Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/5rsYJhEimPgP0Jcsqhk7Vb9srKw.roa
File: 5rsYJhEimPgP0Jcsqhk7Vb9srKw.roa (raw, json)
Hash identifier: cyQlkIO6rqbIUqbZu4ZltU4RuftwOLCGON1DTjRnV7A=
Subject key identifier: E6:BB:18:26:11:22:98:F8:0F:D0:97:2C:AA:19:3B:55:BF:6C:AC:AC
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 10D1
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/5rsYJhEimPgP0Jcsqhk7Vb9srKw.roa
Signing time: Mon 10 Feb 2025 13:56:31 +0000
ROA not before: Mon 10 Feb 2025 13:56:31 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 113.61.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4305 (0x10d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:31 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E6BB1826112298F80FD0972CAA193B55BF6CACAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:2c:cb:05:5f:ce:61:6d:56:97:98:a6:3f:
41:f5:02:11:94:42:e0:6c:88:6b:0f:6d:a1:c4:d4:
12:48:1a:2f:a5:54:f6:f0:d7:73:dd:8b:89:d9:58:
e7:66:03:a2:a2:1d:f5:7c:93:a3:4e:f5:78:22:d7:
2d:ba:57:41:56:9e:59:c9:e6:31:db:d6:c4:fe:12:
36:6c:f6:68:f3:23:b8:69:a8:dd:94:c6:83:1c:81:
59:7a:d8:a8:75:06:9d:16:3c:b4:10:82:6d:2a:a1:
23:43:b6:e5:a2:20:be:6d:bf:d9:d5:ff:a7:da:d7:
e1:cd:3b:e3:cd:56:3e:fb:77:2b:d1:7b:0a:17:32:
b1:81:f1:37:f2:cc:8c:18:de:88:db:15:10:d5:c8:
9a:65:61:dd:bc:1d:22:a8:3b:91:65:de:3b:ca:61:
b6:6f:ab:17:3b:fb:c6:e2:5d:63:ad:8e:7a:f1:0c:
59:3e:1d:9a:04:f9:fa:7c:18:34:9a:e2:68:a9:c5:
5a:ec:7a:d7:0e:09:38:df:e6:12:cb:74:20:bc:bc:
db:b8:61:6f:8d:65:2f:57:51:23:ce:5d:d1:62:39:
f4:54:06:e3:98:84:38:d3:1e:cb:c7:89:c9:ab:47:
7e:40:f4:bd:63:6d:8a:13:63:49:19:a1:e4:9e:c5:
ee:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BB:18:26:11:22:98:F8:0F:D0:97:2C:AA:19:3B:55:BF:6C:AC:AC
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/5rsYJhEimPgP0Jcsqhk7Vb9srKw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.61.169.0/24
Signature Algorithm: sha256WithRSAEncryption
52:79:94:b5:e7:d9:fb:89:7b:56:cf:77:ef:6a:69:5b:60:50:
f5:69:22:37:b4:c5:f0:89:b6:08:e6:a6:53:a2:7e:24:3a:08:
6a:be:93:15:e0:2d:5e:0d:0b:83:d7:45:1c:d3:30:00:dc:4f:
7a:2a:95:79:5e:c7:60:a9:0f:72:8a:a5:3f:8b:35:f5:28:6f:
17:d3:31:a2:6e:82:34:1b:5e:6a:e6:6c:41:f8:82:51:c9:5c:
51:7a:9d:f2:4d:e5:21:f7:6a:f7:be:f4:c3:b4:af:7c:cd:7e:
b6:18:b4:f4:58:58:0c:d9:6a:16:cb:9b:27:0f:91:67:6d:57:
98:5c:20:c2:48:7c:a1:00:10:1a:25:38:ce:a1:eb:0d:a2:52:
3b:91:2e:16:63:39:70:d9:b8:5a:15:98:12:34:77:a1:1b:a8:
e7:55:b3:92:3d:7b:7e:c7:3b:2e:4c:51:fa:19:5d:38:29:77:
d4:f0:a1:87:0a:1f:8b:9c:f8:b4:56:88:d5:7c:79:64:b9:3b:
78:62:4a:0b:d5:fa:81:d3:c2:68:8c:d4:b3:a3:84:a2:f3:37:
ee:de:9d:d4:d4:18:95:a9:e0:98:32:07:c3:f3:fa:84:e9:3f:
76:db:a9:c9:60:a8:e9:f1:6f:7f:c5:93:65:fc:82:19:f3:40:
26:4b:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 02:54:38 2025 by rpki-client