Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/jw9m-IQfr8tfrUaGH9rKTxmJ8mY.roa
File: jw9m-IQfr8tfrUaGH9rKTxmJ8mY.roa (raw, json)
Hash identifier: Mp8WhgfXfJGCcQ1IGwifUhXBKXpom18jEmavZ4ojmw4=
Subject key identifier: 8F:0F:66:F8:84:1F:AF:CB:5F:AD:46:86:1F:DA:CA:4F:19:89:F2:66
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E57
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jw9m-IQfr8tfrUaGH9rKTxmJ8mY.roa
Signing time: Fri 01 Sep 2023 08:49:34 +0000
ROA not before: Fri 01 Sep 2023 08:49:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 27.96.240.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3671 (0xe57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=8F0F66F8841FAFCB5FAD46861FDACA4F1989F266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:a4:32:1c:86:7e:03:4d:88:dd:ea:61:f1:
67:1f:fe:58:39:9a:d1:67:14:56:b2:26:bc:1b:d0:
cc:3b:99:5a:c0:a6:79:35:ea:6d:b6:39:c1:55:fe:
56:16:f6:b8:53:dd:ae:2b:8c:46:a5:c1:40:94:69:
cb:ba:db:99:45:18:a2:32:ed:8e:0a:65:c5:1b:ec:
e3:c6:63:1e:5e:21:41:94:d9:ea:e2:49:80:ea:52:
69:23:e1:19:0b:a0:e1:81:fc:5a:74:67:48:2d:fb:
d8:12:7e:ba:18:e2:1f:a4:df:a2:f1:ef:bf:cc:db:
5d:bc:3a:01:b3:db:2d:6a:26:55:d7:b1:1b:5d:8b:
0e:02:8f:34:8c:2e:4b:ff:93:5c:c7:57:ae:b5:d6:
65:2e:c8:29:27:5b:3c:e7:80:0d:eb:71:1e:98:07:
ab:77:6b:e4:15:d4:f4:87:87:c9:5e:f9:7f:75:5b:
40:97:8a:4b:44:49:71:cb:3e:78:ee:cb:64:e4:ca:
cd:73:8b:01:4b:09:ac:f1:3f:b9:ed:9f:cc:97:a6:
33:0b:62:54:1f:da:54:1f:01:c3:97:74:a2:1e:7d:
01:f7:80:d3:bd:78:dd:13:35:19:3a:79:f1:1c:47:
94:b7:dc:8a:cf:78:23:f5:95:1e:17:5e:a2:5d:1a:
76:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:0F:66:F8:84:1F:AF:CB:5F:AD:46:86:1F:DA:CA:4F:19:89:F2:66
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/jw9m-IQfr8tfrUaGH9rKTxmJ8mY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.240.0/21
Signature Algorithm: sha256WithRSAEncryption
34:63:77:5c:3b:e2:e7:2f:e9:5b:f1:7d:38:23:2b:de:07:0f:
f9:7a:52:36:c2:8f:54:25:e1:e0:ed:1c:4d:dc:c5:a7:aa:17:
fe:5d:ab:17:23:a2:7c:84:9b:55:7d:dd:d1:c0:31:7e:8d:ec:
8d:3d:02:11:a7:d8:e7:3e:eb:81:4a:57:c5:26:b2:bf:48:73:
a8:78:e4:99:a2:75:6e:7a:3a:ca:ee:e8:65:75:57:3b:01:c0:
9e:7e:2c:35:45:4e:d3:1a:ee:da:da:aa:29:3b:9f:4f:23:75:
a4:51:5c:d3:a7:9b:ca:be:b8:1b:b5:31:a2:cf:0d:7d:54:f3:
fb:16:67:60:d2:e7:0a:3b:80:4a:e8:e4:4e:24:e7:e6:b5:32:
79:35:a4:4f:a0:9b:02:47:23:95:ab:63:3d:bd:3f:e2:ea:b1:
3d:bf:70:55:02:20:25:d5:e0:a1:6a:c4:0b:76:05:e7:fe:ab:
54:54:f1:22:de:30:eb:35:f6:5e:75:95:90:eb:72:d3:60:a6:
f3:47:11:f6:a1:98:c7:6b:63:9d:b5:34:52:9c:b7:dd:55:8d:
eb:06:41:be:04:4b:f0:39:ba:43:f9:05:26:08:3f:84:4a:99:
0c:9e:e6:e8:e0:c3:87:9a:f6:38:1f:57:95:e5:31:1f:dc:b8:
e5:05:b8:4a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw
ODQ5MzRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDhGMEY2NkY4ODQxRkFG
Q0I1RkFENDY4NjFGREFDQTRGMTk4OUYyNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWmqQyHIZ+A02I3eph8Wcf/lg5mtFnFFayJrwb0Mw7mVrApnk1
6m22OcFV/lYW9rhT3a4rjEalwUCUacu625lFGKIy7Y4KZcUb7OPGYx5eIUGU2eri
SYDqUmkj4RkLoOGB/Fp0Z0gt+9gSfroY4h+k36Lx77/M2128OgGz2y1qJlXXsRtd
iw4CjzSMLkv/k1zHV6611mUuyCknWzzngA3rcR6YB6t3a+QV1PSHh8le+X91W0CX
iktESXHLPnjuy2Tkys1ziwFLCazxP7ntn8yXpjMLYlQf2lQfAcOXdKIefQH3gNO9
eN0TNRk6efEcR5S33IrPeCP1lR4XXqJdGnbfAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUjw9m+IQfr8tfrUaGH9rKTxmJ8mYwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvanc5bS1JUWZyOHRmclVhR0g5cktU
eG1KOG1ZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAxtg8DAN
BgkqhkiG9w0BAQsFAAOCAQEANGN3XDvi5y/pW/F9OCMr3gcP+XpSNsKPVCXh4O0c
TdzFp6oX/l2rFyOifISbVX3d0cAxfo3sjT0CEafY5z7rgUpXxSayv0hzqHjkmaJ1
bno6yu7oZXVXOwHAnn4sNUVO0xru2tqqKTufTyN1pFFc06ebyr64G7Uxos8NfVTz
+xZnYNLnCjuASujkTiTn5rUyeTWkT6CbAkcjlatjPb0/4uqxPb9wVQIgJdXgoWrE
C3YF5/6rVFTxIt4w6zX2XnWVkOty02Cm80cR9qGYx2tjnbU0Upy33VWN6wZBvgRL
8Dm6Q/kFJgg/hEqZDJ7m6ODDh5r2OB9XleUxH9y45QW4Sg==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org