Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sIvj6T4aEq3gvsTMkOlbdt5x7BY.roa
File: sIvj6T4aEq3gvsTMkOlbdt5x7BY.roa (raw, json)
Hash identifier: kogW7BNoAgbmNIH5N5Q4LxN434XtcZoiJqd2zt50d6c=
Subject key identifier: B0:8B:E3:E9:3E:1A:12:AD:E0:BE:C4:CC:90:E9:5B:76:DE:71:EC:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3426
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sIvj6T4aEq3gvsTMkOlbdt5x7BY.roa
Signing time: Mon 10 Feb 2025 13:52:07 +0000
ROA not before: Mon 10 Feb 2025 13:52:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13350 (0x3426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B08BE3E93E1A12ADE0BEC4CC90E95B76DE71EC16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:c2:65:a0:d5:82:86:b7:8b:6f:11:0f:01:
74:81:3c:b3:95:56:42:f2:6f:f9:26:fa:74:1a:b7:
1f:ce:5e:b6:fd:e1:96:09:1e:1d:e7:31:2f:1f:5a:
af:4e:36:02:8d:0e:26:70:e6:72:f2:2a:4e:5f:5e:
de:7f:8d:c8:38:b1:87:98:6b:ab:57:ea:2b:31:b5:
97:2b:78:3d:da:47:10:4c:89:81:58:64:fa:aa:d7:
e3:ec:9f:c8:d3:ae:58:20:09:d6:95:6f:03:ec:e2:
df:23:2c:30:b1:70:e2:52:41:55:f2:b0:7d:31:10:
42:ce:71:7d:b5:b9:bb:ae:43:67:f2:6e:f2:d5:57:
b0:a3:86:d8:2b:3d:8f:df:e7:2e:f1:8d:43:8d:92:
7c:d5:d0:72:3a:58:98:e7:57:d3:c5:de:7e:37:77:
7d:08:31:1c:d8:e9:c9:4d:9d:02:16:cd:38:f6:67:
9e:61:58:38:bd:78:7a:b8:1b:88:9e:f8:05:45:25:
11:a2:ed:19:46:4a:2d:90:25:03:9d:28:4d:fd:ae:
b6:e8:a9:7c:66:c5:c6:51:af:46:10:49:ff:ce:0b:
b2:28:96:c7:ac:79:83:ad:55:87:c7:66:d7:2c:9e:
d7:37:c9:ba:fe:47:e5:54:d5:76:97:f3:53:79:d1:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:E3:E9:3E:1A:12:AD:E0:BE:C4:CC:90:E9:5B:76:DE:71:EC:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sIvj6T4aEq3gvsTMkOlbdt5x7BY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.152.0/21
Signature Algorithm: sha256WithRSAEncryption
48:41:d3:fb:27:f1:c2:f4:10:01:ea:5c:a9:a7:84:a2:94:6a:
b0:6b:b9:a4:7c:3b:ef:02:68:7b:87:85:8e:82:84:8c:5a:08:
a2:f4:44:74:0e:a9:a8:ef:7a:29:a9:a8:bd:3d:a4:83:f0:eb:
a1:fa:ef:fd:ff:37:a5:19:3f:34:de:58:07:7a:c5:f9:df:7c:
44:a0:76:89:c7:b4:fd:4f:2d:40:75:f6:1a:aa:66:ee:18:a4:
0a:2a:97:e3:8e:7c:7d:51:b4:b0:b2:99:40:14:30:d9:d6:c1:
a8:10:0a:13:bb:de:2c:d0:3c:f6:ed:32:23:2a:08:f6:c3:87:
f7:74:f4:d7:ca:4d:de:98:45:0d:77:68:b5:42:08:65:a0:72:
e4:b3:25:88:0e:6d:98:da:12:86:0d:cd:f6:ea:0c:89:75:86:
e8:ef:69:9c:8f:fe:80:1b:20:38:9f:b9:eb:f8:63:26:b1:37:
48:a8:49:9a:0d:14:08:cc:dd:4e:1d:7f:56:7f:60:78:c6:06:
ba:77:05:fa:f1:24:8c:9d:67:ee:99:5f:b2:89:5d:b4:08:5a:
49:a9:19:bb:ee:9e:b7:0f:27:24:d1:70:f6:26:61:4f:c5:fc:
9d:9a:b5:db:32:be:b6:29:38:a1:46:72:c7:b8:d4:a1:84:1a:
28:f0:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:19 2025 by rpki-client