Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/mWrsiflSZTwSp9a4Zg1ge5udvM8.roa
File: mWrsiflSZTwSp9a4Zg1ge5udvM8.roa (raw, json)
Hash identifier: mxF44S1gpIb0C8PDku9R+Y5kMlK7A2pXN0E/aYdjJnM=
Subject key identifier: 99:6A:EC:89:F9:52:65:3C:12:A7:D6:B8:66:0D:60:7B:9B:9D:BC:CF
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E4C
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mWrsiflSZTwSp9a4Zg1ge5udvM8.roa
Signing time: Fri 01 Sep 2023 08:49:31 +0000
ROA not before: Fri 01 Sep 2023 08:49:31 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 182.155.128.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3660 (0xe4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:31 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=996AEC89F952653C12A7D6B8660D607B9B9DBCCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:18:42:c6:79:a0:f0:02:df:21:16:29:5c:
4e:94:ca:1c:db:87:49:2d:21:55:24:f3:4f:24:c9:
2d:db:40:46:db:a2:cc:cf:bb:cb:fc:5e:e0:7b:c0:
53:76:b3:4b:fb:eb:ee:5a:5c:7d:2c:76:7b:29:09:
48:90:7a:c8:0d:16:46:58:87:94:67:1b:69:9b:26:
48:c1:1f:9f:cb:b2:c4:95:23:33:15:c8:4b:7a:1b:
7c:88:50:eb:aa:ee:8d:aa:8f:d5:fc:67:82:7b:22:
e3:77:93:f8:81:35:91:95:e4:77:ef:dc:6f:3c:15:
2a:68:a7:4d:86:7e:85:d8:a4:bb:58:cd:01:a9:6a:
f0:51:9a:18:32:de:6b:c8:1e:3c:72:06:20:b5:25:
97:6e:f9:21:3e:d8:07:3a:e8:58:b0:53:50:28:3f:
13:7b:0d:95:e4:ca:bd:a3:1e:82:20:63:58:ab:b6:
1c:45:09:f1:75:36:31:fe:67:48:84:f7:39:dc:ce:
c4:7f:c8:b9:d9:7d:db:14:d5:43:8a:57:0d:0c:be:
e2:ea:cf:e6:40:96:f6:53:c0:50:d6:61:d1:0e:7d:
5e:a5:f6:42:ae:ec:76:1f:e9:11:68:c1:61:d3:a4:
03:ac:66:fc:1d:bc:5a:a6:28:21:e6:4a:06:39:74:
8b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:EC:89:F9:52:65:3C:12:A7:D6:B8:66:0D:60:7B:9B:9D:BC:CF
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/mWrsiflSZTwSp9a4Zg1ge5udvM8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.128.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:fb:40:ae:30:57:48:79:7f:0e:27:f9:5d:d6:95:06:c0:7f:
33:42:dc:ef:b0:7c:ea:e9:a8:4e:e6:88:99:9d:a4:e8:0d:fb:
e0:35:5f:5b:b3:58:f0:54:18:39:d3:4c:5b:4d:6f:97:1a:d3:
74:c7:70:02:1f:81:c4:a6:19:af:a9:b3:b2:d6:73:c7:42:9f:
12:f4:c0:dd:13:8b:8e:c5:96:43:ff:d2:5d:f5:55:c5:c6:10:
86:c4:1c:c6:47:62:d3:a6:44:59:b4:7a:ab:e2:57:cc:9b:be:
d7:bb:e9:73:48:8d:7f:94:c7:55:e1:3f:e7:60:49:13:96:23:
4e:ed:09:68:67:02:98:09:94:a5:8a:8c:e4:e4:8e:24:67:b0:
96:05:e6:a2:0f:1d:72:27:26:0c:c2:c3:99:26:e4:56:77:a1:
31:06:04:15:f4:0a:41:13:66:0b:6e:21:07:5b:1b:50:ef:44:
16:b2:0e:94:f5:bf:6e:6e:26:6d:59:de:df:a4:90:1a:d6:46:
eb:63:7d:d5:7a:1c:69:72:5e:cd:14:0f:51:06:5b:80:e9:9b:
9c:39:90:6c:c2:cb:ea:56:07:7a:b9:d0:6c:a7:15:b5:8f:49:
46:f8:4b:c1:9f:ef:fe:58:fe:06:f7:d0:48:7e:ea:3c:57:8a:
3b:2b:76:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:12 2024 by rpki-client on console-ams.rpki-client.org