Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/K7hOj3VEFi9Q11lQelanAjERocQ.roa
File: K7hOj3VEFi9Q11lQelanAjERocQ.roa (raw, json)
Hash identifier: ZB+zsguCttKNlcSck9YsgXXGrtqozm8rhS5jBYCd2R8=
Subject key identifier: 2B:B8:4E:8F:75:44:16:2F:50:D7:59:50:7A:56:A7:02:31:11:A1:C4
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E24
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/K7hOj3VEFi9Q11lQelanAjERocQ.roa
Signing time: Fri 01 Sep 2023 08:49:20 +0000
ROA not before: Fri 01 Sep 2023 08:49:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 203.222.0.0/19 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3620 (0xe24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2BB84E8F7544162F50D759507A56A7023111A1C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ec:b3:35:5e:19:59:7a:52:79:7f:8e:80:8e:
37:c6:53:d0:fe:43:28:08:2f:6a:a5:8b:c5:32:d4:
9f:44:9e:a9:7a:82:39:28:a9:47:35:91:95:f5:60:
c4:cd:41:dc:31:53:bd:ac:70:16:f7:d1:1e:db:9e:
72:4b:30:90:e8:e5:07:e5:01:b3:11:1d:1f:94:bb:
ec:25:32:33:10:38:ed:f3:5a:ab:5e:a8:83:34:fb:
ad:0f:d6:ad:6b:ee:33:85:96:68:72:fc:0f:3c:c2:
ad:75:42:51:bb:fb:52:4e:fd:ef:71:4a:e6:44:62:
26:ff:78:a1:1c:62:46:2f:dc:96:fb:d7:3a:1f:39:
ff:b1:e2:2c:51:b1:d1:2f:ec:48:89:b5:00:6a:b7:
c7:26:ed:61:f1:a3:d1:0f:8e:f6:52:9c:b2:af:4e:
05:9a:0b:f3:43:42:41:e7:9d:46:2d:dc:d6:13:0c:
ee:b8:20:17:37:4e:25:b4:70:03:ce:0b:2a:77:9c:
df:b7:5d:20:05:0c:ff:5c:bf:08:61:2f:7a:fd:ba:
0d:69:25:bf:d3:1f:9d:0b:15:32:bf:c9:aa:c1:95:
39:d4:ac:c2:a1:d3:e7:48:be:e1:a7:c4:44:08:a3:
10:03:7c:50:fc:45:99:31:ef:da:f0:36:b5:21:f7:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B8:4E:8F:75:44:16:2F:50:D7:59:50:7A:56:A7:02:31:11:A1:C4
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/K7hOj3VEFi9Q11lQelanAjERocQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/19
Signature Algorithm: sha256WithRSAEncryption
43:d0:d4:b6:97:a8:d9:2f:af:ef:9e:be:a6:be:7e:b9:2c:9f:
a4:af:7b:5e:5c:13:86:9c:56:3a:54:3b:9d:d6:82:c5:fc:9e:
e9:36:71:75:2c:f2:02:02:51:77:aa:7d:dc:fb:f9:c4:48:68:
35:69:e3:58:c1:2e:ff:a2:91:1e:fa:7d:99:c4:95:cd:42:97:
90:b1:bf:f1:2f:9b:bb:fe:24:c8:3e:8d:60:ab:b0:c2:e3:61:
a9:37:34:3f:5e:ac:44:e1:fe:a7:47:da:d6:2d:af:b6:04:4b:
c2:ff:7c:4e:c1:15:12:cc:3f:62:15:53:bb:0d:67:4f:c6:28:
ab:29:40:69:c8:99:98:d2:4b:fc:17:17:3f:1f:d8:55:57:91:
88:b5:c6:42:55:37:c3:0d:76:e2:7c:65:d5:b0:b8:73:12:a9:
e5:30:e9:cd:39:a7:64:a3:66:3f:e5:99:1b:74:fa:0e:a5:b0:
aa:ec:4e:f5:d8:77:57:70:67:17:e6:57:37:33:8b:54:35:fa:
42:81:f1:73:44:fe:39:26:5d:4c:42:6b:d7:75:83:80:00:62:
2d:bc:3d:59:da:7e:b3:20:88:c9:8c:80:aa:ca:be:55:a0:ea:
4a:a3:c0:aa:10:ec:d6:ed:a9:5d:e4:22:c4:db:c0:b6:d2:49:
cd:90:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org