4:1e:11:c6:d6:7c:ff:b7:65:bd:
10:ae:36:98:32:7a:2b:a3:1d:54:bb:56:47:f4:16:33:78:5d:
f1:c1:84:ab:2f:ff:95:66:aa:42:ba:8a:66:cb:a7:a4:6f:a5:
b6:51:2c:5f:45:a0:90:5c:95:bc:62:4e:ae:d2:46:14:34:bd:
a7:0a:13:54:f6:07:75:bb:71:a7:54:d9:36:c5:2a:ba:87:c5:
51:f1:29:96:4c:53:f1:39:a6:0f:b6:78:fa:3f:92:0c:a1:2e:
c6:92:81:4e:7f:bc:cc:07:f8:48:ee:a9:8b:c0:a2:96:80:e1:
04:07:2d:5b:94:8d:cf:9e:c2:09:6d:9a:ae:aa:b9:8b:47:7b:
24:0b:da:30:ac:f9:6c:2e:23:eb:d3:8f:99:72:85:95:a6:0a:
b0:ac:3b:b1:12:78:36:ea:c7:ec:fb:1f:76:30:0c:48:f3:16:
68:4a:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org