Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/GMhLwchRGkFSxTY5XG5iYJWupFc.roa
File: GMhLwchRGkFSxTY5XG5iYJWupFc.roa (raw, json)
Hash identifier: 1ipujU8y9yd0F5W+FSuVDqZ4arO7nfG/WgZWPqjLVb8=
Subject key identifier: 18:C8:4B:C1:C8:51:1A:41:52:C5:36:39:5C:6E:62:60:95:AE:A4:57
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E25
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GMhLwchRGkFSxTY5XG5iYJWupFc.roa
Signing time: Fri 01 Sep 2023 08:49:20 +0000
ROA not before: Fri 01 Sep 2023 08:49:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 182.155.0.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3621 (0xe25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=18C84BC1C8511A4152C536395C6E626095AEA457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:27:9f:80:f1:34:45:03:3a:8c:8a:be:80:
03:62:87:d7:1c:da:34:fd:11:ca:db:87:7c:ab:ef:
59:31:a7:c0:c9:65:f0:52:13:19:72:a1:f5:0b:44:
c6:8d:03:b3:8a:41:5d:ca:80:95:f8:84:cb:25:9a:
60:62:8e:63:8a:69:a3:b4:c9:8a:3d:02:b1:61:cd:
70:e7:c2:52:7a:00:90:f4:ab:69:5a:cc:59:17:c4:
46:0c:67:7c:32:4e:71:63:59:81:e3:0d:f6:5b:36:
12:ba:a7:37:07:a5:46:14:4b:b2:52:ad:36:f4:0d:
73:0b:cd:bf:8d:0b:d5:33:22:fa:c3:3c:49:0e:d4:
78:8a:87:51:8b:48:20:fd:0b:a8:78:0a:ed:e1:6c:
42:4d:a2:4b:8a:28:1e:ba:a3:e6:9f:ed:2a:58:d1:
fe:f9:20:43:91:e6:9c:69:c6:33:69:f9:7f:39:77:
df:31:30:f8:11:4f:f9:bb:d9:37:32:19:37:89:04:
ce:84:e8:5a:ad:0a:d1:4a:ca:e5:e3:01:0b:6f:95:
16:b9:f1:84:4e:45:ad:d3:f4:5a:d3:38:29:94:ac:
f4:b4:5e:b6:f3:07:1c:a0:2c:bf:8e:5f:78:46:9a:
a4:11:e5:3b:8d:af:7e:32:74:04:8a:3a:85:55:99:
27:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C8:4B:C1:C8:51:1A:41:52:C5:36:39:5C:6E:62:60:95:AE:A4:57
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/GMhLwchRGkFSxTY5XG5iYJWupFc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/18
Signature Algorithm: sha256WithRSAEncryption
08:46:a5:83:18:49:ff:15:4f:ab:ff:ee:64:3f:c6:1f:f6:c5:
16:f5:c6:bb:ce:e8:67:94:a4:54:29:f7:99:3e:67:62:6a:68:
68:08:70:55:da:1b:cc:0f:86:f9:89:d6:c7:e7:99:23:60:08:
06:07:0b:01:11:cd:ed:fb:23:58:23:c3:47:1e:f2:57:02:f4:
fb:c9:9f:a2:e6:c5:58:fd:40:c2:ab:1f:61:be:31:91:a3:53:
8b:76:9a:49:6e:fb:9e:03:86:8a:f9:d6:7e:dd:2e:6e:49:c5:
0a:4a:b0:d8:f6:ad:70:5c:15:f5:6f:b8:f1:96:22:34:83:7f:
1d:fa:47:d6:9a:c7:97:c1:ca:df:19:31:a5:a8:5e:bc:35:64:
4c:90:3e:53:f6:a7:9e:bd:b6:93:6a:62:70:9d:0b:e3:d0:03:
e4:94:b7:9b:61:b6:00:d6:95:13:57:b5:5c:d1:43:f1:54:dd:
e3:32:e4:01:b0:0d:cf:fa:cc:dc:45:83:a8:d9:53:5d:32:8c:
92:8e:cf:1b:49:fe:1f:14:97:68:a5:7a:7c:37:1c:ab:5e:0b:
26:11:94:4e:3f:a7:19:06:1c:21:11:4b:f7:f1:8e:1f:92:d4:
27:e4:ac:cc:e0:ca:1c:59:3a:31:f0:45:fc:45:ef:ea:04:ca:
d1:24:3a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org