Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/PSQdVwGHusm1MgqlIkT1uOjJNPI.roa
File: PSQdVwGHusm1MgqlIkT1uOjJNPI.roa (raw, json)
Hash identifier: ipZixGA2lQb7hfKcaqohPhAvLLePXw+BvasNS81r9Hc=
Subject key identifier: 3D:24:1D:57:01:87:BA:C9:B5:32:0A:A5:22:44:F5:B8:E8:C9:34:F2
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E60
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/PSQdVwGHusm1MgqlIkT1uOjJNPI.roa
Signing time: Fri 01 Sep 2023 08:49:38 +0000
ROA not before: Fri 01 Sep 2023 08:49:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 121.254.120.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3680 (0xe60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=3D241D570187BAC9B5320AA52244F5B8E8C934F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:47:e5:fd:1f:1a:a0:ed:a9:50:4e:fb:1a:
ae:bb:45:50:e5:08:bd:0c:56:c4:6d:b1:fa:0d:33:
cd:25:41:88:bd:6c:80:9d:33:73:ef:8e:36:a4:92:
44:52:1b:b1:55:c1:08:8d:b3:8e:d1:d9:4a:33:c8:
68:4f:0f:97:36:d6:3f:53:17:8f:90:90:0d:5f:27:
b3:3a:e1:ab:78:b7:e3:d0:be:ff:7c:6f:b3:4f:37:
bb:96:36:bc:1c:45:fc:b3:87:b2:10:21:a9:b9:0c:
37:44:f5:aa:ad:20:c4:64:37:47:4e:fa:99:cf:37:
92:4c:4c:92:0c:08:51:a4:63:2d:bc:97:9a:dd:5a:
7a:ab:ff:47:3d:f8:93:d6:a8:bf:e3:97:e1:d9:56:
ae:45:21:fd:fe:3e:a9:aa:37:18:fd:bd:b4:2b:79:
f5:a3:89:26:80:95:32:02:81:4b:88:99:fe:ad:67:
be:32:a1:16:6c:0e:f6:76:f9:05:51:93:5a:b6:ca:
96:9e:ea:93:86:54:d6:e4:d5:30:7b:50:96:7c:15:
36:36:82:49:0b:cd:af:f1:7a:69:fa:63:0e:c5:55:
5f:90:48:80:4a:fb:1e:f2:7c:49:b3:45:71:54:f2:
01:01:bd:f7:2e:8e:34:0c:0e:b2:ce:48:53:67:e8:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:24:1D:57:01:87:BA:C9:B5:32:0A:A5:22:44:F5:B8:E8:C9:34:F2
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/PSQdVwGHusm1MgqlIkT1uOjJNPI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.120.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:e6:44:36:6b:ca:55:2a:71:e2:30:55:97:a4:38:25:c1:22:
a0:d7:dd:a9:20:37:af:fa:35:ef:4d:f6:08:19:ef:1a:a2:ff:
3e:e7:cc:ab:19:79:1a:e8:7e:b3:23:eb:1f:9d:7e:c8:92:ed:
b6:42:98:f0:03:ab:5f:3a:a0:fd:57:96:df:df:0c:94:b9:e0:
0e:13:88:cd:9b:d7:a6:c7:a8:6e:e5:06:91:78:52:b3:bb:dc:
b7:e3:77:ac:a9:8d:b9:fd:44:f6:81:5a:a6:08:4c:6d:0e:ad:
e4:bf:47:fb:1b:1f:6e:64:fd:8d:2b:7b:2d:ed:91:6a:cd:50:
40:96:f9:82:3d:83:01:b1:85:c0:86:6c:b4:07:28:15:fa:f4:
1a:64:e2:54:76:b9:43:75:77:a8:7c:9e:37:ac:69:69:a6:ed:
d0:e8:12:9c:bc:40:7b:37:5d:85:78:b0:30:87:fa:b3:53:fd:
fa:f8:d4:8a:33:e0:92:b7:01:49:34:1e:1d:1f:e2:c8:42:5f:
06:1b:53:b3:43:42:65:da:03:86:b6:96:39:16:08:1e:1b:6b:
2e:e6:83:fd:21:df:df:2d:ed:de:5a:cd:02:c5:2a:ca:46:41:
b6:f3:45:5e:2c:ac:c8:08:61:c2:73:71:54:3a:1b:45:c1:6a:
e4:a6:e0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org