Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/syLNQzf3ZSsasRfsq1M12U7L8ow.roa
File: syLNQzf3ZSsasRfsq1M12U7L8ow.roa (raw, json)
Hash identifier: SBxC6UoSnfB9WVmV4Pw0jpWl6IdtiWlJHhTVB+nmJ3M=
Subject key identifier: B3:22:CD:43:37:F7:65:2B:1A:B1:17:EC:AB:53:35:D9:4E:CB:F2:8C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E55
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/syLNQzf3ZSsasRfsq1M12U7L8ow.roa
Signing time: Fri 01 Sep 2023 08:49:34 +0000
ROA not before: Fri 01 Sep 2023 08:49:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 203.222.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3669 (0xe55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B322CD4337F7652B1AB117ECAB5335D94ECBF28C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:6b:37:54:32:1d:89:bd:70:da:0e:06:68:
bd:67:fb:81:ea:c4:51:6e:72:da:91:8b:5e:2a:4f:
76:ce:56:7f:d9:f3:bc:84:4a:b6:b1:34:c8:09:ca:
d2:18:0c:7f:23:5f:dd:99:58:f3:11:76:a2:f6:76:
b9:73:99:98:19:b4:5d:6c:6b:fb:7f:bc:81:e9:31:
b3:fe:e7:9b:7d:a2:7c:30:b4:99:9c:48:f3:86:02:
36:7d:c9:45:eb:a5:92:3a:96:39:41:a7:59:d8:a1:
24:9c:19:2f:f9:1f:2d:e1:6e:ea:04:19:d2:33:e2:
f4:11:50:34:99:60:4a:ac:0b:f5:b2:c0:23:2d:aa:
78:f5:04:78:09:04:d4:fa:56:e4:4d:5c:b1:82:39:
32:ca:2f:b5:b3:ec:f2:80:7f:3d:c5:39:4e:bc:98:
91:e9:30:1e:ed:f1:c3:ba:92:de:0e:6f:78:cf:b1:
f4:d6:26:62:61:a3:d3:a4:14:3c:49:ab:9d:11:64:
9a:22:c1:39:70:93:e6:e0:0c:80:50:b2:28:1a:0d:
0a:9d:71:26:93:4c:14:c1:f6:13:7f:58:7a:03:58:
a7:c1:16:d2:e3:f4:bd:fb:c9:85:d8:77:a7:65:cb:
09:4e:12:4b:d0:4d:34:7a:24:f5:f8:da:4c:76:29:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:CD:43:37:F7:65:2B:1A:B1:17:EC:AB:53:35:D9:4E:CB:F2:8C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/syLNQzf3ZSsasRfsq1M12U7L8ow.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.24.0/21
Signature Algorithm: sha256WithRSAEncryption
28:b3:97:87:b4:67:cc:92:54:37:52:21:72:4a:4b:b2:de:90:
4c:3e:44:23:43:60:ac:f1:87:57:fa:3a:70:3e:c8:39:87:52:
d6:7d:65:24:36:b6:a3:8d:15:ff:0f:0e:db:f4:71:05:b1:68:
e3:d6:b9:a9:01:ae:01:e1:53:8a:71:0c:eb:30:f5:5d:69:94:
73:7f:9b:d6:12:30:82:44:17:e8:0a:a8:f0:29:40:33:aa:97:
cd:ba:56:93:61:83:41:c7:02:17:2f:86:34:ad:15:36:da:e5:
1d:94:f1:0a:97:e3:e7:92:86:13:6f:74:22:38:d4:03:08:68:
2f:a4:b4:c2:b4:9e:6d:c5:45:ac:39:56:c5:5b:96:4b:83:01:
51:84:71:d1:55:de:d9:fa:3e:10:b5:b6:95:39:8e:06:dc:ad:
a1:c8:20:cb:1b:13:3e:42:36:09:e6:6c:df:dd:88:72:e2:24:
0f:f7:15:c1:59:24:4a:f8:37:04:be:c1:59:4d:50:1f:9b:29:
e6:4c:14:43:50:31:e8:41:4f:16:d5:f2:c6:91:86:5a:d7:32:
74:1a:2e:5e:dc:49:11:1e:6e:b7:d7:0f:62:50:7a:44:0e:74:
13:af:e9:ba:25:1f:c6:3a:cd:6c:04:74:62:b3:0b:d6:46:0d:
8b:8b:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org