Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZbPogFAtHX1H7mLmw22BfoCA2-I.roa
File: ZbPogFAtHX1H7mLmw22BfoCA2-I.roa (raw, json)
Hash identifier: tURf8IohS6v3l6WLHO8ahrw/hm07kSTArCm5XhmoKKI=
Subject key identifier: 65:B3:E8:80:50:2D:1D:7D:47:EE:62:E6:C3:6D:81:7E:80:80:DB:E2
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E45
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZbPogFAtHX1H7mLmw22BfoCA2-I.roa
Signing time: Fri 01 Sep 2023 08:49:29 +0000
ROA not before: Fri 01 Sep 2023 08:49:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 210.209.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3653 (0xe45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=65B3E880502D1D7D47EE62E6C36D817E8080DBE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:9d:3c:17:39:c7:69:99:8c:8d:e1:a6:b2:a3:
b2:85:f2:6e:94:9f:f7:eb:89:a5:ec:1d:9b:10:ee:
da:51:ba:0c:b5:c6:f4:c9:fe:35:26:7c:d1:48:1b:
17:1d:74:60:83:12:d0:fd:ba:c2:77:33:ad:e2:64:
ad:32:b4:37:ae:d2:59:de:e7:fe:ea:70:ba:c1:38:
3b:41:62:b5:1c:8c:26:3a:49:5f:bd:3c:2a:ca:39:
dc:da:82:c2:94:ce:e7:ff:da:90:51:8c:56:53:76:
ac:57:e4:ec:74:61:f7:22:dc:fb:b0:f1:12:7f:02:
58:ba:0f:c5:bc:5e:d6:8c:bb:04:89:20:e5:e5:b3:
18:d0:d2:47:44:78:ef:8a:61:05:79:9f:42:56:c9:
22:92:4d:99:c5:26:90:81:ea:d0:78:67:69:79:f4:
28:37:0d:f3:81:2d:c4:05:1c:75:4a:4e:38:d9:a2:
cd:2b:9b:35:19:77:be:d1:81:be:ba:37:2e:67:14:
60:b6:56:58:67:f4:bd:eb:2d:60:28:2c:d2:6f:43:
43:76:ea:53:63:ca:93:c6:b3:d1:62:75:89:55:37:
63:c9:2c:5b:1c:21:39:5c:7b:10:73:29:25:c9:d9:
ac:92:9c:93:52:1c:d6:2d:43:02:a3:23:58:6e:19:
bd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B3:E8:80:50:2D:1D:7D:47:EE:62:E6:C3:6D:81:7E:80:80:DB:E2
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZbPogFAtHX1H7mLmw22BfoCA2-I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.192.0/18
Signature Algorithm: sha256WithRSAEncryption
98:c7:5a:84:18:ef:86:4f:50:7a:40:14:40:be:aa:ab:83:2f:
f9:8b:e7:82:a9:9a:97:64:f6:43:be:ca:1b:70:0a:94:8d:cd:
aa:27:5b:e3:44:89:ca:9e:0b:f4:c3:77:5f:0f:b6:fa:71:8c:
88:0e:b0:d5:2e:d2:44:7b:6b:21:ec:2f:35:60:01:69:99:49:
e9:d6:57:4e:41:21:3c:55:e9:cb:2c:4c:92:c9:ce:03:09:a0:
b6:e7:c6:0d:12:93:1c:83:75:0f:65:7a:34:2f:92:aa:29:15:
82:70:71:f5:f5:38:39:92:87:58:5f:ed:d1:9f:69:de:98:24:
77:8b:6d:76:48:14:20:6f:ce:64:d3:c6:9d:8e:86:0e:f5:ad:
4d:dc:50:4a:20:11:ce:2c:96:83:98:96:0c:9f:61:b4:f3:b4:
93:37:15:93:a0:2c:ce:20:aa:d9:d2:4d:2b:a0:6d:13:f4:eb:
96:f0:0c:dc:dc:81:e2:26:c7:73:6d:0c:4c:b0:a4:d8:c1:8e:
e5:5e:4d:9c:d2:84:ff:f4:32:07:3a:19:92:47:86:5f:c0:dc:
19:9e:05:7d:2c:f1:0c:c1:6f:62:99:39:2d:03:ef:fd:9f:a0:
b6:cc:48:b9:1c:d0:2d:c8:c4:1b:c3:6d:2e:fe:2a:83:97:a4:
d1:46:eb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org