Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uRLNpfzWKSEWDX427JFER16kDKM.roa
File: uRLNpfzWKSEWDX427JFER16kDKM.roa (raw, json)
Hash identifier: ESkLDQy1Vd3v1Irkq960QdfnvKv5TJHRD4abp1xXsBI=
Subject key identifier: B9:12:CD:A5:FC:D6:29:21:16:0D:7E:36:EC:91:44:47:5E:A4:0C:A3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 319D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uRLNpfzWKSEWDX427JFER16kDKM.roa
Signing time: Mon 26 Aug 2024 05:30:45 +0000
ROA not before: Mon 26 Aug 2024 05:30:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12701 (0x319d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:45 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B912CDA5FCD62921160D7E36EC9144475EA40CA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:80:26:e3:c5:4e:27:13:5d:2d:5e:8f:e6:be:
8f:a9:aa:98:93:66:47:f6:ea:50:d7:03:bb:45:2b:
dd:99:45:26:0c:91:21:18:63:43:f1:70:95:bb:73:
d9:f5:5a:91:33:eb:74:33:fa:de:53:c3:c0:5f:1a:
e2:7b:79:85:18:12:3d:e7:f5:de:a0:3f:84:b3:8f:
af:cc:43:6d:b2:78:52:94:d4:90:69:4b:18:a4:47:
82:30:e1:f0:69:5a:26:8c:24:da:ec:4e:95:63:2d:
b5:5f:e1:b3:41:54:65:93:9c:ce:35:66:85:7b:e9:
47:83:12:74:b8:94:a3:1f:e9:1e:d5:99:3d:e9:2a:
3d:7c:4d:5e:31:f5:5d:29:8b:24:29:53:03:33:90:
a5:ca:41:01:bd:2b:1f:11:4d:e4:ea:9c:05:82:ca:
ae:77:d9:ef:8a:a6:10:0c:f9:16:86:c2:f1:40:05:
fc:21:62:e8:ad:23:57:d8:3c:65:e8:74:92:40:6e:
ca:78:fd:37:2f:b8:68:4b:fd:14:90:8b:e8:07:16:
31:85:2c:e2:48:be:b2:8e:1a:ab:ed:ec:c5:bb:6e:
d5:65:fc:4d:13:c7:5c:79:1d:25:b3:ad:cc:b3:aa:
05:48:80:35:30:f8:6c:a4:a9:37:90:cc:52:6d:8b:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:12:CD:A5:FC:D6:29:21:16:0D:7E:36:EC:91:44:47:5E:A4:0C:A3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/uRLNpfzWKSEWDX427JFER16kDKM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.156.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:28:0a:22:7a:ec:d8:bf:45:48:d5:16:d5:ae:92:37:73:b2:
6d:1e:2d:0e:81:8e:d6:25:e9:59:5c:5e:11:37:1f:3a:8a:ad:
82:81:e9:c2:48:87:fb:e1:2b:3a:08:6b:3a:49:c6:27:77:91:
ff:39:f1:d1:32:62:90:c0:c7:5d:d5:e9:a4:93:e5:0b:86:4d:
03:a9:16:b3:22:e0:d0:fd:56:3f:e3:c5:7b:08:46:a4:41:23:
3e:f2:32:3f:6c:d2:a2:a0:01:d3:af:bf:c7:90:f5:6e:94:3e:
86:c3:d2:60:cd:58:bf:bb:a7:19:02:26:25:8a:2e:ff:c1:5b:
09:dc:06:6b:01:93:d0:db:55:b3:64:4a:93:2c:43:7c:2b:f4:
1c:24:f3:ab:50:7b:2d:bb:b6:c4:1c:80:33:5d:fd:a2:3d:0c:
d5:de:99:5d:23:70:24:5c:06:e3:3d:4b:bb:58:24:1e:58:e7:
bf:b5:91:1b:ee:75:97:2b:57:01:28:a2:71:f0:75:d3:47:72:
18:1c:75:98:b0:da:2d:3d:62:ac:52:c3:c0:f7:5d:93:3e:c9:
f7:47:bd:4a:b4:14:1e:f8:ff:e5:76:39:2c:fc:6e:4e:ed:ed:
80:24:a6:eb:25:10:53:24:03:f1:af:3c:3d:45:33:b1:f5:70:
0d:16:f5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:56:50 2025 by rpki-client