Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ejqUjhutljnLz4NfQ_h6hvKvUeA.roa
File: ejqUjhutljnLz4NfQ_h6hvKvUeA.roa (raw, json)
Hash identifier: c+pw62DJevY3RnaNPwj1iNkSqKtLhyVhqtOZyAsUhCs=
Subject key identifier: 7A:3A:94:8E:1B:AD:96:39:CB:CF:83:5F:43:F8:7A:86:F2:AF:51:E0
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0F2F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ejqUjhutljnLz4NfQ_h6hvKvUeA.roa
Signing time: Tue 28 May 2024 00:54:25 +0000
ROA not before: Tue 28 May 2024 00:54:25 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 113.61.172.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3887 (0xf2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: May 28 00:54:25 2024 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7A3A948E1BAD9639CBCF835F43F87A86F2AF51E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c8:f5:82:28:9c:6c:a5:ec:88:8f:b9:5a:b1:
af:5d:02:b0:f6:cb:2d:54:66:94:28:6c:c6:6c:32:
4b:d9:23:ba:96:18:fc:3b:21:48:d1:f7:5b:6a:8b:
77:d4:fe:ea:d7:f9:33:11:86:4b:df:12:a3:ce:75:
f3:a4:16:23:01:f2:15:ee:b2:9c:f2:66:82:49:f1:
f8:05:36:1d:6c:af:19:24:44:ab:e9:36:11:e6:8f:
cf:bf:42:86:9a:c0:41:d3:71:6b:f9:13:ee:53:c1:
a5:a2:1e:bc:a9:99:7f:a5:56:8a:42:fc:f1:85:88:
56:91:6f:c9:65:83:9f:52:10:9e:88:1b:e1:78:ba:
1f:82:e0:ee:71:14:74:e0:7a:72:4e:32:bf:77:82:
59:9f:75:fa:d7:75:8e:f9:63:5f:4f:73:c3:e2:33:
a5:a2:c1:4e:03:56:91:38:a4:9b:9f:7b:c7:a0:e8:
1e:5c:9b:1b:b9:15:2b:9e:f3:5d:17:63:11:8d:f8:
52:b6:d7:7f:ef:01:ce:91:8d:fe:e3:a2:6b:9f:9e:
81:ef:e7:6b:f9:f6:6f:0f:58:a4:3a:63:ef:04:97:
dd:bb:af:e5:09:d8:ea:f6:15:ef:37:6f:b3:8d:45:
b5:7c:38:28:a3:a1:8f:57:1d:fe:09:ce:d0:34:41:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3A:94:8E:1B:AD:96:39:CB:CF:83:5F:43:F8:7A:86:F2:AF:51:E0
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ejqUjhutljnLz4NfQ_h6hvKvUeA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.172.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9b:0d:63:f0:a7:ee:f2:43:b2:a1:ec:f1:9f:17:de:8e:e4:
73:26:a8:60:57:8f:39:55:52:5c:d0:1b:fe:a3:35:03:96:88:
d9:78:d3:82:23:10:9b:72:94:55:54:b8:f9:7e:6f:cf:70:84:
5e:c3:88:ab:a7:d6:67:a6:65:58:2c:26:2d:27:0f:85:21:ae:
b0:05:e3:c0:fe:68:88:6f:0a:c6:b8:5e:5a:e7:7f:58:30:a0:
be:87:f8:a3:4f:52:50:ac:bb:0d:9d:9d:c7:9b:24:3c:26:4b:
ea:3b:2f:a9:13:b9:89:a5:0b:4f:5a:d8:af:43:5b:2c:20:88:
73:6f:11:3c:5b:0a:1d:3b:0e:d9:0b:34:c3:e0:55:eb:51:6b:
b3:3a:c8:9b:4f:48:f0:ed:67:14:ec:11:0f:f7:a0:28:36:5f:
da:45:0e:b9:d0:ab:5a:ab:11:d3:60:4f:4f:2c:d5:e2:b3:21:
54:eb:b9:48:59:43:96:8b:18:c0:5c:e5:dc:42:70:fc:f4:f4:
1f:d6:f4:96:b1:51:f2:d9:6c:66:43:33:7f:2d:00:89:74:11:
4b:9c:1d:d0:55:7d:75:0b:77:c9:3f:82:06:b0:fe:1c:74:fb:
0a:39:aa:bf:3f:ea:f4:27:a4:5a:96:8b:ae:ee:71:ea:22:a1:
79:a9:c6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org