Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/OvVTcCHI3OgCjN-Re6s9p1kOl_A.roa
File: OvVTcCHI3OgCjN-Re6s9p1kOl_A.roa (raw, json)
Hash identifier: CvnQ2z5nxYRf+0v0S0ZmI6W4IA2wFe9XoQq49vYj1ls=
Subject key identifier: 3A:F5:53:70:21:C8:DC:E8:02:8C:DF:91:7B:AB:3D:A7:59:0E:97:F0
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E6A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/OvVTcCHI3OgCjN-Re6s9p1kOl_A.roa
Signing time: Fri 01 Sep 2023 08:49:40 +0000
ROA not before: Fri 01 Sep 2023 08:49:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 121.254.88.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3690 (0xe6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3AF5537021C8DCE8028CDF917BAB3DA7590E97F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:8a:0a:e8:ba:43:1b:79:53:8c:44:d7:a1:
69:a4:5f:4d:aa:ec:cd:be:3b:23:8a:ff:de:7f:b7:
7b:27:91:0b:d5:d1:16:06:2f:00:9a:e1:12:43:91:
37:76:fd:63:76:34:fa:1c:63:8f:66:44:6f:dd:19:
51:f0:b8:7c:14:22:ba:f7:e7:a9:99:a6:ad:a6:1d:
d8:86:a6:b0:de:55:d5:a4:6e:0d:70:bd:c3:cb:69:
67:f2:74:a0:d9:31:6e:b4:e6:a3:d9:55:2e:48:85:
16:d4:e6:51:b8:70:c0:3d:d4:c5:7a:0b:32:cd:45:
54:f3:89:ec:37:75:17:b1:e7:4f:5d:0b:a7:b3:ff:
91:db:0c:04:8c:cc:95:e0:59:73:6a:35:b0:3d:2f:
83:3a:33:1e:82:9b:9c:2c:2f:58:02:43:22:5e:11:
8a:e7:55:a5:80:6c:46:42:d7:c4:5a:da:65:4a:7b:
07:d6:0a:c5:55:cd:2d:be:ca:a3:f3:f4:b3:71:84:
fb:f4:de:a2:c7:27:1b:9e:8c:77:cb:06:72:73:ad:
46:ce:a4:33:5d:f3:fd:b4:d8:20:4e:27:ef:16:87:
b8:47:4d:dd:a8:62:17:48:6a:14:c4:63:21:15:e1:
97:fd:f2:b8:e0:38:21:c5:da:f1:a8:e5:bd:19:42:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F5:53:70:21:C8:DC:E8:02:8C:DF:91:7B:AB:3D:A7:59:0E:97:F0
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/OvVTcCHI3OgCjN-Re6s9p1kOl_A.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.88.0/21
Signature Algorithm: sha256WithRSAEncryption
70:4b:64:72:5c:67:d1:ef:bb:8a:52:e4:d8:ea:30:d5:78:74:
08:ab:2c:97:74:f4:b7:7b:a9:98:a7:f1:32:f9:9c:b6:92:34:
7a:d7:66:3a:46:ae:41:7f:c7:0b:cd:41:14:6b:67:8f:66:81:
cf:6b:b5:50:d1:cd:1c:58:eb:c8:1c:a9:42:8c:6a:3b:a7:57:
f8:79:e8:1b:c7:05:c7:10:20:3c:5c:cb:fb:7c:d2:2a:2f:ad:
0a:0a:db:0d:15:55:07:b1:52:8b:44:c0:7f:c7:98:9d:e7:b2:
ca:78:2e:a1:4a:8f:6c:6b:af:bf:42:9c:f2:e4:cf:8d:4e:d6:
07:7a:a9:06:03:4c:e0:78:9a:fb:b6:b2:2a:04:c7:43:cf:9a:
af:53:0f:ad:c7:54:11:27:76:41:b9:46:6d:c4:42:db:fe:ed:
c1:4d:db:c7:ee:ed:86:ef:a3:5e:81:36:1c:21:91:88:50:a9:
57:56:f9:dc:27:46:3a:52:33:80:c9:e9:36:4a:98:f3:25:25:
b1:7c:ca:25:e3:8e:a2:5f:aa:03:f5:c7:a1:d8:9d:e8:08:ee:
d2:75:54:8d:70:aa:04:6e:77:74:c4:ee:f1:ce:f3:30:3f:9f:
4f:8a:93:8d:07:b0:f5:25:44:a2:7d:9a:67:d7:79:be:af:3f:
be:77:09:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org