Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/CDTh-zQJXCT2TZLG_JcnnscuXTc.roa
File: CDTh-zQJXCT2TZLG_JcnnscuXTc.roa (raw, json)
Hash identifier: 3/aDzCYgAjsCdpjy2tjTkqrR1m97GKzQu3jJXRF6FOk=
Subject key identifier: 08:34:E1:FB:34:09:5C:24:F6:4D:92:C6:FC:97:27:9E:C7:2E:5D:37
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 101C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CDTh-zQJXCT2TZLG_JcnnscuXTc.roa
Signing time: Mon 26 Aug 2024 05:13:23 +0000
ROA not before: Mon 26 Aug 2024 05:13:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 210.209.128.0/17 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4124 (0x101c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0834E1FB34095C24F64D92C6FC97279EC72E5D37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:7f:77:bd:ba:bb:e9:68:9b:fb:27:52:d7:
8b:0f:9d:e3:db:05:0c:a9:f1:3b:e8:4d:70:7b:dc:
b2:51:dd:cc:9a:42:86:9a:96:36:bc:f3:32:86:cf:
b2:e3:31:1d:31:c6:38:89:21:1c:99:b1:08:1e:23:
82:3e:4a:2d:6b:05:8f:54:f9:73:0f:7f:da:12:9e:
03:7b:c3:f8:ae:8c:b3:67:4a:99:6c:88:47:b4:d4:
2f:d1:24:68:87:b4:e6:95:bf:fc:77:35:98:c4:24:
5c:80:a0:1f:02:61:18:5a:d6:2b:ed:dc:2b:29:48:
be:8c:09:5d:81:57:3d:c6:19:aa:5c:f2:7b:9b:cd:
19:68:d1:4d:a5:d3:2e:ea:af:81:c4:b7:7a:e1:73:
48:78:e3:25:70:cb:2b:5b:a0:94:f5:dc:00:be:57:
92:3c:93:37:49:1d:3d:36:2f:0a:38:2a:7c:b1:59:
58:d4:64:60:e5:e7:4e:43:a3:8c:45:df:f4:22:45:
3f:da:4e:6f:d7:ec:7e:f1:ad:c0:11:eb:a1:0d:a3:
13:59:6d:03:78:6d:ed:7c:76:e1:3c:c0:84:4a:68:
ea:cc:d0:cf:87:4d:49:8b:89:2e:63:e0:da:3b:fc:
ad:0c:e7:f8:ee:ce:a3:1d:6b:c3:ab:1b:a4:88:8e:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:34:E1:FB:34:09:5C:24:F6:4D:92:C6:FC:97:27:9E:C7:2E:5D:37
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/CDTh-zQJXCT2TZLG_JcnnscuXTc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.209.128.0/17
Signature Algorithm: sha256WithRSAEncryption
15:52:01:d7:93:c4:10:29:76:09:83:fd:9d:c5:4a:37:6c:9e:
6d:85:69:1a:de:fe:45:e1:29:fd:90:bb:65:51:51:71:bd:90:
42:05:5d:42:a8:43:d6:71:98:42:84:c6:a6:f9:a4:9f:12:08:
f6:62:37:f8:79:6b:58:ef:68:86:d6:4f:e3:fd:37:45:af:93:
e2:61:de:bb:90:52:27:9e:c1:32:4f:5f:35:ae:4b:47:65:3b:
88:fa:ee:6d:cb:1f:1a:3c:fa:15:5f:89:28:63:21:8e:ee:49:
b4:0d:7f:6b:22:56:4f:77:ff:bd:31:a8:7d:20:df:81:87:c2:
31:e2:27:be:83:5e:df:29:9d:ea:62:91:25:e8:3e:95:e8:d2:
b6:0c:98:00:8e:1f:71:a1:8d:85:01:da:e0:e7:6e:8a:db:a2:
4c:d0:d8:58:2b:41:c2:21:66:13:86:c6:04:60:b9:f8:f1:08:
aa:53:29:f1:59:fa:39:67:e2:67:10:ff:49:ef:4e:71:98:a8:
48:3c:ca:08:0d:af:96:b8:be:a1:a2:dd:f5:99:86:86:e5:63:
7f:be:86:1a:18:20:89:63:43:1b:c8:42:45:c9:26:89:85:88:
b7:05:0d:d4:29:46:c0:55:10:7f:d3:aa:55:24:50:35:d7:13:
89:55:51:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:11:58 2025 by rpki-client