Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/EMAX/hSn7q-Wgt1XPRWwNj3aV2Wa6Mdk.roa
File: hSn7q-Wgt1XPRWwNj3aV2Wa6Mdk.roa (raw, json)
Hash identifier: vKXk4QtI93GJGPvT7J6Wr8mINM6fFMZkWO5k5gobMGY=
Subject key identifier: 85:29:FB:AB:E5:A0:B7:55:CF:45:6C:0D:8F:76:95:D9:66:BA:31:D9
Certificate issuer: /CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Certificate serial: 10C8
Authority key identifier: 2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hSn7q-Wgt1XPRWwNj3aV2Wa6Mdk.roa
Signing time: Mon 10 Feb 2025 13:56:29 +0000
ROA not before: Mon 10 Feb 2025 13:56:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 17809
IP address blocks: 182.155.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4296 (0x10c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A478155382731E5C0F6821DD5389F9E52E1E4D6
Validity
Not Before: Feb 10 13:56:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8529FBABE5A0B755CF456C0D8F7695D966BA31D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:ef:c0:90:a3:dc:c2:90:63:7c:bd:6b:84:
e6:10:36:b1:57:84:7f:68:8d:19:0e:78:55:ec:aa:
bd:59:e1:c5:0a:48:d6:0e:fd:6b:53:cf:b0:73:7b:
90:92:d2:e1:5f:b8:01:2e:84:01:1f:35:03:8f:df:
09:89:94:c4:ca:2f:5b:f8:86:cd:46:6e:af:3b:61:
83:46:79:a2:f7:14:8d:ec:5c:0c:26:cd:85:d9:d2:
27:d7:d1:42:7b:fe:9d:60:1c:5c:55:39:c4:91:55:
33:6d:2e:67:96:0b:d6:3c:71:17:43:c8:3e:44:70:
38:ab:4c:65:80:1e:c4:fb:2b:79:b6:2e:46:0e:c0:
5a:bf:16:3c:8b:4d:d9:84:df:fc:8c:96:d8:f6:f1:
e4:0b:b7:a2:09:f3:ce:47:12:1f:ff:0e:ce:df:c0:
c2:f7:e4:1c:6c:ac:4c:68:ed:41:98:1f:b6:ed:ba:
01:36:4d:5a:d4:fc:8b:f1:e8:6a:97:bc:e5:46:ef:
62:71:1f:0c:2e:c8:bc:f4:1f:f5:3f:36:d4:8d:fd:
4a:df:80:c9:89:26:89:d4:17:84:66:d2:6e:53:12:
e2:2a:46:39:6f:fa:9d:c7:b0:56:b6:25:9c:01:ac:
b4:17:58:39:a7:d3:c2:a1:93:b6:7c:19:4d:f6:8d:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:29:FB:AB:E5:A0:B7:55:CF:45:6C:0D:8F:76:95:D9:66:BA:31:D9
X509v3 Authority Key Identifier:
keyid:2A:47:81:55:38:27:31:E5:C0:F6:82:1D:D5:38:9F:9E:52:E1:E4:D6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/KkeBVTgnMeXA9oId1TifnlLh5NY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KkeBVTgnMeXA9oId1TifnlLh5NY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EMAX/hSn7q-Wgt1XPRWwNj3aV2Wa6Mdk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
182.155.192.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:be:52:ad:42:e6:f5:d8:6e:c3:ec:bf:6f:14:9b:cf:5f:e3:
ad:98:d1:a7:b8:39:20:65:15:ec:4a:9f:bd:bf:79:42:9a:70:
84:8a:ab:12:99:fb:1c:b0:0f:eb:63:c6:13:9d:09:e8:cc:ad:
34:5d:d4:1c:98:24:d1:c9:14:07:0a:68:82:d1:21:cb:72:a6:
86:e7:b0:f7:6b:e6:83:88:55:03:f1:43:30:a0:f8:c4:9f:80:
09:17:5a:f3:c0:28:68:c1:29:ac:97:09:94:d4:12:40:0e:86:
66:72:82:60:04:2a:16:1a:55:53:87:58:88:0d:b2:0a:e1:dc:
3b:28:2b:fe:37:ce:d6:2f:42:f6:c4:ba:96:ff:fd:97:2a:97:
e4:29:be:f3:5c:bd:a3:69:04:58:67:a7:b1:93:a9:f1:c8:1a:
3d:c0:e7:6b:12:bf:38:31:03:fe:97:7e:4a:23:a1:76:b8:2b:
30:66:74:f1:46:e0:96:ee:ee:d0:1d:07:c1:dd:63:e4:78:59:
7b:e3:81:78:65:0d:a7:3c:1f:ab:9c:3f:33:bb:06:5b:5d:9e:
c5:48:68:f2:fe:f2:72:8f:1f:2d:8d:99:ea:13:d1:5e:38:2f:
30:11:c5:75:1c:4e:31:8c:54:5a:e5:18:3e:e5:0a:f0:31:37:
ac:b5:63:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 14:55:14 2025 by rpki-client