Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/8_Zdg9-mDv6FuzIgKkt_h1H6Me4.roa
File: 8_Zdg9-mDv6FuzIgKkt_h1H6Me4.roa (raw, json)
Hash identifier: 80cKmq44U2d7VTYgZ7JUunv4zLOLIfZB+D7Jw1pGV4g=
Subject key identifier: F3:F6:5D:83:DF:A6:0E:FE:85:BB:32:20:2A:4B:7F:87:51:FA:31:EE
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0FE2
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/8_Zdg9-mDv6FuzIgKkt_h1H6Me4.roa
Signing time: Mon 26 Aug 2024 05:13:11 +0000
ROA not before: Mon 26 Aug 2024 05:13:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 203.222.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4066 (0xfe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:11 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F3F65D83DFA60EFE85BB32202A4B7F8751FA31EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:27:dc:dd:e9:25:ae:96:69:41:d4:8c:4d:
ea:3a:24:cf:b2:47:50:cd:6e:e3:91:8d:69:7b:0a:
3a:71:e4:8d:35:47:b1:ca:30:fa:3d:47:bc:74:e1:
17:b9:e3:24:2b:74:87:97:13:d0:a3:be:24:1a:02:
26:47:0e:b0:79:07:0e:32:94:db:99:75:1a:39:3e:
a3:bb:fa:2d:5b:02:f6:3b:fa:98:eb:f5:7f:c3:7d:
cc:9c:b3:71:76:86:d2:0c:ae:dd:be:bb:42:be:9f:
2b:24:a9:03:a2:7e:5b:0f:7b:de:ee:32:f1:1c:94:
72:7f:63:ec:f8:06:b7:01:8c:0e:7d:23:3c:69:35:
fa:aa:c8:09:7e:c4:0f:78:5c:52:62:6d:dd:3d:17:
2c:33:2d:19:08:16:e9:1e:86:eb:53:b0:0a:9d:ff:
21:50:3b:12:95:7d:34:04:93:e5:6c:ab:68:11:a3:
be:42:1c:35:6b:11:6b:83:f9:6c:98:a0:05:83:12:
0f:e5:4f:d5:da:81:74:ca:11:99:86:a1:1a:02:8f:
1a:26:8e:4a:11:b7:17:b6:52:36:91:d8:ab:e3:fd:
11:e6:3d:14:94:8b:30:1b:06:4b:c6:66:5a:47:8c:
43:94:8b:5e:3e:10:46:03:a3:0c:3a:3a:39:ab:55:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F6:5D:83:DF:A6:0E:FE:85:BB:32:20:2A:4B:7F:87:51:FA:31:EE
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/8_Zdg9-mDv6FuzIgKkt_h1H6Me4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.222.0.0/22
Signature Algorithm: sha256WithRSAEncryption
90:06:f4:b1:58:17:c1:93:f1:9b:49:12:b2:c8:e5:e8:c3:cd:
d4:fb:b9:37:8a:b9:a7:3a:0a:1c:f2:a7:45:84:af:d0:d6:15:
27:83:4c:c7:ca:ba:04:c3:83:06:95:49:37:6e:86:18:86:e1:
58:a9:9d:b0:e0:cf:10:5d:31:26:a4:a2:7b:3f:ad:a7:e6:9d:
83:73:1d:7c:36:f8:cc:b3:1d:20:b3:47:af:ce:ab:bb:05:8d:
77:10:cf:f1:f4:56:0e:81:6b:40:c2:d3:e2:f7:a1:1a:3f:21:
1e:47:70:e1:aa:22:6f:aa:85:65:7b:47:03:35:c0:a5:ad:a1:
ff:72:a7:74:e4:a5:37:20:db:0d:4e:a9:4c:2e:06:1c:5c:32:
f3:c8:7b:41:96:1e:44:b5:f2:5f:dd:0d:4e:7b:e9:7e:59:e7:
21:1e:6c:4c:22:8c:71:f3:50:4e:0b:b2:3f:56:89:23:fb:25:
1a:83:75:d3:37:ec:c0:e8:3a:20:21:55:01:c2:6a:a2:86:63:
18:f6:20:22:bc:8a:14:f4:92:bd:b1:bf:7c:77:3d:48:b9:c9:
70:c5:c5:07:e9:60:3a:d7:a9:68:3b:49:05:f0:59:30:f5:b0:
31:bf:c7:87:b4:6c:e1:fc:19:be:9a:b6:ba:c6:57:d8:83:6b:
86:f5:0d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:39:39 2025 by rpki-client