Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/xLIzc_vVcTLolBvmnXvl_7nQaZw.roa
File: xLIzc_vVcTLolBvmnXvl_7nQaZw.roa (raw, json)
Hash identifier: OX7wmDcyT2qEQr63mUyDXTAObnvME9HrtZUlvuZPIto=
Subject key identifier: C4:B2:33:73:FB:D5:71:32:E8:94:1B:E6:9D:7B:E5:FF:B9:D0:69:9C
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 0E63
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xLIzc_vVcTLolBvmnXvl_7nQaZw.roa
Signing time: Fri 01 Sep 2023 08:49:38 +0000
ROA not before: Fri 01 Sep 2023 08:49:38 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 17809
IP address blocks: 182.155.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3683 (0xe63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Sep 1 08:49:38 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C4B23373FBD57132E8941BE69D7BE5FFB9D0699C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:82:72:39:60:4e:a5:f8:20:b8:1e:f0:b0:
16:43:29:73:08:20:e6:04:43:f3:c9:42:26:78:e8:
30:90:e8:2b:56:78:9f:d8:1f:cd:dd:7d:05:86:31:
a0:6a:67:fa:70:a6:9a:ab:78:cf:fc:58:52:70:47:
96:c6:ba:f0:89:f1:94:ac:73:fa:01:94:d3:6f:3b:
29:23:ab:0b:aa:80:88:4b:69:ff:ba:09:88:37:69:
47:d7:69:6c:02:cb:b9:45:40:8d:db:f4:cd:14:09:
61:a9:af:02:4b:f1:84:b9:11:c3:e8:2a:d7:3b:1f:
f1:5f:ea:84:e7:eb:2a:16:97:b2:33:35:87:69:90:
e8:fe:42:12:95:b4:6a:55:99:d0:f1:09:a4:97:fb:
d4:d7:44:eb:a0:18:c7:68:4e:e7:e2:e6:88:ad:3c:
1b:3a:bc:9c:5e:9b:1e:3b:fa:bd:78:a1:60:fd:ef:
d6:ca:14:23:05:ba:cb:e2:c3:75:32:23:e3:cb:bb:
53:87:74:74:78:db:1a:dd:d6:ee:7e:89:71:34:cd:
87:d2:a2:36:c5:c9:1a:5b:a8:b2:13:45:97:ca:66:
a9:e7:10:24:67:69:6b:e8:d8:8e:ee:cf:fa:92:52:
38:13:5f:54:4d:04:a2:f5:b2:36:6e:50:76:e1:66:
76:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B2:33:73:FB:D5:71:32:E8:94:1B:E6:9D:7B:E5:FF:B9:D0:69:9C
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/xLIzc_vVcTLolBvmnXvl_7nQaZw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ac:1b:4f:67:10:41:d1:64:90:7a:e6:9c:fe:4e:31:5d:48:60:
89:a5:23:d5:96:a7:e6:c9:84:2f:b8:38:db:12:c0:65:46:39:
5f:05:71:79:e2:ee:d5:cd:f2:91:5b:d4:81:58:dd:2b:3a:95:
10:95:08:22:d7:ca:98:b5:d5:6d:cc:26:53:42:d5:e8:3c:73:
35:39:80:93:c5:c2:a7:22:d6:47:61:08:66:d5:b6:d9:50:c1:
29:ef:8a:1a:ec:b7:79:c1:28:82:29:54:4f:3a:4a:c3:ad:2b:
61:1b:ee:b4:77:14:1f:bd:35:49:3c:ca:ed:89:e9:42:ed:d8:
ab:2a:fe:37:bf:80:c9:a3:ab:d2:24:9a:04:43:a6:52:44:4a:
0f:71:72:4a:a9:87:5f:25:be:cd:f0:60:8f:75:5d:8c:3c:55:
f2:e7:95:3a:d3:94:8a:86:a2:18:1e:cf:d3:d7:dc:59:4c:a6:
b8:35:7b:8f:f8:95:32:1f:5a:d7:a3:c1:a2:b6:c1:18:d5:72:
f4:87:ee:f9:da:3d:1e:d4:2f:6b:60:12:1d:5f:95:33:d4:fe:
c1:79:1c:c5:e5:9e:28:de:f0:83:9c:68:22:eb:09:fb:2f:e1:
00:0b:b1:19:e2:86:94:86:e4:2a:4e:35:7a:20:ca:e5:eb:f9:
af:99:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:19 2024 by rpki-client on console-fra.rpki-client.org