Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/uM0hwSdupNp5ENlBDua7iu5L9-M.roa
File: uM0hwSdupNp5ENlBDua7iu5L9-M.roa (raw, json)
Hash identifier: 6rylI+nkGpjmzW/drd+HvNFlp/K6085cIZa8sgqjSRs=
Subject key identifier: B8:CD:21:C1:27:6E:A4:DA:79:10:D9:41:0E:E6:BB:8A:EE:4B:F7:E3
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E47
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uM0hwSdupNp5ENlBDua7iu5L9-M.roa
Signing time: Fri 01 Sep 2023 08:49:30 +0000
ROA not before: Fri 01 Sep 2023 08:49:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 203.222.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3655 (0xe47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B8CD21C1276EA4DA7910D9410EE6BB8AEE4BF7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:e5:6b:d6:dd:f0:3c:5f:ec:de:da:d1:3f:
db:6a:03:a3:a1:f5:9a:05:7c:b5:95:0f:8e:1b:5b:
50:2f:33:b5:2a:b4:8c:4b:3f:a6:93:0f:2e:38:68:
59:44:56:b3:a1:72:bf:18:66:f4:ae:05:55:30:01:
a7:4f:21:1b:cf:a9:e9:67:78:33:a7:76:c7:d5:a2:
36:da:ba:cd:85:12:6b:42:1a:6b:09:db:05:8a:82:
37:1a:2b:fc:07:a3:f9:e8:9e:f3:e7:ca:49:cb:12:
5f:34:9c:8c:c2:ce:47:ea:b7:9a:66:cc:b2:71:37:
f6:d5:bd:8a:de:0d:09:1b:ca:69:3e:d7:1f:11:44:
50:a3:54:8b:2a:7d:33:72:f5:98:bd:d6:89:b4:f5:
b4:e9:92:31:d7:bb:5d:40:1b:71:1f:30:f2:a5:02:
9c:43:3d:a7:66:26:ba:30:1a:41:1f:40:32:f3:75:
ed:c2:79:61:b9:8f:e0:c0:51:8e:c0:b2:c6:2e:53:
4a:7b:ed:ab:17:4c:f4:ee:f3:16:bd:7b:29:12:9a:
f6:a5:5f:ea:18:d0:9d:86:b7:67:78:14:7c:96:03:
3d:91:1a:37:8d:a3:6d:19:b7:c2:1e:b6:a3:ba:34:
ec:c1:c0:46:ba:ce:bc:08:12:b5:fe:ec:b7:da:50:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CD:21:C1:27:6E:A4:DA:79:10:D9:41:0E:E6:BB:8A:EE:4B:F7:E3
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/uM0hwSdupNp5ENlBDua7iu5L9-M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:77:ac:16:98:96:91:19:fc:ab:07:4a:9c:f4:29:ed:bb:bb:
0e:dc:4d:21:6c:4c:7a:4d:48:d8:8c:f3:27:09:82:20:94:b1:
34:e6:b5:1f:00:a9:c3:4a:c2:90:e1:07:1f:3e:bf:24:56:82:
0d:30:0b:a9:29:ed:4c:6d:ac:43:ae:bc:41:93:98:87:3f:a9:
97:43:55:28:e4:3e:eb:e4:54:be:c6:c4:da:c0:dd:80:c6:18:
12:dd:f0:9d:8a:4d:09:73:f8:e0:47:74:4d:e1:8d:e5:d8:f1:
5f:ce:b4:5d:c8:8b:2e:4b:1b:f3:a0:a3:5f:73:ad:ca:14:fc:
b5:b8:ca:15:f7:f8:1a:1e:d3:27:d8:18:94:dc:89:c8:4a:ef:
64:63:25:44:63:0e:8a:d4:75:ac:08:56:47:4a:fb:8e:0a:b1:
99:2e:7d:66:66:ca:eb:83:87:88:6b:0a:d8:0a:d8:8c:3a:7c:
c4:0d:00:4e:09:61:1d:32:dd:c6:53:00:19:a1:ae:16:eb:dc:
b4:22:3e:4f:0f:80:01:20:97:20:82:eb:1d:92:f3:aa:bb:f6:
bf:26:9f:2b:1b:1d:13:ec:1e:bc:8e:e8:cc:dc:f5:ff:9d:21:
d5:f8:cf:9e:46:ac:7c:66:35:bc:8d:4b:05:a9:24:61:4b:99:
35:ec:06:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org