Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/GzKrMkDuy4ZCNu0TJpArgt6fw9g.roa
File: GzKrMkDuy4ZCNu0TJpArgt6fw9g.roa (raw, json)
Hash identifier: AvcAiBjzl7Np0NfsNek2fRdAgd7rpAa6872FaiR3ccw=
Subject key identifier: 1B:32:AB:32:40:EE:CB:86:42:36:ED:13:26:90:2B:82:DE:9F:C3:D8
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 111A
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GzKrMkDuy4ZCNu0TJpArgt6fw9g.roa
Signing time: Mon 10 Feb 2025 13:56:49 +0000
ROA not before: Mon 10 Feb 2025 13:56:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 182.155.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4378 (0x111a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1B32AB3240EECB864236ED1326902B82DE9FC3D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:57:03:6a:bb:34:50:30:f8:5d:59:9b:07:
fa:e8:26:98:81:8c:37:d5:fa:17:f1:39:12:1c:d1:
37:a1:54:7c:42:13:fb:21:60:06:cd:31:35:e6:4e:
1c:5b:4e:db:c3:3e:95:44:34:21:71:da:66:3b:94:
96:d5:26:93:c3:03:65:db:fc:54:3d:fa:ac:92:f9:
73:b9:09:90:34:08:e3:04:24:61:12:97:3d:57:a9:
4b:ad:ba:b3:50:7d:da:0c:97:c9:42:4a:5d:b2:83:
6b:ba:10:b9:5e:c3:9a:13:52:49:06:cf:ed:f6:a1:
cf:8e:b1:23:f5:36:cf:9c:e1:81:3c:37:64:95:1f:
9c:d5:8c:4a:55:bc:91:28:e4:87:50:2f:53:8e:ae:
1f:f1:70:a2:bc:2b:49:26:ff:81:59:51:2d:bc:fd:
1d:be:64:a5:51:75:2f:f3:62:0a:fd:ce:b7:7f:75:
ac:8c:ca:85:ac:7f:73:12:ca:ab:3c:1f:65:66:bb:
15:06:69:74:a7:38:a9:cf:32:67:d6:88:59:97:05:
23:03:93:12:f3:b9:f5:46:10:52:82:66:d0:6c:eb:
e7:38:13:b9:3d:4b:95:cb:4c:13:b6:8a:34:f4:61:
2b:e0:0f:6e:0c:f9:e3:37:30:b5:85:f5:a8:e3:16:
df:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:32:AB:32:40:EE:CB:86:42:36:ED:13:26:90:2B:82:DE:9F:C3:D8
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GzKrMkDuy4ZCNu0TJpArgt6fw9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6e:2a:fb:c3:5a:91:23:fc:c2:00:dd:0c:dd:05:4a:97:4a:57:
16:40:d0:00:66:8e:77:88:82:6b:bc:de:5d:e6:2f:9f:c5:9f:
fd:94:77:d8:b3:dd:98:d8:8d:64:e1:2d:21:ab:de:58:e8:22:
c8:a0:c4:e7:fd:df:be:d9:d4:53:a2:6d:49:8d:ad:e8:3f:eb:
72:ab:2d:7f:7b:38:e8:d8:ed:fc:9e:3c:5c:b1:28:cd:b2:02:
27:74:05:40:75:7b:9d:d4:fc:38:0c:33:d3:ad:11:74:76:f1:
d6:d7:bb:0d:f5:e3:f7:e7:02:c9:6f:1a:31:11:ea:52:ab:cb:
db:ac:a0:59:72:40:08:b3:4d:8c:a1:f7:c6:6a:2f:66:3d:b6:
e4:85:40:6a:30:c5:60:9c:8c:73:26:5a:b1:2f:26:bb:e0:50:
26:9e:34:91:47:ca:46:4a:4e:d6:55:c6:28:14:8f:15:38:09:
16:c0:06:3c:5f:bf:b7:bc:49:cd:d5:e0:c0:cf:41:94:35:d3:
62:cf:ca:d8:87:fc:61:ca:40:df:e7:47:c2:52:62:39:b7:11:
7c:1a:09:8c:55:23:5d:ce:66:9a:db:d3:f3:e9:47:5b:4a:3e:
9f:e1:11:3a:e6:8d:9d:dc:24:35:67:29:92:c7:44:ab:38:dc:
97:ef:be:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:09:58 2025 by rpki-client