Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/tMS86UfxTCTeQafZaG_nzKlLZGA.roa
File: tMS86UfxTCTeQafZaG_nzKlLZGA.roa (raw, json)
Hash identifier: fapxNEyJXhmMDvsevJu+IytWwOBBgF0yM565nBlNf4g=
Subject key identifier: B4:C4:BC:E9:47:F1:4C:24:DE:41:A7:D9:68:6F:E7:CC:A9:4B:64:60
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E17
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/tMS86UfxTCTeQafZaG_nzKlLZGA.roa
Signing time: Fri 01 Sep 2023 08:49:17 +0000
ROA not before: Fri 01 Sep 2023 08:49:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 113.61.208.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3607 (0xe17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B4C4BCE947F14C24DE41A7D9686FE7CCA94B6460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b8:bc:1f:84:81:83:fa:9c:64:28:b4:56:e4:
7d:4f:53:c8:9c:fb:46:58:d2:62:0e:8f:2c:cd:44:
41:d5:91:17:ce:0f:b6:e9:ee:19:f9:f6:d1:5c:58:
71:a4:ae:a9:ff:7f:ad:fe:87:82:90:29:84:7c:ec:
92:db:ca:32:49:bc:c7:86:19:bb:b5:90:5a:82:7f:
d3:b7:c7:46:e7:47:27:a8:b8:a2:be:dd:ea:3c:48:
cf:47:6d:11:d4:7d:df:41:12:7d:4f:44:43:08:68:
aa:9a:e1:dc:73:7b:25:c3:65:ce:a1:f4:65:b4:ef:
30:c8:9e:0b:f6:81:f7:62:12:f7:24:1c:7f:6f:5a:
61:df:74:80:7c:7b:a6:af:87:4b:2f:a4:59:8b:d0:
0d:09:5f:dd:7a:77:fa:6a:6a:5b:66:de:7e:36:d5:
96:8e:78:8e:2e:4b:6b:eb:19:5a:10:c5:ab:57:64:
02:3d:57:54:d0:9d:a9:98:b6:60:82:34:2d:ba:2c:
b3:60:93:28:a5:d0:78:a0:c8:7e:7d:e7:49:e3:7f:
46:aa:fe:1e:0e:46:a7:aa:67:75:c5:ab:fd:9d:22:
ec:1c:5f:3c:83:81:f6:54:00:a6:a3:c0:e5:74:36:
3a:87:13:ae:b7:ec:3e:28:65:24:66:63:ec:d3:53:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C4:BC:E9:47:F1:4C:24:DE:41:A7:D9:68:6F:E7:CC:A9:4B:64:60
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/tMS86UfxTCTeQafZaG_nzKlLZGA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.208.0/20
Signature Algorithm: sha256WithRSAEncryption
63:3f:6f:9c:18:af:cc:2c:29:fa:60:d4:22:53:f1:5c:a4:7c:
d7:24:33:20:97:a4:50:e7:4e:2c:5c:85:fc:44:ee:64:22:9a:
86:15:48:03:76:f1:d4:6d:df:7b:fe:be:8f:1e:a4:12:0e:53:
a0:40:c6:53:09:0e:f5:6b:8d:a6:2a:ac:e5:3a:18:45:3c:db:
04:f1:e0:a5:a6:a5:fc:2c:88:a2:25:b1:31:5d:c5:f8:37:c9:
9a:06:0a:89:8e:5a:62:1d:45:c6:6e:3d:e3:bf:77:8e:a7:85:
67:a5:76:18:99:8e:44:56:1d:f6:9b:0e:6b:a8:e3:2d:78:df:
88:a9:95:58:71:bc:be:58:e6:09:a4:e6:4e:4a:79:47:11:2f:
bc:d7:7f:83:99:2b:01:33:c0:da:3c:c5:91:ea:32:88:be:10:
ae:97:e3:94:b0:28:fb:1d:a0:e9:6d:f6:ad:02:6f:37:7d:81:
22:e8:e6:b6:9a:94:2b:1b:2f:a0:8b:1c:4c:cb:b6:ab:40:29:
d8:ce:4c:c0:33:37:8e:32:7d:38:35:44:1d:77:dc:02:67:9d:
43:d8:60:86:46:87:06:21:ae:78:a0:34:8a:b6:39:bc:bd:29:
70:59:e2:28:00:44:0c:3c:c1:e2:40:28:36:12:fc:86:03:56:
fb:5f:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org