Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZASeroeySIld27eiy3xuMW16d_o.roa
File: ZASeroeySIld27eiy3xuMW16d_o.roa (raw, json)
Hash identifier: qmPnaaTTAdzIW6MFkDL9v1jp3KiJFMhDYniY/Sh6RQk=
Subject key identifier: 64:04:9E:AE:87:B2:48:89:5D:DB:B7:A2:CB:7C:6E:31:6D:7A:77:FA
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E62
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZASeroeySIld27eiy3xuMW16d_o.roa
Signing time: Fri 01 Sep 2023 08:49:38 +0000
ROA not before: Fri 01 Sep 2023 08:49:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 182.155.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3682 (0xe62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=64049EAE87B248895DDBB7A2CB7C6E316D7A77FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:98:30:45:25:3a:e7:8e:37:98:82:c5:a4:a3:
2b:6b:6d:07:76:2b:44:73:14:1d:9a:db:eb:ad:5f:
37:2f:57:27:df:ed:83:79:31:6f:3b:0c:fd:2d:01:
da:43:c6:8c:51:ef:75:bb:79:d3:3c:56:76:af:de:
bd:a3:c9:dd:b9:10:ca:70:77:21:ce:35:2a:22:e2:
8b:34:3c:7a:a5:0e:b7:3e:70:a0:ef:e3:fc:36:9b:
7e:ba:f5:83:6e:29:55:47:d4:b4:1a:5d:fa:1b:0c:
d2:e6:8c:4e:10:b1:36:ed:ad:9a:a1:8b:fc:2e:e0:
63:8e:eb:32:5c:77:b3:4f:a7:32:1c:be:be:60:72:
ed:99:38:b7:12:da:4a:87:5c:e4:45:15:d1:1c:c7:
8c:84:5b:7c:55:14:6d:81:d7:f9:de:bd:60:5c:e3:
3b:51:b1:8c:ec:19:1f:16:f6:c1:99:8a:8d:7b:78:
eb:ef:0b:6b:d9:b8:e8:6f:7a:38:dc:0d:1a:0a:96:
6d:34:d4:54:0d:71:c0:30:8e:07:5e:59:84:8d:f3:
aa:12:4c:c1:ea:12:45:f1:d0:a3:e7:63:93:09:35:
d6:e9:d2:5e:b5:8f:39:f1:2a:e6:f5:a1:b8:45:81:
70:78:b1:ea:80:43:98:c3:9d:9d:55:36:2c:93:58:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:04:9E:AE:87:B2:48:89:5D:DB:B7:A2:CB:7C:6E:31:6D:7A:77:FA
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/ZASeroeySIld27eiy3xuMW16d_o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.64.0/18
Signature Algorithm: sha256WithRSAEncryption
00:05:66:71:a5:3a:a5:b0:ae:0f:5e:ae:c9:76:db:17:40:97:
ad:0d:3f:5e:b4:0f:b9:03:b5:6b:cd:00:53:9d:12:c0:6c:a6:
6a:f6:71:f2:ff:11:2a:74:57:91:2d:0a:16:11:17:69:f1:ac:
21:99:1c:6f:49:1a:57:d9:2a:15:88:7b:3d:0f:4b:37:6e:df:
9b:74:15:53:d5:d5:53:0a:32:60:f9:23:bb:3a:cb:48:f0:b1:
74:78:03:c5:8e:fd:66:68:ae:c3:11:07:be:49:5e:f3:4c:cd:
5e:1d:67:a7:2b:1d:65:79:eb:4f:82:52:07:43:de:e7:dc:37:
91:46:26:2a:1a:1e:a3:62:34:7a:17:22:7c:ae:2e:1f:0b:7f:
e0:3c:c4:e9:89:9c:a3:b8:96:49:7c:35:06:e4:18:61:64:3b:
80:a2:90:c1:d4:73:5b:50:89:d2:6f:60:19:43:bc:77:48:75:
65:ce:13:69:cf:6a:10:e3:3e:c0:d0:dc:b7:44:a2:28:8c:55:
4d:28:8d:2b:7f:19:20:ef:6d:a2:57:d6:00:ae:03:b7:f3:38:
84:4b:3c:6d:ce:bb:5a:62:71:a1:1e:06:ae:9b:64:97:0e:35:
30:b9:85:5c:90:b9:6b:c9:78:a3:e1:e7:8b:2e:da:2f:6a:21:
1b:8b:43:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org