Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IGo4YrnONgA4EZXm4YHkir_gDoM.roa
File: IGo4YrnONgA4EZXm4YHkir_gDoM.roa (raw, json)
Hash identifier: +jtyJGMtywSgc5ZQaJhZXfHaORoFt3oU+ddiDiqjacI=
Subject key identifier: 20:6A:38:62:B9:CE:36:00:38:11:95:E6:E1:81:E4:8A:BF:E0:0E:83
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34AF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IGo4YrnONgA4EZXm4YHkir_gDoM.roa
Signing time: Mon 10 Feb 2025 13:52:37 +0000
ROA not before: Mon 10 Feb 2025 13:52:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13487 (0x34af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:37 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=206A3862B9CE3600381195E6E181E48ABFE00E83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:af:0a:77:91:78:5f:7c:39:7b:3f:49:e6:03:
6e:68:b1:ed:13:8a:88:b7:0a:ac:38:71:65:6a:af:
ee:5a:37:99:66:b8:8b:0a:14:97:79:da:0c:ad:1e:
bb:2d:4a:fa:36:4e:ce:0c:25:2a:2b:45:2a:eb:0b:
d1:30:a4:26:ef:cd:73:f7:f3:fb:2b:65:81:e9:a8:
e7:42:dc:d5:14:01:90:36:d2:b8:d6:bf:e7:b1:2b:
08:b1:5b:45:e2:b7:87:69:fb:26:d3:65:e9:5a:2b:
ef:a2:ab:e9:f5:cf:e3:46:88:07:dd:0a:13:2c:19:
45:e9:af:00:4f:36:39:f9:6e:fe:51:59:92:72:70:
f8:79:80:c3:5d:e3:15:d3:c2:b7:26:38:d9:79:68:
ee:b3:d4:1e:0e:dc:9b:f5:fa:0f:61:cb:2c:c1:88:
08:e6:bd:0e:a1:59:02:61:ac:ea:25:45:56:b9:7b:
39:24:83:54:9d:b1:fd:04:21:e2:8a:b0:dd:d5:fd:
4b:d8:12:d3:d9:26:ce:c5:3c:a5:34:73:f0:c5:0b:
37:d1:08:0f:20:52:5f:bb:a5:ab:45:c7:f2:b7:15:
3d:57:26:4b:d4:a0:8a:3c:73:43:21:4c:3c:02:a3:
31:ee:f6:81:a9:1e:f8:a6:26:e4:48:e2:77:58:74:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:6A:38:62:B9:CE:36:00:38:11:95:E6:E1:81:E4:8A:BF:E0:0E:83
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IGo4YrnONgA4EZXm4YHkir_gDoM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.4.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:76:89:d7:a6:e0:78:6a:3d:fe:1a:2d:a8:48:d6:8e:68:5d:
67:d6:e3:40:77:e9:a9:b0:17:01:0f:02:0a:21:bb:95:5a:97:
b1:0a:90:28:60:b9:5f:ad:ba:c1:74:3f:f0:50:88:03:a8:38:
2d:14:f3:36:f0:ae:81:36:9f:7c:34:a0:06:6c:48:c8:9d:6e:
24:df:01:14:ce:35:58:40:ca:31:c5:82:37:cb:b7:0b:bf:6d:
64:44:b3:82:c6:63:bc:11:dc:ca:f2:53:dd:7a:ea:e9:53:36:
27:93:24:6f:2f:99:61:5a:64:ae:35:6c:e9:a3:dc:4a:b3:42:
c1:3e:e0:4a:b9:ee:c7:07:cc:c9:60:1c:d8:0b:9e:e6:c8:9e:
17:ef:e3:98:00:c1:c5:68:e5:eb:51:86:a4:f8:c0:25:6e:2e:
23:aa:65:66:83:24:94:3f:93:cd:b3:e7:b6:55:8e:56:7f:b8:
d9:79:66:ba:37:ec:3c:bf:3f:ca:0f:87:f2:a9:0e:fa:6a:1c:
55:02:ed:9b:5b:4d:0e:05:9b:f2:2a:8a:a9:ce:45:88:cc:d6:
71:27:06:d0:c9:71:6f:97:ab:aa:2a:f7:8f:06:86:f3:18:d1:
95:54:40:eb:bd:5a:21:50:7e:d3:38:ba:65:cd:94:92:ad:2c:
c3:09:e7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:45 2025 by rpki-client