Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/nPrFDeSVDksCT4fvHAvS-IEdisw.roa
File: nPrFDeSVDksCT4fvHAvS-IEdisw.roa (raw, json)
Hash identifier: snnDTkrp/mY6lDgy3Gdb1zDCjnvrTey6jibvzx1ImSI=
Subject key identifier: 9C:FA:C5:0D:E4:95:0E:4B:02:4F:87:EF:1C:0B:D2:F8:81:1D:8A:CC
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E50
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nPrFDeSVDksCT4fvHAvS-IEdisw.roa
Signing time: Fri 01 Sep 2023 08:49:32 +0000
ROA not before: Fri 01 Sep 2023 08:49:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 113.61.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3664 (0xe50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9CFAC50DE4950E4B024F87EF1C0BD2F8811D8ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:ce:a7:ad:52:fa:5a:28:12:55:72:5c:52:
0e:0c:80:ec:5b:fd:18:e2:c6:cd:26:3e:0d:09:af:
fb:5f:7e:20:6e:d6:ea:8b:6c:12:48:c7:63:57:5c:
a8:89:48:1d:82:e9:7b:97:0b:e7:86:25:a0:64:14:
2b:0e:a3:6f:a5:68:6a:1f:c6:01:71:60:78:88:55:
0d:0e:73:39:39:b8:30:bd:56:cc:6d:85:63:24:b6:
21:dc:6b:a4:9d:9b:3f:0d:e9:13:ee:83:e8:45:33:
2e:53:78:e7:82:c0:49:71:9d:c3:52:f4:22:58:cc:
3a:67:60:b7:e9:8f:2a:85:37:b8:19:94:c2:c4:cb:
19:2f:71:77:09:66:2d:c9:0f:d6:65:41:27:97:d5:
4a:dd:ed:42:65:25:30:70:fb:cd:c3:41:16:06:18:
0a:62:e5:b0:1e:4d:13:e5:0b:f5:76:6c:52:38:5e:
86:13:50:a3:ca:ad:f1:18:d5:9a:95:16:12:b3:30:
da:d5:02:ef:91:7b:e9:fc:a1:af:26:fa:74:03:51:
74:19:f6:df:fb:a0:9e:dd:ee:5a:2f:d1:83:08:4d:
17:f3:55:f4:44:ff:94:a5:a9:08:4e:d3:f8:bd:f4:
61:e1:96:7c:c0:81:25:80:4b:66:be:a1:4b:de:a2:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FA:C5:0D:E4:95:0E:4B:02:4F:87:EF:1C:0B:D2:F8:81:1D:8A:CC
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nPrFDeSVDksCT4fvHAvS-IEdisw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/18
Signature Algorithm: sha256WithRSAEncryption
45:96:39:ed:c2:2d:4b:4d:83:ac:4e:27:51:72:b1:b8:9c:fe:
4c:6a:bc:3f:69:5a:a2:4c:0f:19:14:cf:f2:32:df:0e:4c:21:
60:fe:89:72:ed:0a:48:77:f9:42:32:95:f5:c1:15:b3:01:8b:
35:5f:ee:fc:1a:89:64:da:9d:c8:1b:91:ba:b6:36:2d:d5:19:
65:90:01:2f:57:08:fd:29:cc:07:41:7e:82:5a:88:0b:a7:8c:
4c:d1:62:aa:d4:53:fd:c6:b8:f5:43:4a:df:d9:ae:d6:b3:21:
af:b2:eb:aa:cf:96:bd:f1:6a:fc:63:0f:76:0f:ee:67:61:1f:
7d:d8:64:08:78:08:bd:71:a6:a7:7c:c9:42:d6:7c:6e:69:7e:
98:9d:4b:d6:61:11:1b:94:5a:93:5e:98:05:73:d7:16:36:66:
3f:8f:44:a7:c9:b4:57:af:45:0c:55:4c:92:4c:f0:6c:01:06:
85:b7:5a:ac:01:aa:50:ce:6f:19:40:a9:2c:31:e0:55:66:a5:
ef:de:4a:de:8d:9b:c3:bd:03:23:3a:09:c8:0a:b0:9d:75:f0:
17:d8:cd:68:96:8a:c9:b3:0e:a8:c6:c4:e3:2e:2f:7b:05:2b:
69:06:0a:91:38:de:de:42:c5:31:b1:3b:1e:1f:5a:1e:38:42:
8c:84:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org