Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ym8Tb_9AlvRqHbST5s7ZZ_dz1FE.roa
File: ym8Tb_9AlvRqHbST5s7ZZ_dz1FE.roa (raw, json)
Hash identifier: Usc7ldMnRahwiBclITc1sKM5mM+PN4BWG1Jw0HjWVKs=
Subject key identifier: CA:6F:13:6F:FF:40:96:F4:6A:1D:B4:93:E6:CE:D9:67:F7:73:D4:51
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E1F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ym8Tb_9AlvRqHbST5s7ZZ_dz1FE.roa
Signing time: Fri 01 Sep 2023 08:49:18 +0000
ROA not before: Fri 01 Sep 2023 08:49:18 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 27.96.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3615 (0xe1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:18 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=CA6F136FFF4096F46A1DB493E6CED967F773D451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0f:fd:8d:13:20:9b:d1:ee:ac:d3:57:fd:64:
95:51:e8:88:78:99:0f:f4:9f:94:ef:8d:ab:cb:41:
89:89:55:bb:06:cc:c9:ca:01:e5:fe:b7:d8:e6:e5:
03:06:b4:40:b9:0d:d5:0a:11:b0:f1:53:1d:94:59:
52:ab:85:cf:bd:39:37:ef:d5:24:ae:65:86:27:4d:
f9:05:b9:e5:f0:13:95:c4:b0:8b:aa:b9:83:26:9d:
7a:b4:c2:96:a7:54:2e:7b:64:ad:04:a0:9c:36:22:
33:e3:05:07:a2:ec:a0:70:6d:4f:86:4b:94:f0:7b:
39:81:ed:2e:e9:3a:51:21:a4:c8:b5:4d:d7:a0:4f:
1e:36:83:e3:41:f8:93:d0:92:95:44:8e:a5:82:09:
0f:80:8d:79:72:28:e7:00:f5:6a:d9:e0:29:f2:82:
d2:f9:94:f4:05:eb:11:7b:01:be:5e:44:c9:71:98:
02:9a:73:66:1e:ef:80:eb:85:80:5f:cc:60:1e:8c:
cd:d0:b1:03:b7:41:c3:2f:0b:50:60:6f:4e:55:8d:
e5:51:36:92:85:39:95:40:0c:72:b2:bf:3d:32:cb:
02:3d:ce:88:24:4a:10:88:10:22:b0:be:50:67:11:
81:35:3e:06:cd:a9:f2:b7:27:fa:26:0f:d9:49:15:
79:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:13:6F:FF:40:96:F4:6A:1D:B4:93:E6:CE:D9:67:F7:73:D4:51
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ym8Tb_9AlvRqHbST5s7ZZ_dz1FE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
27.96.252.0/22
Signature Algorithm: sha256WithRSAEncryption
79:51:1b:5b:a3:04:e6:5d:75:50:69:ad:b9:4d:6f:45:d6:e2:
9c:93:8c:b1:1c:9b:99:03:aa:6f:55:af:20:83:77:f2:19:45:
c8:33:bb:07:7c:fb:65:c3:33:8b:3b:54:59:51:61:fb:ee:6e:
35:07:72:2b:fb:6d:23:60:3b:78:3f:dc:87:c5:b7:81:27:79:
85:df:1b:a8:4e:75:f1:a3:19:0a:53:b1:41:6b:92:11:81:7b:
e6:f0:0d:21:8b:63:dd:34:a7:c8:14:10:d1:ff:f9:97:1d:97:
59:09:52:de:40:da:fd:6c:7c:3b:63:6d:ac:d5:de:78:45:28:
33:e3:79:8f:23:b3:e6:a7:1a:96:f0:14:e3:fa:b9:d3:88:54:
37:22:63:8c:57:a3:0b:ce:d6:54:a7:d7:aa:e4:b1:13:f3:16:
17:a1:c3:36:91:64:5e:bf:c7:76:24:e3:85:93:cf:fe:eb:e8:
3b:6b:54:d8:98:a0:8f:9e:c0:ae:8f:9b:5f:68:73:99:34:98:
76:f2:5b:8b:e2:c0:18:76:00:cb:d7:a5:fb:0c:62:a2:66:03:
a2:80:e5:da:20:5d:9c:c1:35:42:31:db:52:2f:cb:57:0b:69:
8d:0d:72:7c:5a:ac:8a:20:b2:0f:96:7f:cf:b6:fa:99:60:da:
93:1a:ce:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org