Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/xkf9tA9GA5aXh7liC7e44sIvEIU.roa
File: xkf9tA9GA5aXh7liC7e44sIvEIU.roa (raw, json)
Hash identifier: EjUGlRDWcmormBfP/WJYILwHAd5GKvmzhXhTA1XHVKU=
Subject key identifier: C6:47:FD:B4:0F:46:03:96:97:87:B9:62:0B:B7:B8:E2:C2:2F:10:85
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E11
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xkf9tA9GA5aXh7liC7e44sIvEIU.roa
Signing time: Fri 01 Sep 2023 08:49:15 +0000
ROA not before: Fri 01 Sep 2023 08:49:15 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 121.254.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3601 (0xe11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:15 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C647FDB40F4603969787B9620BB7B8E2C22F1085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:d5:08:d8:af:26:1b:fd:12:14:5d:f4:fe:
54:61:6c:0f:e6:fc:c6:53:d7:79:7c:16:bc:01:3c:
8d:b4:f1:b5:d1:16:b8:1e:ad:56:3e:87:9f:44:72:
b4:9c:82:b3:da:1a:3c:2a:02:05:13:e5:5d:80:03:
19:59:34:e0:4b:74:a8:1d:a0:cb:f0:d2:d1:bd:7b:
99:6a:f5:e2:cc:94:29:ff:e5:9d:91:f1:1e:21:c4:
da:99:14:77:70:f9:99:7e:f0:dc:1a:a8:1c:20:a3:
eb:22:ab:bc:44:71:f3:a5:37:cc:51:34:99:30:43:
db:87:98:9a:53:ca:bc:90:b2:97:68:61:65:5f:f9:
10:2f:e5:c5:a2:ed:7d:a3:a6:27:25:0f:80:e6:31:
a9:f0:c1:87:88:b9:02:e0:c7:57:0c:09:07:15:ca:
c2:53:bf:0f:a6:07:c1:85:1a:77:07:85:fe:98:06:
13:67:c1:ab:2e:50:b9:51:e5:24:19:ae:2a:5b:63:
a3:75:30:52:a1:13:b2:96:36:87:a1:dc:bc:ca:d5:
14:74:3d:11:4f:d4:87:67:a8:b9:5a:99:f7:e7:ad:
5e:5b:42:02:96:9c:10:cc:9f:6e:cf:42:04:91:96:
95:c1:43:79:aa:fa:fd:5f:ac:97:27:1c:cc:62:e8:
14:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:47:FD:B4:0F:46:03:96:97:87:B9:62:0B:B7:B8:E2:C2:2F:10:85
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xkf9tA9GA5aXh7liC7e44sIvEIU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.96.0/21
Signature Algorithm: sha256WithRSAEncryption
51:38:ee:76:06:98:7c:c2:c0:99:39:d1:17:20:1e:11:0b:3a:
74:be:4f:08:32:fe:36:69:7e:a1:a2:29:ef:82:50:46:33:c0:
25:03:ea:f3:b7:bd:ce:9b:4c:2d:10:bb:b3:15:46:ae:97:3f:
82:7d:60:72:6c:0d:f0:59:42:e6:80:e2:6c:9e:e4:32:67:d6:
ce:f7:a0:c3:07:ed:54:29:38:44:b9:59:97:e6:e3:f5:bc:2f:
70:cc:db:00:74:8d:a8:62:29:29:57:e7:df:20:b2:20:ef:8b:
e7:0e:92:24:4e:25:d6:a2:e5:e2:10:e8:31:3e:7a:b4:41:1f:
e8:82:77:f2:c7:1a:fd:d7:3d:99:65:be:da:7c:0b:b4:44:81:
b7:7f:01:e9:2b:4f:f1:2a:ad:2c:cd:b5:a3:56:9a:7e:42:91:
b3:5d:8e:7e:6e:5d:cc:5d:26:b9:a8:17:f9:8d:3f:43:54:88:
14:24:98:03:8b:b3:37:70:be:05:b4:d9:b3:d1:9f:b5:5f:69:
2c:32:15:9a:f0:95:df:71:f0:93:9c:49:e7:15:95:4c:40:8b:
1b:0e:dd:14:24:6d:5d:74:fd:dc:a8:ca:b7:99:b9:e5:64:b9:
6a:8a:66:9d:2b:1e:5c:39:ac:5c:4a:e0:af:bc:5a:dd:23:dc:
3d:c2:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org