Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/V3V4Ooi-cycOTZWt-R4U7QFZj-k.roa
File: V3V4Ooi-cycOTZWt-R4U7QFZj-k.roa (raw, json)
Hash identifier: i0dZMgXaxdY4Zau6TP9XCRmdspmVNKqHqxhkbd22GL8=
Subject key identifier: 57:75:78:3A:88:BE:73:27:0E:4D:95:AD:F9:1E:14:ED:01:59:8F:E9
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E3F
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/V3V4Ooi-cycOTZWt-R4U7QFZj-k.roa
Signing time: Fri 01 Sep 2023 08:49:28 +0000
ROA not before: Fri 01 Sep 2023 08:49:28 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 182.155.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3647 (0xe3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:28 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=5775783A88BE73270E4D95ADF91E14ED01598FE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2b:fa:ab:8d:a0:c1:95:9d:50:b0:61:d5:a2:
1a:1f:6e:e2:2a:45:d7:5a:7c:10:62:91:dc:6e:e4:
1b:bd:23:34:b3:0d:d9:76:7a:ae:47:cc:b8:b5:39:
a8:89:cc:e9:1a:dd:fe:64:07:58:fb:62:90:e4:1d:
df:e7:a5:69:12:ec:52:21:31:11:ce:8b:26:e8:be:
10:32:18:28:b7:04:6d:ac:68:74:1e:ca:85:c9:f0:
b1:34:35:aa:4c:4c:29:dc:8c:d8:fa:be:92:90:00:
ea:e7:b1:8f:d1:96:9e:60:23:24:9e:03:c0:99:17:
d6:e1:d7:cf:1f:9f:c2:89:c2:d2:71:e8:26:d4:9a:
9c:8c:6a:4f:d9:4f:41:56:4b:8e:a7:3c:eb:f2:dc:
e7:78:e0:e7:0a:78:9e:04:9f:98:5d:12:90:e9:56:
f2:0f:eb:36:f0:a8:df:3d:d6:08:d9:ec:1f:b4:cf:
45:64:08:a3:9a:bf:c1:c8:ce:c6:73:4b:6c:f1:33:
e2:f2:a1:a7:df:c8:95:98:09:2f:01:4d:9c:41:08:
48:0b:24:9c:70:31:d0:00:14:df:d4:62:f5:f8:df:
e3:eb:d7:87:ed:94:0c:1a:b1:0b:d7:0d:d1:03:cf:
26:3a:ba:c5:da:c9:6f:91:09:b8:30:b2:86:bd:8f:
87:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:75:78:3A:88:BE:73:27:0E:4D:95:AD:F9:1E:14:ED:01:59:8F:E9
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/V3V4Ooi-cycOTZWt-R4U7QFZj-k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.192.0/18
Signature Algorithm: sha256WithRSAEncryption
47:d2:23:7d:ed:79:c5:73:ba:cc:4f:7c:5e:46:5d:04:e9:fc:
dd:fe:97:3e:31:5a:88:58:1c:58:0f:fd:16:87:09:b8:76:8e:
0e:6a:84:ca:89:5f:0e:e6:5e:0e:53:8e:1b:11:97:b3:0e:51:
01:9e:23:a8:61:fd:04:30:62:02:01:42:c0:11:2b:7e:45:47:
a0:2c:07:61:08:7f:ce:b1:72:1c:d7:95:54:db:de:31:30:6b:
b7:a2:a6:92:b3:9c:d6:89:17:8a:09:96:51:cf:15:5f:34:3a:
fd:3f:ac:ef:c7:87:01:0a:32:03:cb:6f:bf:5c:f5:19:b2:ef:
bb:fe:d1:69:30:62:65:47:e1:24:23:7f:88:26:4f:0d:e2:ae:
c9:41:a1:93:ef:a3:5c:c6:22:1b:3b:e8:d0:8d:78:c3:25:74:
f4:1d:73:60:d6:ef:e0:80:0d:db:af:17:e7:12:7f:48:ca:1e:
31:3d:bd:6d:a1:da:c7:5b:40:f6:99:c4:21:0a:ca:4f:a1:69:
c0:dc:34:e9:86:2f:db:e7:f6:02:ae:98:6a:11:35:f7:10:dc:
7a:6d:ad:76:03:36:bf:a8:c6:e7:2c:2e:34:fc:53:0c:b0:70:
cf:5c:a5:8b:25:e2:30:ad:d4:fd:77:df:05:f2:95:5d:a8:41:
74:14:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org