Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/LbSEoBFin_IyK9Q7UZ-pjb5SOVY.roa
File: LbSEoBFin_IyK9Q7UZ-pjb5SOVY.roa (raw, json)
Hash identifier: B+hSQzkh71J3OOo80LHafqBbjG1kIT4owOjpPN/8W5Q=
Subject key identifier: 2D:B4:84:A0:11:62:9F:F2:32:2B:D4:3B:51:9F:A9:8D:BE:52:39:56
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E5A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/LbSEoBFin_IyK9Q7UZ-pjb5SOVY.roa
Signing time: Fri 01 Sep 2023 08:49:35 +0000
ROA not before: Fri 01 Sep 2023 08:49:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 113.61.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3674 (0xe5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=2DB484A011629FF2322BD43B519FA98DBE523956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:35:ed:b2:e7:c7:9f:ea:c4:32:25:f3:30:
92:65:77:25:22:93:e7:f5:7c:b9:1b:ba:35:23:e5:
f0:07:e1:59:25:d1:ff:dc:a7:75:bf:cd:63:61:55:
e1:30:fc:da:b0:29:6b:65:7c:5c:aa:37:a7:d5:ad:
fc:73:91:44:34:e3:59:b5:7b:a7:1e:94:aa:10:a7:
a7:6e:f0:8d:99:f7:46:74:35:19:77:d3:9d:ce:07:
be:51:e3:3d:fa:e5:60:7d:78:5c:d3:1f:d7:7f:f2:
4b:0e:63:dc:f0:34:55:90:bc:19:79:55:e9:e5:79:
bb:26:70:18:8a:46:3e:c5:40:11:eb:16:8c:7f:c2:
9d:07:ad:f2:31:93:5e:e2:58:f9:4b:c7:22:84:57:
01:57:79:b9:d1:99:20:5c:7c:e4:b6:a0:82:fa:ab:
4a:84:0d:2d:90:9a:51:5f:81:9b:50:d7:f5:29:d4:
4a:17:b8:8b:c7:b0:30:97:d5:65:e2:fd:ab:8a:1f:
98:84:fb:aa:24:a6:69:17:55:ec:00:af:04:d5:73:
be:bc:61:41:71:32:2b:62:22:0b:0d:cb:66:60:8a:
99:bd:c1:95:db:e3:e2:fd:d3:2e:70:ae:e3:38:04:
1d:34:75:09:55:99:e5:f6:06:87:c6:3a:04:77:95:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:84:A0:11:62:9F:F2:32:2B:D4:3B:51:9F:A9:8D:BE:52:39:56
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/LbSEoBFin_IyK9Q7UZ-pjb5SOVY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.192.0/18
Signature Algorithm: sha256WithRSAEncryption
95:11:8b:3d:2a:7c:ea:2d:23:30:92:d3:af:7e:18:4b:51:46:
24:a9:cf:16:ea:f2:73:6c:86:53:bb:f1:bf:10:1a:b9:50:01:
dd:81:b7:6d:cd:92:11:99:79:de:1e:69:84:3b:e0:06:5e:1f:
c7:91:52:84:b8:bb:89:21:21:5e:7a:02:b2:28:40:79:6b:1d:
54:1b:39:e8:2c:f7:1e:ad:f6:0b:77:02:6b:74:70:33:7b:57:
44:a1:11:c6:82:be:4a:dd:16:89:6f:5a:04:c2:5c:8e:32:ef:
76:37:4c:3b:61:33:8f:b7:9e:4d:a5:f0:db:23:2a:98:fb:3d:
39:20:a0:c2:e1:a6:a5:24:f2:e6:f0:3a:71:50:fc:58:03:75:
c4:69:6f:49:95:e9:f4:56:c7:31:c3:bb:86:9a:5a:5c:ed:0a:
de:3f:d3:35:72:14:44:aa:fc:fe:b9:0d:2e:17:f8:29:da:80:
57:44:83:37:ec:df:d1:b3:58:fc:81:8e:14:df:1d:16:bb:17:
f0:d9:c4:77:f8:28:18:36:5b:c8:8d:33:2a:3a:9b:5e:84:ce:
39:d8:62:16:48:68:21:0a:35:c9:5a:d2:85:23:5b:d6:15:a0:
d2:0c:4f:40:5f:d5:82:ed:54:52:36:d3:8a:fb:65:84:c5:ff:
6b:fc:86:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org