Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/lGstxepd74htnY7wkbQm4v7kzhY.roa
File: lGstxepd74htnY7wkbQm4v7kzhY.roa (raw, json)
Hash identifier: iNNhwdZja9WHdDuAo3cP2P++CZmhDmnnLuYymGhULL8=
Subject key identifier: 94:6B:2D:C5:EA:5D:EF:88:6D:9D:8E:F0:91:B4:26:E2:FE:E4:CE:16
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E3A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lGstxepd74htnY7wkbQm4v7kzhY.roa
Signing time: Fri 01 Sep 2023 08:49:26 +0000
ROA not before: Fri 01 Sep 2023 08:49:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 203.222.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3642 (0xe3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=946B2DC5EA5DEF886D9D8EF091B426E2FEE4CE16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3f:58:c5:ae:15:7d:f5:6b:88:2a:8c:ab:a9:
b7:cf:00:be:69:43:71:21:6f:f5:d5:1c:c9:f4:f6:
91:bb:cb:15:b3:e0:e8:db:cc:5c:30:fa:3f:25:58:
ad:90:3f:10:b3:93:35:25:44:2d:fd:13:6c:4e:41:
e5:4c:e1:2a:a2:d5:fe:dc:95:79:b9:0d:db:09:03:
56:8c:0d:c8:7d:74:91:3f:31:ef:97:cd:c4:18:4f:
bc:6d:87:24:82:6b:ab:f4:7b:d1:7d:27:72:b1:28:
d5:6c:f7:89:c7:3e:c0:af:3a:53:91:27:9f:18:59:
87:cf:8f:7a:74:01:0b:98:6d:90:65:4b:e9:2c:54:
f0:a5:52:7d:bd:28:0a:25:80:a9:df:19:1f:9b:f1:
ab:c5:33:6e:03:32:3b:a9:78:81:c8:21:c4:1b:4a:
6a:a0:02:a4:da:db:b2:b5:ad:4c:1f:38:a5:b9:61:
c4:4c:08:b4:4d:3e:d1:54:65:e0:5a:52:b5:26:9f:
cc:63:f4:31:68:e2:a6:06:5e:e2:a8:ef:7c:c8:66:
60:54:cd:a9:b1:03:93:f9:d8:c4:60:12:81:5d:d2:
31:3f:7c:df:f3:8c:1c:bb:ee:87:06:2b:d4:83:49:
6a:3a:6c:30:97:8e:d6:8a:4c:e8:05:79:87:2e:24:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6B:2D:C5:EA:5D:EF:88:6D:9D:8E:F0:91:B4:26:E2:FE:E4:CE:16
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/lGstxepd74htnY7wkbQm4v7kzhY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.8.0/21
Signature Algorithm: sha256WithRSAEncryption
15:22:0f:d0:b8:fa:67:15:ff:06:8e:99:03:ac:30:4b:95:14:
d8:2b:ce:38:74:29:10:7a:91:c6:c5:b2:a0:e7:ee:3b:cc:52:
09:5c:e4:0a:db:fb:7e:8a:6d:35:36:64:8f:4f:5a:47:02:2e:
0b:d9:cb:a4:c8:8b:35:3d:bc:25:be:d6:97:12:93:d5:38:c5:
09:d0:67:47:23:6f:c7:66:12:e5:90:9b:76:94:80:ac:fa:3c:
c4:86:35:08:99:c2:4d:42:05:8b:dd:bb:e3:54:3d:e2:34:68:
c3:0d:07:b2:3d:50:da:a4:cb:d1:fa:11:dd:3a:fb:b1:08:68:
06:9d:d2:fb:23:76:cc:91:48:37:bd:8a:79:6a:66:95:3f:8c:
7b:ec:7e:16:eb:34:47:d1:6f:2f:68:d5:87:1d:f4:09:b5:ab:
04:ce:cd:a6:8e:19:b9:41:58:af:65:7b:ac:ef:2f:a2:41:dd:
23:06:5b:d3:6d:d7:ea:e9:c2:94:7d:7a:b8:a5:79:39:c8:cc:
9f:28:dd:62:d3:33:a2:8d:9b:c7:db:b6:fe:3f:2f:f8:58:bc:
0a:54:fe:63:2d:3c:bc:a5:0d:fe:bf:91:11:68:f1:c8:20:b4:
c6:ec:c5:ab:fa:c1:c5:19:5d:d1:3b:f4:1f:b8:32:95:fd:fa:
b7:fb:bd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org