Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/wfLPPb5MLsGviuoW1ctIa0lY2CU.roa
File: wfLPPb5MLsGviuoW1ctIa0lY2CU.roa (raw, json)
Hash identifier: Tj+qzHKKSGGDOUU9+A0NgQE6Roa0PrCMjbwqLswTS7Q=
Subject key identifier: C1:F2:CF:3D:BE:4C:2E:C1:AF:8A:EA:16:D5:CB:48:6B:49:58:D8:25
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 1109
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wfLPPb5MLsGviuoW1ctIa0lY2CU.roa
Signing time: Mon 10 Feb 2025 13:56:44 +0000
ROA not before: Mon 10 Feb 2025 13:56:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 182.155.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4361 (0x1109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C1F2CF3DBE4C2EC1AF8AEA16D5CB486B4958D825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:56:0f:03:80:57:90:6d:2c:ec:fb:ef:f0:
9b:47:bb:25:8f:b6:a4:05:56:ae:e5:58:fb:b7:3d:
fa:d2:1e:e0:ff:2a:59:69:35:a7:9b:c5:67:a5:a2:
93:c7:f2:a2:b7:83:4f:1e:55:b9:0e:4a:39:51:3e:
39:7a:22:3a:94:c8:a7:21:ae:bc:e7:3d:39:28:90:
6f:ba:82:a8:99:d7:a4:43:56:85:8f:e5:5d:ee:2c:
8d:7e:39:bb:ef:52:e1:66:6c:dc:78:25:1b:68:ce:
62:57:25:5d:23:60:2e:f3:91:2f:7c:61:5d:c8:b7:
55:28:2e:2a:bf:78:e5:c5:a9:ca:5e:de:79:01:35:
92:ef:48:3f:cf:59:18:ab:dc:91:5c:26:a9:c8:52:
18:bd:ba:d9:17:2c:fc:32:ec:0a:24:8a:1f:ed:ad:
db:32:d1:ed:f5:93:40:90:57:14:2a:bd:a5:d6:1c:
cf:6c:73:57:d5:1e:36:11:9f:0d:d9:0c:26:65:24:
a2:e2:f5:66:de:54:57:c3:8e:65:a9:ac:af:fb:76:
5d:b4:22:a0:dd:d8:21:41:74:01:9a:44:1b:66:5d:
9d:c2:1b:e4:40:a1:0d:c8:82:d1:bb:15:6d:8e:7e:
63:2b:f1:75:ed:e1:39:4e:ed:89:d3:20:b5:be:88:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F2:CF:3D:BE:4C:2E:C1:AF:8A:EA:16:D5:CB:48:6B:49:58:D8:25
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/wfLPPb5MLsGviuoW1ctIa0lY2CU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:fd:db:25:04:13:8e:30:34:76:56:83:c3:48:18:26:4e:1b:
0e:2b:ff:58:f2:af:64:2a:11:32:e1:6b:c6:b2:0d:1d:f5:08:
7b:e3:df:eb:0a:3d:5e:b0:55:bc:69:49:13:eb:0f:c9:eb:0a:
73:de:9e:ac:63:8e:62:ef:74:67:07:94:d3:c7:52:c6:73:91:
c9:4f:2e:38:18:ac:9e:15:38:bd:70:67:4f:5b:02:56:e5:b2:
60:1b:a5:cf:62:fa:a6:b2:fb:97:34:96:77:bf:28:2e:e7:36:
d5:0c:a6:97:e6:1b:6f:8f:77:b7:e1:90:9c:b7:b7:04:c8:79:
2a:1b:bc:76:01:ed:24:41:26:9e:f4:f7:30:b5:7a:45:f9:aa:
63:99:19:24:11:9f:bf:8e:c6:ac:83:c6:d3:6b:33:42:4f:b3:
14:be:c6:78:81:40:20:70:c5:9c:cc:bc:ae:1e:bc:49:68:e9:
81:9a:78:47:db:2f:f2:98:c9:8d:38:00:a8:93:28:96:8d:05:
42:df:79:fd:43:57:37:3f:8b:c4:e0:e3:2a:38:f0:fd:f2:bb:
87:d6:47:7c:e3:4f:60:82:af:0c:9d:ef:9e:53:9b:6b:37:af:
0d:98:9e:2d:d1:ee:57:a1:95:ea:13:cf:ff:4b:40:5d:07:29:
2f:47:2f:68
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEQkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE0
NzgxNTUzODI3MzFFNUMwRjY4MjFERDUzODlGOUU1MkUxRTRENjAeFw0yNTAyMTAx
MzU2NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEMxRjJDRjNEQkU0QzJF
QzFBRjhBRUExNkQ1Q0I0ODZCNDk1OEQ4MjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcGlYPA4BXkG0s7Pvv8JtHuyWPtqQFVq7lWPu3PfrSHuD/Kllp
NaebxWelopPH8qK3g08eVbkOSjlRPjl6IjqUyKchrrznPTkokG+6gqiZ16RDVoWP
5V3uLI1+ObvvUuFmbNx4JRtozmJXJV0jYC7zkS98YV3It1UoLiq/eOXFqcpe3nkB
NZLvSD/PWRir3JFcJqnIUhi9utkXLPwy7Aokih/trdsy0e31k0CQVxQqvaXWHM9s
c1fVHjYRnw3ZDCZlJKLi9WbeVFfDjmWprK/7dl20IqDd2CFBdAGaRBtmXZ3CG+RA
oQ3IgtG7FW2OfmMr8XXt4TlO7YnTILW+iEJFAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUwfLPPb5MLsGviuoW1ctIa0lY2CUwHwYDVR0jBBgwFoAUKkeBVTgnMeXA9oId
1TifnlLh5NYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvRU1BWC9L
a2VCVlRnbk1lWEE5b0lkMVRpZm5sTGg1TlkuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L0trZUJWVGduTWVYQTlvSWQxVGlmbmxMaDVOWS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL0VNQVgvd2ZMUFBiNU1Mc0d2aXVvVzFjdElh
MGxZMkNVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBbabgDAN
BgkqhkiG9w0BAQsFAAOCAQEAn/3bJQQTjjA0dlaDw0gYJk4bDiv/WPKvZCoRMuFr
xrINHfUIe+Pf6wo9XrBVvGlJE+sPyesKc96erGOOYu90ZweU08dSxnORyU8uOBis
nhU4vXBnT1sCVuWyYBulz2L6prL7lzSWd78oLuc21Qyml+Ybb493t+GQnLe3BMh5
Khu8dgHtJEEmnvT3MLV6RfmqY5kZJBGfv47GrIPG02szQk+zFL7GeIFAIHDFnMy8
rh68SWjpgZp4R9sv8pjJjTgAqJMolo0FQt95/UNXNz+LxODjKjjw/fK7h9ZHfONP
YIKvDJ3vnlObazevDZieLdHuV6GV6hPP/0tAXQcpL0cvaA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:01:34 2025 by rpki-client