Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/gDX_bn1Ekyz7y9S9x9NkxsphGNc.roa
File: gDX_bn1Ekyz7y9S9x9NkxsphGNc.roa (raw, json)
Hash identifier: nQ+cEG0pb6BwQEX73LXIG4erjXsp9/X7nvqt2iYk1mk=
Subject key identifier: 80:35:FF:6E:7D:44:93:2C:FB:CB:D4:BD:C7:D3:64:C6:CA:61:18:D7
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 101A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gDX_bn1Ekyz7y9S9x9NkxsphGNc.roa
Signing time: Mon 26 Aug 2024 05:13:23 +0000
ROA not before: Mon 26 Aug 2024 05:13:23 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 119.15.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4122 (0x101a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Aug 26 05:13:23 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8035FF6E7D44932CFBCBD4BDC7D364C6CA6118D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:8b:ef:de:52:75:41:b7:ad:bf:50:e2:bd:
7c:8e:96:51:e2:9f:9e:95:f1:f2:c2:0e:20:4a:e4:
cf:1e:4d:0e:26:d6:c5:1f:38:80:44:ad:21:8d:3e:
0b:7e:8f:11:16:e3:1f:af:33:ef:f5:61:1c:a2:46:
ad:d6:a4:f1:34:8f:1b:a7:a2:28:5e:cc:90:be:36:
5a:1d:42:fa:19:0c:96:20:d3:2b:aa:4e:0c:46:e2:
e5:50:4e:6d:c9:78:88:3c:87:9b:35:35:46:da:c0:
ea:fb:e0:be:5b:98:f5:fa:09:77:7b:d8:2c:f7:05:
d0:fe:03:ee:02:09:8d:b1:66:c0:a0:94:05:73:df:
92:a4:42:68:90:f3:ea:78:4c:fe:a4:cf:67:c1:13:
3a:fc:3b:a8:4e:19:aa:8e:ef:30:d5:22:4f:71:48:
4e:79:10:ad:3a:f6:23:81:67:e9:d2:8d:b1:4e:38:
4a:b0:0d:b5:ba:46:f1:43:9d:5f:1c:68:bf:f8:7a:
89:2a:98:4b:c8:cf:e2:bc:2a:2c:e7:7c:bb:4e:cb:
41:f2:40:d4:57:92:90:f7:cd:02:49:2b:e5:f7:b2:
59:62:db:82:b6:cf:31:29:b9:ce:9b:50:aa:a8:59:
c4:f5:fe:f5:ff:26:bf:b3:42:95:2e:7c:b5:5c:4f:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:FF:6E:7D:44:93:2C:FB:CB:D4:BD:C7:D3:64:C6:CA:61:18:D7
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/gDX_bn1Ekyz7y9S9x9NkxsphGNc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.216.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:33:40:40:e4:51:8a:2a:50:e5:33:74:69:de:03:6b:94:ad:
86:65:7e:9e:b5:74:c9:89:db:b5:26:ac:56:b5:2b:04:30:43:
55:ec:7f:a4:83:60:f4:7a:67:2f:5d:79:bf:8e:a1:19:93:82:
31:d1:8b:c8:e5:87:8f:ac:da:40:44:fb:87:89:00:96:b7:5e:
4b:a7:57:e4:05:5c:4e:a9:ae:b7:80:68:a8:fa:80:15:ca:fb:
43:37:88:42:ab:b3:74:b7:e9:b2:c1:17:8a:ba:a1:c5:d4:67:
94:77:20:1d:b4:41:f4:b1:ee:29:57:04:90:4c:90:b8:fa:6c:
bf:17:78:c8:f7:0e:58:7d:de:b7:61:56:40:e0:33:a7:a0:31:
b2:2d:e6:d7:13:3e:b0:5e:af:63:90:0c:e6:f0:5d:bb:f6:33:
76:f7:be:7e:30:5a:50:32:18:9c:81:1e:5b:67:7f:7b:f3:f6:
ee:d8:93:03:5e:ab:3e:56:a6:ac:4e:e0:c6:c2:0a:a8:d9:91:
15:d4:72:f3:07:e7:34:08:d5:30:a3:1c:c7:62:6f:b9:1f:d2:
f1:64:11:e1:77:d8:de:d7:39:1a:6c:c2:c5:d2:df:bd:ef:df:
4e:7a:8b:9f:39:94:65:91:47:9e:c6:a6:51:eb:54:9b:c4:2a:
37:8a:73:1d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNDA4MjYw
NTEzMjNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDgwMzVGRjZFN0Q0NDkz
MkNGQkNCRDRCREM3RDM2NEM2Q0E2MTE4RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZGIvv3lJ1Qbetv1DivXyOllHin56V8fLCDiBK5M8eTQ4m1sUf
OIBErSGNPgt+jxEW4x+vM+/1YRyiRq3WpPE0jxunoihezJC+NlodQvoZDJYg0yuq
TgxG4uVQTm3JeIg8h5s1NUbawOr74L5bmPX6CXd72Cz3BdD+A+4CCY2xZsCglAVz
35KkQmiQ8+p4TP6kz2fBEzr8O6hOGaqO7zDVIk9xSE55EK069iOBZ+nSjbFOOEqw
DbW6RvFDnV8caL/4eokqmEvIz+K8KiznfLtOy0HyQNRXkpD3zQJJK+X3slli24K2
zzEpuc6bUKqoWcT1/vX/Jr+zQpUufLVcT9sdAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUgDX/bn1Ekyz7y9S9x9NkxsphGNcwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvZ0RYX2JuMUVreXo3eTlTOXg5Tmt4
c3BoR05jLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA3cP2DAN
BgkqhkiG9w0BAQsFAAOCAQEAWjNAQORRiipQ5TN0ad4Da5SthmV+nrV0yYnbtSas
VrUrBDBDVex/pINg9HpnL115v46hGZOCMdGLyOWHj6zaQET7h4kAlrdeS6dX5AVc
Tqmut4BoqPqAFcr7QzeIQquzdLfpssEXirqhxdRnlHcgHbRB9LHuKVcEkEyQuPps
vxd4yPcOWH3et2FWQOAzp6Axsi3m1xM+sF6vY5AM5vBdu/Yzdve+fjBaUDIYnIEe
W2d/e/P27tiTA16rPlamrE7gxsIKqNmRFdRy8wfnNAjVMKMcx2JvuR/S8WQR4XfY
3tc5GmzCxdLfve/fTnqLnzmUZZFHnsamUetUm8QqN4pzHQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:02 2025 by rpki-client