Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/WMuRt-EeofiM9_-L2h-6ZoSyegI.roa
File: WMuRt-EeofiM9_-L2h-6ZoSyegI.roa (raw, json)
Hash identifier: y8MlYXpd9ID5JhgTHjCqKXJzZdB/4m/dPigwjJpGiRQ=
Subject key identifier: 58:CB:91:B7:E1:1E:A1:F8:8C:F7:FF:8B:DA:1F:BA:66:84:B2:7A:02
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 10F6
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WMuRt-EeofiM9_-L2h-6ZoSyegI.roa
Signing time: Mon 10 Feb 2025 13:56:39 +0000
ROA not before: Mon 10 Feb 2025 13:56:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 119.15.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4342 (0x10f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=58CB91B7E11EA1F88CF7FF8BDA1FBA6684B27A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:ac:af:8f:11:bc:fc:b2:c4:e0:7f:c9:8f:
bf:51:be:9e:0b:76:d1:94:5a:4a:74:67:19:c3:8e:
b5:8d:70:c4:d9:d6:d6:4d:6f:8c:60:bd:e5:68:c1:
17:fe:15:2b:78:37:1a:87:f5:63:42:d7:77:8b:db:
93:9b:7f:29:c5:b5:3a:69:78:86:ae:31:e7:1b:8b:
f4:9c:02:9e:fd:4c:3a:64:a1:0b:08:41:2a:fe:64:
ec:0f:bb:a3:ed:bf:fc:5a:6b:84:32:01:5b:8f:02:
3d:b2:6d:22:cb:0d:2f:a2:ce:67:d5:58:d7:e4:06:
5f:3a:1e:42:65:8f:fc:18:bb:05:b4:be:9c:c4:1d:
6c:b6:1d:fc:d8:68:c2:d4:d0:c3:ee:06:4e:07:ec:
37:c2:62:c5:e4:4a:11:f9:96:cc:30:4c:28:cb:9e:
8c:1b:a0:60:35:b9:f2:6a:c9:5a:7d:89:0b:af:11:
cf:cf:be:35:84:b0:95:53:cc:a8:51:dd:7d:3e:62:
f9:77:39:ea:d0:16:e2:f1:dc:bc:5b:9a:72:72:69:
58:2c:cc:30:9f:c4:33:9a:68:72:01:34:45:44:02:
58:d3:3c:74:3c:b4:9c:b7:4c:8a:64:76:72:8e:6d:
86:67:a8:2f:6f:f2:57:01:d7:04:2d:d6:c2:45:e2:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CB:91:B7:E1:1E:A1:F8:8C:F7:FF:8B:DA:1F:BA:66:84:B2:7A:02
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/WMuRt-EeofiM9_-L2h-6ZoSyegI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
119.15.216.0/21
Signature Algorithm: sha256WithRSAEncryption
71:7c:3d:21:c2:92:59:f2:00:33:e4:d8:84:fc:08:79:4d:d6:
79:9a:30:c6:d0:29:ad:39:e8:94:4e:57:fa:da:01:f7:07:24:
94:32:e2:d7:30:be:54:83:2c:21:5c:e5:9a:8b:23:48:f2:57:
a8:af:58:7b:b3:ab:0a:72:10:94:58:f1:69:d7:20:a2:ca:34:
b2:73:28:53:ef:a8:cf:61:cd:44:07:1c:40:e9:1f:ef:78:99:
22:5a:2b:f7:16:69:ae:20:0f:d3:b7:6a:0a:18:8b:f2:28:f2:
06:f1:8d:a6:c1:28:df:b5:8f:fc:72:e4:e1:f0:1e:f9:b9:2c:
fd:3e:96:59:b4:1f:9e:b4:65:e7:5b:21:3b:d0:1c:1f:fe:7b:
17:bd:f6:a5:3f:aa:b0:70:e6:9f:63:d8:9d:40:2d:57:c6:80:
8f:a4:66:27:1d:f6:de:b5:68:a4:24:9c:47:14:7b:08:70:71:
62:ff:a8:4c:f1:94:f2:70:5d:b4:11:65:81:d3:39:99:5c:91:
f3:b2:d0:8a:e7:35:34:61:47:f2:64:fb:9c:be:32:8a:49:cd:
02:4a:8e:18:7a:6c:c9:fa:39:6c:2d:db:5b:e8:05:25:42:9a:
95:be:77:a1:de:ad:9d:df:61:1c:11:31:c7:64:a4:54:eb:c4:
53:1b:b4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:40 2025 by rpki-client