Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/i81E1rhqFH6F9J7BRZYuCc_rULs.roa
File: i81E1rhqFH6F9J7BRZYuCc_rULs.roa (raw, json)
Hash identifier: fqK4SzdDaqI/6TGJeerfBGmQTJJYzxqsT5ZAe/FctHU=
Subject key identifier: 8B:CD:44:D6:B8:6A:14:7E:85:F4:9E:C1:45:96:2E:09:CF:EB:50:BB
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1122
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/i81E1rhqFH6F9J7BRZYuCc_rULs.roa
Signing time: Mon 10 Feb 2025 13:56:51 +0000
ROA not before: Mon 10 Feb 2025 13:56:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 121.254.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4386 (0x1122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8BCD44D6B86A147E85F49EC145962E09CFEB50BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:76:f9:88:9a:5e:52:86:c5:c8:e9:49:e1:30:
c7:33:38:19:b1:c0:d6:01:c0:05:08:88:5f:fd:5b:
c9:df:e6:ea:66:f3:af:1a:ea:22:f0:29:02:75:8d:
a2:94:c5:e6:4e:5e:ea:96:42:1f:1d:5d:6f:58:31:
02:d0:bf:b0:59:db:6a:5d:dc:f2:dd:8e:8e:6f:5c:
58:3d:04:bd:36:fa:20:8f:61:c2:39:c7:01:ec:b7:
a2:c0:9f:52:03:e3:8c:75:c0:13:21:0f:b1:af:01:
c8:35:e6:15:f1:f3:8a:9e:c0:a1:6d:42:e7:7a:06:
96:92:e5:a2:b4:86:81:b3:e0:0a:38:82:65:13:a4:
99:57:74:44:bf:32:d3:72:84:1a:54:aa:d2:63:de:
dd:c5:11:66:55:bf:67:ff:82:c4:3e:0e:c7:e9:01:
f0:da:19:1a:d0:c2:62:fd:fa:15:cd:c6:d7:c9:dd:
3b:4f:5e:57:32:7f:63:fc:56:b5:8a:15:f3:6c:61:
db:f5:fa:40:00:1d:1a:60:c8:07:ea:ab:b1:38:7d:
61:4a:e4:03:63:74:d6:16:73:0c:23:f7:ca:14:0c:
e7:c8:4b:bc:01:9d:17:cf:c4:4a:b3:bd:d4:81:a3:
b2:bc:54:d3:4e:d5:e7:cf:3b:4f:80:5f:54:34:be:
85:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CD:44:D6:B8:6A:14:7E:85:F4:9E:C1:45:96:2E:09:CF:EB:50:BB
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/i81E1rhqFH6F9J7BRZYuCc_rULs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
121.254.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:d3:22:e6:4c:a7:c6:4d:e1:0a:fa:f8:d4:d1:6f:ce:a5:ec:
6b:f6:63:d7:42:45:7c:5c:7e:cc:1d:04:ef:30:a7:8f:15:45:
66:48:34:58:52:5a:97:c4:5e:0a:94:d0:ad:bf:fd:bc:c3:68:
6e:39:ea:0f:00:e2:13:46:64:ea:af:81:4b:af:c7:00:3b:a1:
38:b0:64:db:eb:a1:40:d9:a4:01:dc:f8:cc:7b:55:80:90:bc:
4e:ff:26:ad:1e:b1:fb:48:ab:2f:10:50:03:1e:fb:21:54:c1:
3d:3b:13:18:fd:3b:cc:fb:b5:8d:23:8d:0d:98:5b:13:96:f8:
33:02:05:68:f2:42:aa:be:04:2d:f2:d6:83:f7:6c:2d:8b:0c:
ae:8d:b8:9d:51:37:4c:ca:3f:09:8f:32:8c:c7:02:3a:20:aa:
57:03:d8:80:0c:af:37:e7:55:13:e5:d3:51:75:42:c8:80:6f:
be:3b:e9:22:3f:af:9b:dd:be:0d:73:66:71:b2:35:c3:e4:cb:
42:9b:4e:4b:f4:9d:7b:c4:40:d7:7a:8a:1e:f6:30:42:bb:19:
56:70:64:48:a6:52:c5:4f:fa:2e:97:b5:e4:cd:94:29:2e:52:
b4:44:27:5f:e2:3d:f8:69:b4:d1:22:0c:80:26:05:37:1a:75:
13:d0:29:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 25 02:55:37 2025 by rpki-client