Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/fiVJFUK3G9wkCcVdY1-CeZtrC0o.roa
File: fiVJFUK3G9wkCcVdY1-CeZtrC0o.roa (raw, json)
Hash identifier: Vco8LYInzor+gcxA58XnkGX5UU3zJGaTUt3X9kI++ys=
Subject key identifier: 7E:25:49:15:42:B7:1B:DC:24:09:C5:5D:63:5F:82:79:9B:6B:0B:4A
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E5E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/fiVJFUK3G9wkCcVdY1-CeZtrC0o.roa
Signing time: Fri 01 Sep 2023 08:49:37 +0000
ROA not before: Fri 01 Sep 2023 08:49:37 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 210.209.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3678 (0xe5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:37 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7E25491542B71BDC2409C55D635F82799B6B0B4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:e8:3f:c2:ae:ae:f9:01:ab:7c:05:4e:32:
57:e0:d3:9e:5a:a2:19:77:60:4c:b2:73:88:41:69:
87:23:f3:9c:31:68:14:ee:0c:64:41:1e:1a:f0:6f:
e9:be:8f:d4:49:87:38:17:96:d2:e0:05:e2:3a:44:
0c:ae:a6:0a:57:11:74:3a:e5:46:1b:dd:56:6d:2a:
b7:38:fc:3c:3c:ed:29:7c:83:55:e1:0b:c5:4d:78:
06:08:d4:b5:0e:6a:3a:3a:a3:83:d8:e8:d3:fd:da:
0a:4b:ac:f2:b8:7d:c3:2b:37:a8:cc:ee:aa:71:4e:
1b:9a:7b:17:5c:b0:55:6c:06:c4:78:95:f3:7c:81:
6a:1f:d3:c8:58:0e:33:6b:40:e1:d7:54:35:b0:c6:
7c:66:28:17:31:84:f5:2d:64:20:c3:a8:b2:0d:4f:
b8:b6:81:22:a2:bf:ab:5f:e6:52:11:31:d3:3b:06:
0b:da:39:1b:18:87:21:82:f8:16:76:c5:54:a4:74:
12:ac:ac:07:88:ab:ff:c5:6e:3b:ab:98:20:da:b7:
71:ec:1b:dd:1e:fb:02:04:8f:f6:73:24:0c:3f:8a:
e7:ce:c5:80:0f:7b:a4:6d:2a:bd:44:92:a6:6f:68:
2b:dd:35:99:80:31:3d:5e:af:8f:2a:fe:3b:f5:6c:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:25:49:15:42:B7:1B:DC:24:09:C5:5D:63:5F:82:79:9B:6B:0B:4A
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/fiVJFUK3G9wkCcVdY1-CeZtrC0o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.128.0/19
Signature Algorithm: sha256WithRSAEncryption
64:13:07:af:cf:3b:cd:f3:05:ec:55:5d:38:e3:46:72:00:77:
29:be:51:06:37:ce:75:20:4f:37:cf:1c:be:77:ce:f0:91:f4:
ec:44:8e:ad:24:fa:b1:37:97:ed:ee:b2:31:a8:1e:57:72:63:
bd:1a:b9:b8:b8:b8:51:c4:48:02:d4:b1:de:10:39:73:5b:8e:
2d:e7:50:2c:68:08:59:ea:94:a6:47:7e:fc:d2:fe:7b:c7:39:
0f:e7:88:b1:d6:34:24:67:1d:e5:73:d9:d6:94:be:0f:b4:6f:
cb:da:62:c9:15:a1:a8:ba:6e:4d:3a:a9:c5:d3:ad:1f:16:a4:
de:ec:65:b8:1d:72:c5:1c:0c:9b:3b:df:98:04:6e:74:7e:22:
78:88:48:7f:88:44:5f:67:c5:54:aa:f7:d6:52:87:01:c9:58:
48:f5:0b:bc:40:5a:f5:c7:3d:fd:f2:ad:0e:d3:91:57:26:11:
80:7e:a0:5c:d8:d8:ba:31:d1:a3:69:bd:62:94:66:33:84:54:
6b:22:6b:3c:49:39:0e:95:9b:09:5d:b4:c1:fd:d8:ee:8e:58:
82:94:2d:28:e1:ec:34:66:ce:a4:8b:06:e5:01:27:91:7b:8d:
af:dd:24:bb:e5:59:6f:a2:8f:75:88:71:77:ae:5b:0a:d7:bf:
ba:9c:7c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org