Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zlNDFXHyqEDVXL9IDvV-BNcV2II.roa
File: zlNDFXHyqEDVXL9IDvV-BNcV2II.roa (raw, json)
Hash identifier: nHImYdSc/LZbt4FYsjH6/pgvSOl90f1G3jq5JHzPzgw=
Subject key identifier: CE:53:43:15:71:F2:A8:40:D5:5C:BF:48:0E:F5:7E:04:D7:15:D8:82
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 341A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zlNDFXHyqEDVXL9IDvV-BNcV2II.roa
Signing time: Mon 10 Feb 2025 13:52:05 +0000
ROA not before: Mon 10 Feb 2025 13:52:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13338 (0x341a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:05 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CE53431571F2A840D55CBF480EF57E04D715D882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:a8:5c:ae:2b:d0:bd:85:80:e1:eb:80:1c:
87:cf:dc:1a:2e:db:21:5b:65:08:ba:08:b7:ae:9c:
30:a5:56:a4:85:55:a7:2d:7f:9a:6f:18:99:f7:89:
b6:6e:9a:30:73:45:5d:81:eb:7e:e3:63:01:06:c7:
7a:df:35:cd:3a:a1:70:de:2c:a6:e7:5c:9c:e1:bd:
69:a1:94:a3:d5:79:3f:9e:48:be:3e:3e:7c:b1:39:
f8:0c:ab:9f:44:61:f1:c3:7e:7e:3f:81:c1:6a:91:
b5:5f:ad:2e:86:9c:c2:e2:c1:f5:f4:bc:18:39:10:
5d:8c:7f:eb:b3:69:71:4b:96:5f:16:6a:f0:b1:66:
3b:fd:ca:c9:8e:c9:e5:c0:97:3d:2f:47:a6:ac:cf:
0e:a9:a0:45:09:93:82:66:a8:03:b2:54:60:7f:51:
22:5c:70:aa:24:c5:a9:bb:3a:9d:40:72:5d:74:b5:
f2:d5:f1:8d:46:d6:99:10:12:de:a4:63:f5:11:06:
d8:f7:35:cd:27:49:d6:3c:17:07:ba:c0:6b:eb:8a:
33:ca:00:e9:e5:d7:c4:92:b5:85:27:fc:bc:9d:14:
f5:01:59:19:05:0c:64:46:c7:e5:56:de:57:a2:7a:
aa:77:ba:3b:65:40:b7:a0:d0:82:77:30:dc:66:39:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:43:15:71:F2:A8:40:D5:5C:BF:48:0E:F5:7E:04:D7:15:D8:82
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zlNDFXHyqEDVXL9IDvV-BNcV2II.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
45:0c:1e:d6:58:9f:c3:d9:e2:2d:f8:39:09:e5:21:29:d0:02:
ad:e0:7c:47:1a:40:bd:50:22:c6:1f:c1:80:e0:8e:cf:8e:e3:
30:a7:9f:c9:f3:cf:9f:cd:a5:25:3f:9f:f5:54:c0:6c:96:a2:
17:95:18:76:de:de:02:92:e8:29:e6:30:7d:47:b4:cf:75:45:
c2:3d:54:6d:26:ee:42:d9:2e:c7:ed:d1:69:66:80:11:34:74:
a8:1d:ae:76:14:a5:03:b0:9e:c3:3e:3c:42:1e:04:11:b7:02:
43:ef:f0:c1:6e:c9:0f:44:46:d5:20:b7:59:83:23:2a:14:14:
80:5d:b9:68:12:2b:4a:51:13:8c:ef:74:92:f4:2e:07:02:e5:
81:a3:33:e5:ee:71:b6:7b:e7:57:f3:15:8b:7b:a0:2f:e0:ec:
ea:45:22:80:19:26:4e:51:9d:b3:e5:b4:b0:2d:06:77:91:d2:
0f:15:e8:2c:31:32:08:16:1a:08:79:26:33:a2:ee:ef:07:11:
91:26:69:0a:a6:33:80:5e:a8:9e:a7:33:c9:ab:a6:e1:f0:17:
b9:81:2e:20:79:4b:04:3c:aa:0b:7a:0b:d3:cb:61:7f:f1:e0:
fd:99:76:ea:cd:2b:39:a0:d3:53:9f:9e:c8:20:03:31:2d:10:
cd:f0:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:42 2025 by rpki-client