Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/SFlYl5eL1Rfex0Rb_jiWUmkqEpE.roa
File: SFlYl5eL1Rfex0Rb_jiWUmkqEpE.roa (raw, json)
Hash identifier: hFSnszHp3k9zWzuAbE7vyrJTwdImSOoMOTCx8UFwsJI=
Subject key identifier: 48:59:58:97:97:8B:D5:17:DE:C7:44:5B:FE:38:96:52:69:2A:12:91
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E5D
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SFlYl5eL1Rfex0Rb_jiWUmkqEpE.roa
Signing time: Fri 01 Sep 2023 08:49:36 +0000
ROA not before: Fri 01 Sep 2023 08:49:36 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 113.61.224.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3677 (0xe5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:36 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=48595897978BD517DEC7445BFE389652692A1291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ff:5e:ff:a1:5b:cb:8a:cb:87:e6:5d:1b:44:
82:67:27:bf:9f:8a:e9:ba:8b:23:3b:60:7b:78:38:
db:4e:ac:78:46:0c:2d:97:c6:81:b6:83:8f:e7:39:
3a:e0:a5:68:be:5b:50:46:4b:7a:4d:f5:9b:e8:bc:
3d:e9:1a:86:5a:b1:74:4e:a4:24:2d:4a:01:f7:b9:
79:db:92:78:85:6a:54:22:1f:8d:cf:be:a9:da:30:
54:04:7a:33:d7:0c:6c:68:59:88:4c:26:0e:30:ea:
12:0d:8f:e9:e0:22:28:31:64:0a:a0:2b:9f:8e:28:
db:f8:0d:07:53:31:83:b9:ab:75:05:7e:5f:8c:26:
e1:cc:1c:73:a7:1c:da:ab:3e:66:18:a0:b4:17:fb:
2a:a8:f3:7a:f6:df:69:5a:2d:78:64:bf:60:f4:12:
56:14:42:cb:70:4c:b2:1d:fd:ae:00:6d:c4:ce:f1:
cd:dc:7d:09:46:b4:ab:0f:ec:49:d5:bd:24:73:34:
77:2f:9d:1b:33:70:c3:77:78:dc:d9:69:00:7e:af:
ac:0c:1e:6a:00:43:39:bf:73:7d:b6:4c:7e:7a:95:
76:b7:46:0e:0c:2c:91:77:90:52:0e:8d:fa:0b:f7:
c9:30:6e:b7:7d:ab:38:63:95:fb:47:c6:74:74:30:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:59:58:97:97:8B:D5:17:DE:C7:44:5B:FE:38:96:52:69:2A:12:91
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/SFlYl5eL1Rfex0Rb_jiWUmkqEpE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:98:06:65:44:e9:3f:94:00:96:67:5a:d2:b2:a6:db:92:41:
e3:c9:dd:5a:dc:59:8e:03:09:af:c8:e1:8c:1e:c0:5b:1a:87:
99:cb:3c:e8:28:ec:23:a0:34:7f:d5:9f:8c:d1:be:e6:17:68:
ff:c7:14:49:a2:49:c8:79:55:b5:7d:e1:9d:c4:23:fe:2e:43:
a4:58:4d:fb:5c:b5:10:89:76:df:a6:15:34:73:68:11:51:80:
87:3e:c5:6c:f0:73:27:c5:ed:17:be:d5:26:5a:0e:9d:77:09:
dd:01:9c:0b:b3:5d:bd:0b:9a:e1:d5:ec:9a:f5:11:e1:6b:53:
28:f3:de:94:6b:30:9d:e6:09:df:ec:68:3d:92:16:dc:a1:d9:
18:17:cb:e5:93:60:70:34:95:39:c4:13:23:96:04:b6:16:84:
37:69:0c:ad:f4:4a:68:7f:7b:10:18:77:0c:07:ba:c9:27:91:
48:15:0e:76:6f:64:4b:c0:55:eb:39:bc:17:c1:63:79:1f:39:
5d:1d:c9:a1:8d:2e:f7:12:e6:c0:58:ef:2a:e6:5f:0d:0c:29:
e6:0c:74:05:2b:bc:9a:e3:6b:0b:89:62:4f:f5:91:3c:ab:7b:
90:bb:d8:12:ef:a5:9f:58:e7:aa:ff:04:8e:c3:6a:0a:f9:a9:
d9:c6:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org