Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/Z5VdT1z-ZHiyxagrMFGO_oWQtKI.roa
File: Z5VdT1z-ZHiyxagrMFGO_oWQtKI.roa (raw, json)
Hash identifier: kYffpA/stk1kOHGFXdokTRfPs7tM/pMJYXSQwRhnRos=
Subject key identifier: 67:95:5D:4F:5C:FE:64:78:B2:C5:A8:2B:30:51:8E:FE:85:90:B4:A2
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E2C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Z5VdT1z-ZHiyxagrMFGO_oWQtKI.roa
Signing time: Fri 01 Sep 2023 08:49:22 +0000
ROA not before: Fri 01 Sep 2023 08:49:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 27.96.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3628 (0xe2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=67955D4F5CFE6478B2C5A82B30518EFE8590B4A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:f7:f5:4d:56:8d:4c:37:6f:6f:f0:f3:3a:
85:36:b0:64:f2:07:91:66:51:53:d6:5d:fc:81:17:
d5:dc:cf:51:dc:3f:5b:28:cb:22:36:53:b3:a6:d3:
a5:4f:1b:52:4c:8c:63:20:d1:46:33:58:03:bf:ed:
87:e8:e7:2c:6f:54:5a:d8:93:4a:1b:3c:80:60:17:
cd:d6:fd:3e:d3:d3:60:38:4d:93:2b:19:de:52:5d:
91:75:65:3c:eb:60:19:be:d1:14:f9:64:7d:88:70:
ea:87:c7:b2:29:f3:06:83:39:bc:9b:21:b1:aa:b7:
6b:28:09:d5:f6:07:a4:ef:51:b9:56:ec:aa:78:04:
4a:e6:49:5f:7e:e3:54:7b:3b:fd:5d:bd:b7:59:7a:
8e:58:53:c9:71:cd:53:72:de:0f:69:13:84:ec:62:
b0:d0:b5:d8:ab:44:8b:ec:e5:37:7d:c4:11:f6:07:
2a:d0:28:26:93:31:01:1a:de:e8:10:bd:e0:b4:10:
4c:58:89:2d:00:c0:31:0b:a5:ec:a2:45:0a:e8:86:
fb:fb:58:f7:e8:f6:66:27:20:27:d1:b6:d6:df:43:
8c:8c:21:15:05:2a:b3:f6:b6:e5:26:c3:52:b4:66:
71:62:f3:80:4c:a8:22:a1:2a:a4:8c:fa:29:8d:6f:
6a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:95:5D:4F:5C:FE:64:78:B2:C5:A8:2B:30:51:8E:FE:85:90:B4:A2
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/Z5VdT1z-ZHiyxagrMFGO_oWQtKI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.248.0/22
Signature Algorithm: sha256WithRSAEncryption
85:aa:79:07:60:47:af:d0:6c:ce:7a:b2:e0:cf:02:8c:71:f8:
a7:0d:3f:61:94:7b:e5:26:62:e0:f9:33:3f:d5:62:3e:9f:7f:
79:c3:9e:2e:15:ee:d5:e2:fd:6d:33:6f:70:81:23:96:90:80:
97:21:c1:40:8c:1e:53:e9:2b:00:8c:8b:e3:15:ed:0f:8a:b9:
6f:ff:b2:67:b4:f1:7a:2e:1f:9c:c7:8c:dd:3f:c0:78:ba:66:
55:4d:a3:5c:f6:0d:2e:63:80:20:91:bc:d0:bb:b1:17:d8:48:
50:46:10:7b:01:e9:c5:eb:cc:31:0c:80:03:34:e4:c0:fd:b2:
b3:bc:90:e6:d7:89:d7:97:e9:bf:a4:70:db:20:76:31:ab:95:
b7:f6:3d:79:1a:5a:28:43:c0:48:37:11:1a:6c:fe:de:a0:39:
df:90:d2:0e:f3:6d:22:62:c0:d5:c9:65:dd:10:22:02:9c:53:
e1:64:a2:dc:ca:74:25:66:6e:63:e4:b0:d0:0a:c7:e4:4f:ee:
68:d0:e6:c0:dd:73:18:e5:de:bd:8e:da:ad:5c:b5:58:1b:0d:
c0:2a:06:29:ab:1e:a4:8c:61:6d:ae:d7:99:f5:5a:37:5e:32:
49:fc:9b:0c:98:c4:5f:2b:c9:2f:37:8a:54:fe:bc:45:69:c0:
24:66:70:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org