Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/78QYJrTl2Ang17KJlHM5lCGfXIw.roa
File: 78QYJrTl2Ang17KJlHM5lCGfXIw.roa (raw, json)
Hash identifier: TvHfKoxfYmlli+fWZwJoCXrBA73Kl/AYWiKlyJRA/AY=
Subject key identifier: EF:C4:18:26:B4:E5:D8:09:E0:D7:B2:89:94:73:39:94:21:9F:5C:8C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1015
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/78QYJrTl2Ang17KJlHM5lCGfXIw.roa
Signing time: Mon 26 Aug 2024 05:13:22 +0000
ROA not before: Mon 26 Aug 2024 05:13:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 113.61.128.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4117 (0x1015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:22 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EFC41826B4E5D809E0D7B28994733994219F5C8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:20:fc:96:08:e0:fd:cc:1c:85:da:b0:3b:
53:e1:57:1f:b3:d9:a3:79:52:18:a3:92:72:ad:c9:
68:82:c0:f9:3b:e9:92:d8:40:98:3e:f1:56:4a:5b:
c6:e7:76:e2:63:e7:02:b9:22:be:77:c1:a2:aa:9b:
61:82:e8:1c:3e:62:4f:70:b5:b2:8b:b7:5d:2e:0a:
a8:f2:32:1d:aa:3f:ce:b6:25:5f:5f:a6:00:75:d4:
b0:5e:19:03:85:54:52:e0:84:7e:e5:5a:eb:b4:d0:
fe:0b:6c:3a:9c:2a:bf:ce:a1:27:01:83:ed:fc:69:
b3:17:a7:55:67:e4:3f:6d:7a:62:a2:b0:da:53:16:
5d:94:b5:a3:a3:e9:6c:ba:3d:30:35:73:42:1b:50:
43:a9:f8:e4:84:7d:b5:c9:e1:d9:b2:dd:f8:87:32:
97:2d:4a:0c:a5:e6:29:e5:b0:30:e8:61:b5:a4:e1:
ad:cd:2f:8d:2b:e7:98:6b:a3:48:52:f7:d9:99:26:
04:56:2f:25:89:de:37:59:72:24:89:e9:e0:22:fb:
ff:36:99:1e:f0:f1:0e:1c:de:2d:f9:4b:81:06:b0:
42:91:26:44:9a:d8:b6:aa:99:9e:38:71:e2:f1:ae:
4e:b8:bb:46:dd:4a:c3:82:77:62:4d:fe:3b:74:f9:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C4:18:26:B4:E5:D8:09:E0:D7:B2:89:94:73:39:94:21:9F:5C:8C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/78QYJrTl2Ang17KJlHM5lCGfXIw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.128.0/20
Signature Algorithm: sha256WithRSAEncryption
32:5a:ef:95:c1:e4:13:93:63:2b:97:60:14:d4:dc:1e:bb:96:
e6:91:5e:dc:80:87:7b:5a:c9:78:49:7c:a4:3f:79:6d:b0:d0:
9f:c3:56:c0:93:01:fe:09:b1:d1:e6:89:95:a0:91:9b:ce:bc:
1e:e2:df:34:04:5f:eb:43:f2:c4:43:da:91:28:7b:71:fa:b9:
d7:4b:6b:57:a2:42:ec:8e:74:8f:a5:5b:4f:c8:4d:91:0c:29:
92:55:ba:e8:0f:db:85:ab:6e:e3:fc:a0:af:a8:77:62:48:f2:
a3:ef:6e:06:30:e3:c6:bb:4f:7b:a9:da:bb:7b:57:d7:0c:09:
42:50:30:79:be:14:18:ac:e9:5a:78:e9:0b:11:ac:5f:43:6e:
28:35:7e:4f:16:23:a2:f1:b7:57:1c:52:b4:0d:e6:ab:0c:6b:
fd:1e:3a:47:c5:87:01:96:20:5e:57:1b:3f:3b:0c:56:91:78:
05:f4:c0:8b:21:19:df:5f:3a:11:30:41:8a:1a:e9:5b:23:1b:
9d:4d:74:b2:17:09:f6:b7:9c:df:e8:69:e8:3b:09:56:d5:bb:
d2:55:8b:40:a2:52:3b:5d:34:b6:82:5d:0f:7b:6b:be:7b:98:
fe:89:af:9f:09:52:1d:c4:21:a0:49:57:81:a6:d1:a7:b1:15:
10:ed:6d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:09:17 2025 by rpki-client