Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/pZsi7I9Ia91ggua7lbS-5SJU0oE.roa
File: pZsi7I9Ia91ggua7lbS-5SJU0oE.roa (raw, json)
Hash identifier: EH3itWFa2lEQgXur4DW4QemqvPSlMO77m3XJHPuBzTk=
Subject key identifier: A5:9B:22:EC:8F:48:6B:DD:60:82:E6:BB:95:B4:BE:E5:22:54:D2:81
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E1C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pZsi7I9Ia91ggua7lbS-5SJU0oE.roa
Signing time: Fri 01 Sep 2023 08:49:18 +0000
ROA not before: Fri 01 Sep 2023 08:49:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18046
IP address blocks: 119.15.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3612 (0xe1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=A59B22EC8F486BDD6082E6BB95B4BEE52254D281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7f:d4:f2:9f:ca:f9:a6:45:35:a6:8c:80:ee:
4c:9a:c1:c4:39:6d:38:e8:b2:4f:78:fc:bf:92:aa:
11:ae:43:8b:82:a9:8c:90:cc:d1:c4:69:bc:6c:7d:
f6:d8:15:d2:32:79:d2:03:48:f3:c0:52:95:d2:1c:
a2:85:b0:88:4d:9c:ef:ad:f3:51:2b:ee:6c:aa:90:
93:fd:3b:05:26:f1:7a:c4:1b:ee:c3:72:d9:a3:68:
e3:b2:19:00:28:38:9c:cc:c1:86:dc:7e:2b:bc:90:
1a:5d:d2:79:94:bf:5b:08:0e:93:7c:0f:5e:c6:86:
7e:ec:38:7f:d9:76:83:c6:03:21:8d:ae:38:00:b3:
9f:4c:7c:06:19:1e:f5:68:23:5a:4a:28:3b:3d:ea:
16:f7:af:b3:c5:66:e8:dc:3a:a3:3d:8a:9c:a0:c2:
14:09:70:22:5b:77:12:f7:f2:70:38:66:b0:e5:0a:
0c:c8:1c:b0:62:3a:54:62:2a:b2:af:24:11:37:3b:
61:6f:d1:7e:d7:7f:d3:2b:fc:1d:5b:93:d7:da:4e:
29:04:c7:74:a4:1c:f2:b3:9b:fd:67:b0:40:0a:6c:
46:79:04:52:ef:f4:f0:20:14:a9:aa:9b:b9:63:79:
4d:bd:6b:bf:d7:96:8b:27:e2:2d:89:d0:ea:d2:e1:
0f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:22:EC:8F:48:6B:DD:60:82:E6:BB:95:B4:BE:E5:22:54:D2:81
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/pZsi7I9Ia91ggua7lbS-5SJU0oE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.192.0/21
Signature Algorithm: sha256WithRSAEncryption
78:cf:10:57:b3:b3:a7:bd:16:f1:54:26:ea:6e:7f:d2:3d:04:
de:42:8a:a9:1a:98:5e:9c:d4:93:af:61:27:b5:26:70:a7:69:
59:de:cb:9c:0d:13:a9:62:68:a5:4c:06:5b:2e:19:e8:a5:df:
61:99:02:21:07:ba:23:7f:14:87:fe:db:f0:df:93:ee:f2:86:
63:ad:0e:da:2b:ae:bb:24:56:3f:6c:e7:13:ff:ca:91:15:ad:
c4:b7:1f:dc:1a:07:be:6b:f9:8d:a9:0b:fe:44:ed:7a:23:73:
55:2d:44:ce:e1:7c:83:b3:84:97:0a:09:93:02:9e:58:fb:b9:
cb:38:18:7b:be:d1:61:6d:20:75:64:ce:fc:19:0d:3c:1a:2a:
3c:de:5c:d2:76:52:28:e9:90:f6:aa:89:41:19:ff:c1:16:b1:
a2:46:27:ae:a8:da:22:8c:f0:ad:83:cd:7f:35:b5:96:d8:06:
27:35:d9:98:0a:c5:44:4e:83:6f:f6:dd:6b:cc:6c:ef:06:87:
2c:12:12:c1:41:46:2a:c9:dd:d2:e2:04:f8:4e:e0:01:ac:86:
00:d8:22:88:3f:98:39:66:81:bb:26:96:ac:a7:5a:4c:bb:96:
48:57:9a:2e:3e:16:60:7a:ce:5b:23:2a:2d:e0:4b:00:d9:92:
f0:ca:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org