Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YpCqFOPmr98u7EvXJBGo4at3Uzs.roa
File: YpCqFOPmr98u7EvXJBGo4at3Uzs.roa (raw, json)
Hash identifier: zMhNpYlkAevZ0vF1pvayodIupKe0gHzIe0Y0GFmHOck=
Subject key identifier: 62:90:AA:14:E3:E6:AF:DF:2E:EC:4B:D7:24:11:A8:E1:AB:77:53:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34AE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YpCqFOPmr98u7EvXJBGo4at3Uzs.roa
Signing time: Mon 10 Feb 2025 13:52:37 +0000
ROA not before: Mon 10 Feb 2025 13:52:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13486 (0x34ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:37 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6290AA14E3E6AFDF2EEC4BD72411A8E1AB77533B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:98:01:d7:5f:d2:2c:93:a2:64:52:c9:c3:
9f:c6:79:83:d9:01:57:87:18:b7:e5:ea:09:8f:8a:
01:e3:51:4e:d0:06:10:bc:ba:fa:9b:eb:43:95:b8:
62:aa:38:76:ab:7e:90:2d:f5:99:0b:e4:ef:ec:e8:
7e:de:73:f5:44:57:06:2f:63:7a:bd:b1:04:78:eb:
91:6e:d5:af:5b:32:2f:f6:ad:0a:5e:04:69:15:fa:
9c:a9:58:72:57:22:ff:9b:6b:27:18:9e:3e:42:1f:
cc:b3:4d:f5:76:3d:23:25:29:84:86:06:97:2c:1f:
03:38:fa:dd:09:c9:c8:00:bb:97:37:cf:a9:96:15:
3c:95:23:6a:19:89:61:ca:a5:a2:81:c6:b6:eb:9b:
a7:92:4d:d3:dd:16:6d:2f:91:d0:b4:9e:ef:73:cb:
ef:8e:06:26:ac:a0:d8:91:1f:6a:d4:e7:74:dd:c6:
6f:f2:26:23:a5:2f:3e:6c:eb:a2:66:b6:6d:e9:d7:
46:79:47:52:c0:81:bb:74:2c:a2:a3:b3:1a:34:2c:
81:34:31:fd:04:d0:08:59:6b:0e:2f:44:49:86:c5:
fb:f6:ef:da:99:4c:4a:83:b1:7e:e9:c3:04:f0:36:
d2:5f:af:4f:cc:4e:0f:8c:c8:a4:a4:0c:1e:f6:d6:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:90:AA:14:E3:E6:AF:DF:2E:EC:4B:D7:24:11:A8:E1:AB:77:53:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YpCqFOPmr98u7EvXJBGo4at3Uzs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.232.0/21
Signature Algorithm: sha256WithRSAEncryption
33:57:97:3e:9b:b6:26:07:35:f9:6c:d7:94:1f:cc:a5:71:92:
68:39:32:b0:83:e3:37:66:2d:47:29:07:e4:06:d9:0b:e0:24:
f6:0d:0e:be:13:b4:d0:4d:b5:e6:13:eb:5b:8f:93:d3:5e:72:
97:00:a2:a1:ad:66:48:fe:fc:e8:7d:0f:23:7a:89:c7:c1:50:
71:34:85:41:13:ca:9c:2f:10:93:9d:62:38:3a:00:5a:d1:be:
e6:3e:2c:72:99:b9:43:6e:dc:f8:ea:03:48:88:8d:69:ef:f1:
34:3a:22:45:30:02:75:64:a6:1b:ed:78:5a:b0:41:60:5b:5b:
3a:23:d3:e8:64:e1:a3:39:c8:c6:2d:e2:d2:ba:12:9a:45:87:
95:b4:9d:e4:c1:8f:32:c2:34:77:a1:77:6d:2c:07:0e:14:28:
39:d7:f2:1f:f2:d4:70:d5:11:26:71:42:ae:d9:c0:a6:e7:0b:
07:e0:ce:e7:a0:90:24:97:47:1a:69:10:9a:43:c6:4d:04:65:
2b:0c:d2:ca:31:2a:44:10:9c:78:b8:e1:be:df:16:fa:9a:34:
fd:90:93:53:c9:28:39:44:59:f6:dc:60:ea:51:5b:4b:d1:9d:
c7:89:ef:48:b6:63:4d:6e:74:15:e0:1d:bb:b3:1d:9f:a4:9c:
f3:45:99:09
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNK4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMzdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYyOTBBQTE0RTNFNkFG
REYyRUVDNEJENzI0MTFBOEUxQUI3NzUzM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkQpgB11/SLJOiZFLJw5/GeYPZAVeHGLfl6gmPigHjUU7QBhC8
uvqb60OVuGKqOHarfpAt9ZkL5O/s6H7ec/VEVwYvY3q9sQR465Fu1a9bMi/2rQpe
BGkV+pypWHJXIv+baycYnj5CH8yzTfV2PSMlKYSGBpcsHwM4+t0JycgAu5c3z6mW
FTyVI2oZiWHKpaKBxrbrm6eSTdPdFm0vkdC0nu9zy++OBiasoNiRH2rU53Tdxm/y
JiOlLz5s66Jmtm3p10Z5R1LAgbt0LKKjsxo0LIE0Mf0E0AhZaw4vREmGxfv279qZ
TEqDsX7pwwTwNtJfr0/MTg+MyKSkDB721h7HAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYpCqFOPmr98u7EvXJBGo4at3UzswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lwQ3FGT1Btcjk4dTdFdlhK
QkdvNGF0M1V6cy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sOgwDQYJKoZIhvcNAQELBQADggEBADNXlz6btiYHNfls15QfzKVxkmg5MrCD4zdm
LUcpB+QG2QvgJPYNDr4TtNBNteYT61uPk9NecpcAoqGtZkj+/Oh9DyN6icfBUHE0
hUETypwvEJOdYjg6AFrRvuY+LHKZuUNu3PjqA0iIjWnv8TQ6IkUwAnVkphvteFqw
QWBbWzoj0+hk4aM5yMYt4tK6EppFh5W0neTBjzLCNHehd20sBw4UKDnX8h/y1HDV
ESZxQq7ZwKbnCwfgzuegkCSXRxppEJpDxk0EZSsM0soxKkQQnHi44b7fFvqaNP2Q
k1PJKDlEWfbcYOpRW0vRnceJ70i2Y01udBXgHbuzHZ+knPNFmQk=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:15 2025 by rpki-client