Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/nj76nt2lJPX8480leVTwiWtfkDs.roa
File: nj76nt2lJPX8480leVTwiWtfkDs.roa (raw, json)
Hash identifier: o97p9J4okpEWxhSvLC1PNpnnpwpOF9KyXDpZw97sKGA=
Subject key identifier: 9E:3E:FA:9E:DD:A5:24:F5:FC:E3:CD:25:79:54:F0:89:6B:5F:90:3B
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E4B
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nj76nt2lJPX8480leVTwiWtfkDs.roa
Signing time: Fri 01 Sep 2023 08:49:31 +0000
ROA not before: Fri 01 Sep 2023 08:49:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 203.222.8.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3659 (0xe4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9E3EFA9EDDA524F5FCE3CD257954F0896B5F903B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:31:8c:ac:fe:46:05:14:9e:e5:9b:44:05:
66:cd:46:4d:41:df:c5:d9:47:7c:72:71:24:12:86:
46:c2:e5:63:78:74:79:f4:4a:15:0e:9d:d0:a9:df:
08:eb:c4:8f:ba:07:74:c8:36:ec:20:95:2a:19:6c:
c8:56:20:24:5a:02:1e:0f:d0:34:c4:cf:46:79:4b:
dd:80:2e:10:87:57:e5:3e:9a:06:2a:09:c6:d0:6c:
c4:a2:41:90:1d:09:3e:db:7e:a6:21:02:38:41:e0:
84:89:6c:f7:97:97:98:3a:7b:fd:ab:d9:12:6a:06:
e3:53:04:45:64:8c:80:6e:41:c4:00:d4:27:06:46:
e5:c3:b9:a8:f9:bd:85:91:47:a0:66:10:1a:cf:0c:
dc:0e:67:5f:4a:92:d1:1e:b4:b8:77:7f:2c:9d:6d:
9d:bf:90:bd:b4:4a:d0:1b:8c:7c:1b:8e:0c:30:73:
7b:5c:52:17:66:f6:42:4e:e1:c2:a4:ad:f3:52:10:
ff:83:45:02:20:0e:da:97:b6:cd:ea:54:b1:d1:90:
26:61:42:cd:78:6b:99:5f:61:96:a5:16:87:62:ce:
c6:6d:0c:89:9d:1f:aa:9f:46:e5:72:e3:67:70:17:
2d:1c:24:4d:b3:a3:57:61:9a:94:ad:4a:c0:96:cf:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3E:FA:9E:DD:A5:24:F5:FC:E3:CD:25:79:54:F0:89:6B:5F:90:3B
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/nj76nt2lJPX8480leVTwiWtfkDs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.8.0/22
Signature Algorithm: sha256WithRSAEncryption
68:06:57:55:57:6d:e5:a3:ba:ee:4d:df:05:e5:e7:9d:27:1f:
ca:9c:eb:88:55:4b:5b:ae:37:6a:8b:48:cd:90:05:58:bd:a2:
df:ae:82:3f:9d:cb:78:e6:d8:43:74:74:6f:1b:6c:1a:c9:03:
64:63:20:31:ed:fb:d5:8f:1a:f4:9f:14:d5:3e:bf:71:1c:65:
69:72:1c:80:74:df:fe:3d:11:c3:08:ac:79:fd:89:ce:56:14:
41:67:ce:5f:5a:39:d6:fe:67:cb:34:25:4d:96:2d:10:43:87:
57:f4:d8:42:0e:5d:81:b6:6e:b0:4e:30:2d:d9:f3:fb:ae:00:
4c:0f:f7:e2:42:4b:43:82:a5:05:0d:ad:95:6c:44:e2:93:49:
bc:fc:6f:28:0d:8e:e8:32:50:a8:a1:61:e2:b7:18:5f:59:4b:
f0:70:53:18:64:cb:e3:7a:94:18:3d:c8:53:4c:c2:d3:2d:f7:
00:ae:d1:49:e5:35:be:26:69:b7:d1:41:24:37:15:d0:0e:2c:
e7:b8:dc:3c:c8:1e:d0:30:c6:25:fe:04:be:ee:02:44:57:0b:
6a:48:7e:2f:70:92:23:fb:e7:60:7d:6e:1c:11:7e:80:1e:6e:
b2:9e:b2:fe:fd:99:0b:a4:85:9d:8c:81:95:fa:f9:b1:f4:0c:
6e:1a:81:f3
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDkswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yMzA5MDEw
ODQ5MzFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlFM0VGQTlFRERBNTI0
RjVGQ0UzQ0QyNTc5NTRGMDg5NkI1RjkwM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpOjGMrP5GBRSe5ZtEBWbNRk1B38XZR3xycSQShkbC5WN4dHn0
ShUOndCp3wjrxI+6B3TINuwglSoZbMhWICRaAh4P0DTEz0Z5S92ALhCHV+U+mgYq
CcbQbMSiQZAdCT7bfqYhAjhB4ISJbPeXl5g6e/2r2RJqBuNTBEVkjIBuQcQA1CcG
RuXDuaj5vYWRR6BmEBrPDNwOZ19KktEetLh3fyydbZ2/kL20StAbjHwbjgwwc3tc
Uhdm9kJO4cKkrfNSEP+DRQIgDtqXts3qVLHRkCZhQs14a5lfYZalFodizsZtDImd
H6qfRuVy42dwFy0cJE2zo1dhmpStSsCWzwD3AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUnj76nt2lJPX8480leVTwiWtfkDswHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvbmo3Nm50MmxKUFg4NDgwbGVWVHdp
V3Rma0RzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsveCDAN
BgkqhkiG9w0BAQsFAAOCAQEAaAZXVVdt5aO67k3fBeXnnScfypzriFVLW643aotI
zZAFWL2i366CP53LeObYQ3R0bxtsGskDZGMgMe371Y8a9J8U1T6/cRxlaXIcgHTf
/j0Rwwisef2JzlYUQWfOX1o51v5nyzQlTZYtEEOHV/TYQg5dgbZusE4wLdnz+64A
TA/34kJLQ4KlBQ2tlWxE4pNJvPxvKA2O6DJQqKFh4rcYX1lL8HBTGGTL43qUGD3I
U0zC0y33AK7RSeU1viZpt9FBJDcV0A4s57jcPMge0DDGJf4Evu4CRFcLakh+L3CS
I/vnYH1uHBF+gB5usp6y/v2ZC6SFnYyBlfr5sfQMbhqB8w==
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org