Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/TonNfxP45miiJWJJryzaNaosb-U.roa
File: TonNfxP45miiJWJJryzaNaosb-U.roa (raw, json)
Hash identifier: 3mysc+55zZL+8dbpqSsybkWN2oguRb1j4bzfiFRNPcE=
Subject key identifier: 4E:89:CD:7F:13:F8:E6:68:A2:25:62:49:AF:2C:DA:35:AA:2C:6F:E5
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E69
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/TonNfxP45miiJWJJryzaNaosb-U.roa
Signing time: Fri 01 Sep 2023 08:49:39 +0000
ROA not before: Fri 01 Sep 2023 08:49:39 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 121.254.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3689 (0xe69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:39 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4E89CD7F13F8E668A2256249AF2CDA35AA2C6FE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:49:05:7c:3d:60:55:4f:0f:5e:4e:61:c4:7b:
68:96:fc:48:ba:d7:41:cc:07:b9:60:56:ae:92:08:
36:17:d7:a3:25:8e:4e:0c:aa:f3:5e:a8:5a:d5:31:
d6:b8:7b:61:d1:16:fe:d0:a1:52:61:a5:54:7a:69:
c6:80:18:d5:b8:58:fd:59:61:dc:4b:92:30:d5:46:
c6:5b:b7:44:98:74:b2:1b:7f:b3:ee:9f:ee:81:35:
c5:ea:58:dc:e0:5e:e1:89:c0:49:cd:0a:bd:b6:26:
8f:fd:01:60:18:27:c4:eb:eb:52:74:f9:ce:90:f3:
45:ba:f1:8a:4d:7f:09:2f:78:02:b1:c1:da:fe:15:
33:94:db:25:c9:5d:d0:97:67:dd:fa:fb:77:d3:a7:
32:81:b8:e3:7f:d4:52:07:c7:3d:c7:74:65:ad:e4:
a1:99:3d:28:f6:e4:43:e6:c7:72:e0:76:3e:a9:55:
a9:2a:fc:04:17:3c:fd:7a:6a:69:8e:08:4e:8a:6b:
cb:93:0b:e2:4d:58:3d:5c:33:eb:e6:0a:f4:a7:3d:
44:ee:eb:a7:a5:1c:a1:a3:e6:10:01:e5:f0:e1:8e:
11:07:f1:18:ca:02:4d:b5:45:ba:c5:e1:86:1f:18:
a0:4a:ff:2c:26:f4:65:92:06:df:7f:36:42:e3:7b:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:89:CD:7F:13:F8:E6:68:A2:25:62:49:AF:2C:DA:35:AA:2C:6F:E5
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/TonNfxP45miiJWJJryzaNaosb-U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.64.0/19
Signature Algorithm: sha256WithRSAEncryption
97:e6:48:5e:3f:73:ee:1a:11:5c:53:dc:81:b5:f3:7d:31:91:
f9:8a:80:4c:ec:02:37:3b:31:10:9b:17:7b:c0:b0:9d:04:fd:
fa:51:c9:91:c5:a1:a4:5c:41:9b:aa:30:ce:e3:89:04:b3:20:
67:bd:0f:39:57:7f:aa:4b:2a:2e:2e:09:8f:6a:8a:5e:ef:f5:
a0:77:75:bc:e4:98:b1:3c:b9:09:26:dd:22:fd:fb:b5:0d:c3:
cc:df:70:93:48:b4:a5:fc:91:aa:8f:0f:ca:59:99:3b:8a:aa:
46:62:4a:e4:5d:8d:f5:5c:c6:7a:29:7b:2c:0d:3d:1d:85:56:
c5:e2:fa:8b:f6:03:f2:4f:8d:8e:c3:33:fd:76:35:f7:bf:a0:
e4:da:12:76:ec:30:1c:71:ae:87:6c:39:9e:da:8a:4e:c1:d0:
55:b8:2f:23:02:18:4c:81:70:12:8a:5a:d6:8a:9b:3b:1e:1f:
09:7d:42:e0:67:16:56:ac:78:b5:9d:9a:ee:55:95:58:a8:2f:
6e:1d:f4:e3:bb:c0:63:dc:b5:e6:7a:51:ac:bc:7c:dc:06:5d:
c0:7c:fd:a6:4b:7d:2f:c4:b5:c7:ef:af:41:e3:59:99:5a:23:
08:b9:17:27:e6:f7:a3:ab:bc:d7:50:ea:1c:a4:38:ab:e2:13:
d9:80:d5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org