Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/oPdcjY4BYZVr8nmd90jU1iVMjGg.roa
File: oPdcjY4BYZVr8nmd90jU1iVMjGg.roa (raw, json)
Hash identifier: 2KHMY+4FnwxxDsGLL3IWTG404ftAReNv8lsqp0YKjV4=
Subject key identifier: A0:F7:5C:8D:8E:01:61:95:6B:F2:79:9D:F7:48:D4:D6:25:4C:8C:68
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1124
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oPdcjY4BYZVr8nmd90jU1iVMjGg.roa
Signing time: Mon 10 Feb 2025 13:56:52 +0000
ROA not before: Mon 10 Feb 2025 13:56:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 182.155.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4388 (0x1124)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A0F75C8D8E0161956BF2799DF748D4D6254C8C68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:48:db:3e:ba:04:c0:0d:df:90:d5:27:d9:31:
80:96:29:9c:8f:9d:b5:7f:7d:c4:46:ca:d5:2c:a8:
62:20:29:45:2e:3e:8e:75:79:9a:aa:0f:54:95:e2:
91:82:82:df:45:20:91:a0:b5:d2:8f:f1:6c:92:3c:
97:73:fa:2f:4b:6e:cb:3b:10:64:28:03:9f:7b:23:
4e:6e:41:cc:aa:f7:36:9f:73:03:4a:2f:4d:9f:3b:
e9:52:7f:d4:93:ff:a0:70:c2:f7:ac:2c:80:76:48:
00:ea:9e:f5:a4:c0:48:63:d9:5e:f3:7f:ef:1a:19:
67:43:91:7e:73:b3:5e:d9:54:e9:5e:d9:25:c6:70:
01:d5:17:67:54:39:c3:4f:69:08:a3:ab:97:5a:e3:
bb:e6:bc:5c:b7:93:a7:a4:82:aa:2f:c9:6f:90:19:
8b:10:15:91:33:d2:f2:51:3a:81:83:60:65:6f:59:
dd:23:1a:b4:6f:28:f8:78:8d:d5:20:9c:9e:da:7c:
3c:35:58:72:f1:c2:9f:12:39:b4:84:48:dd:ff:de:
d0:a2:a1:36:9b:21:32:a7:28:2f:17:2f:88:c7:b2:
04:d3:29:e1:b9:27:e4:4f:cc:47:59:2c:9f:b2:29:
16:6c:5e:ea:c2:5c:b9:a7:60:2b:31:7d:c2:04:fd:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:5C:8D:8E:01:61:95:6B:F2:79:9D:F7:48:D4:D6:25:4C:8C:68
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/oPdcjY4BYZVr8nmd90jU1iVMjGg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.160.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:22:d3:0a:12:41:37:91:ef:8e:7a:27:06:5b:6b:62:e7:7b:
43:c5:2a:40:ff:a6:05:31:10:a2:0e:81:41:69:b1:8b:ff:eb:
6f:63:61:9d:b9:33:20:72:75:7d:3c:2c:9a:fe:63:34:d0:29:
44:c1:0a:9e:ff:0c:49:f9:fd:3c:99:89:29:cb:21:62:56:50:
cd:dc:e4:10:7c:61:1f:46:58:18:c1:a3:4f:05:14:2a:38:1f:
b4:00:95:b8:dd:fb:00:71:33:5b:0a:c2:5a:2a:a7:b3:29:50:
8e:1f:c5:a2:c3:c4:2e:e7:04:03:05:2e:b1:c4:24:88:a6:ff:
9a:30:75:70:47:a7:9a:af:49:69:90:9a:86:e2:5a:9c:9e:85:
b1:80:cc:39:a0:86:46:09:35:87:f8:08:4d:6d:4f:21:04:12:
09:9f:89:03:20:c1:94:48:30:8a:d5:81:39:1e:8f:65:09:1e:
aa:c1:c2:dd:fb:9b:23:1f:ec:c0:96:93:93:70:af:45:58:f9:
73:44:6c:a9:49:5f:d3:87:7b:3e:13:2b:4d:17:18:84:49:a1:
5f:6b:e2:eb:c7:e7:a6:b3:cd:b0:9d:4c:47:dd:5c:f4:3a:c1:
d3:87:f0:40:09:88:00:b0:bf:64:30:2a:20:6f:ac:d7:6b:f0:
16:ac:49:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:38:45 2025 by rpki-client