Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/cLZWxaLpyMqrXs0cMb3i2jfJZCg.roa
File: cLZWxaLpyMqrXs0cMb3i2jfJZCg.roa (raw, json)
Hash identifier: paEGvf+ZUvJ/PVU0GTulaAT0FZ09trozuEoR8jQXb6w=
Subject key identifier: 70:B6:56:C5:A2:E9:C8:CA:AB:5E:CD:1C:31:BD:E2:DA:37:C9:64:28
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E2E
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/cLZWxaLpyMqrXs0cMb3i2jfJZCg.roa
Signing time: Fri 01 Sep 2023 08:49:23 +0000
ROA not before: Fri 01 Sep 2023 08:49:23 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 182.155.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3630 (0xe2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:23 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=70B656C5A2E9C8CAAB5ECD1C31BDE2DA37C96428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:bd:42:44:be:94:f4:3a:bf:c2:30:6b:93:
89:f6:53:9b:6b:25:d1:f8:9d:db:15:cd:81:04:fd:
4f:fb:f8:16:f4:09:09:e5:e1:bf:17:fe:b6:37:85:
ac:e4:b6:c9:fc:58:f7:0e:e0:8d:85:31:8d:4b:35:
ed:50:25:3d:13:2d:04:e7:8c:a6:0a:78:9c:d9:17:
a4:9e:47:61:0e:d0:d6:04:df:c0:74:5d:f6:03:e5:
6b:a9:83:7b:1f:cd:dd:d9:e8:cc:2b:6f:12:2d:eb:
e6:ba:25:82:04:db:f3:44:85:8f:30:d0:60:30:bb:
eb:0f:8d:89:e7:e4:0c:45:e3:17:7c:97:50:98:7c:
70:76:ed:7d:d8:6f:ec:89:fb:c8:72:ee:a9:8e:14:
a6:10:e1:98:b7:6a:a5:f4:3d:d5:18:13:7a:fd:c8:
4e:b3:d5:9d:42:43:0c:b9:c4:4a:88:85:b1:d7:75:
a8:f6:b4:6a:3c:ac:a0:b6:45:22:94:0f:5e:6d:4a:
38:59:70:96:f9:5d:81:1b:48:17:13:df:d9:44:87:
51:5c:c0:0a:f3:5e:a1:27:f7:6b:db:13:29:40:43:
53:36:0e:9f:63:86:3c:2a:32:c6:fd:cb:63:d5:ec:
ab:2e:87:fb:68:7e:18:d2:1c:01:dd:3d:c8:de:fe:
58:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B6:56:C5:A2:E9:C8:CA:AB:5E:CD:1C:31:BD:E2:DA:37:C9:64:28
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/cLZWxaLpyMqrXs0cMb3i2jfJZCg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.128.0/17
Signature Algorithm: sha256WithRSAEncryption
22:b5:78:87:d9:63:37:e1:6a:72:03:0b:19:4b:f1:f4:e0:a3:
59:99:f9:ae:b6:85:4b:b3:10:37:36:53:b2:60:03:8e:cd:ea:
34:ae:16:26:3a:27:bb:ff:14:45:5e:e5:b7:f8:91:a7:59:58:
42:cc:0d:6d:f2:5f:3f:e3:cd:d4:2b:93:38:1d:cc:90:85:31:
65:f4:88:8d:fd:a9:76:63:32:73:6d:c8:df:c5:c6:56:f5:5f:
a6:fa:45:32:e0:8c:2f:1d:f3:7b:c9:a4:71:60:38:ba:10:5f:
87:c3:de:87:22:85:5e:13:f1:bd:4d:9e:6c:66:07:0e:d0:64:
d3:de:c0:5b:c9:ba:83:68:43:6f:0e:bb:f7:7e:01:16:7e:e2:
74:9b:43:0d:62:8e:36:9d:17:a8:4a:18:a0:9f:1b:fc:1d:7e:
71:dc:bd:de:4a:3e:a3:b7:9b:52:69:b8:89:d5:be:74:cf:d5:
b5:03:d5:d0:97:8b:4f:16:2a:df:c4:29:3a:b3:fd:97:d3:6c:
73:60:4e:cd:8e:44:c6:9c:8d:2d:6a:68:a6:f0:13:52:f1:36:
a3:72:f7:54:3b:0a:90:1a:ff:8d:79:7b:d6:c9:09:22:77:db:
6b:d1:0a:17:72:11:a2:e4:52:fc:d2:18:b8:23:30:dc:42:09:
48:22:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org