Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1b8lPq6ySGCEkVeIMmHmWGZUZtc.roa
File: 1b8lPq6ySGCEkVeIMmHmWGZUZtc.roa (raw, json)
Hash identifier: T/PLe4M7KqU7Xluexg6srIpn6Vc66PjLLGCf/qQj1kU=
Subject key identifier: D5:BF:25:3E:AE:B2:48:60:84:91:57:88:32:61:E6:58:66:54:66:D7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3442
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1b8lPq6ySGCEkVeIMmHmWGZUZtc.roa
Signing time: Mon 10 Feb 2025 13:52:12 +0000
ROA not before: Mon 10 Feb 2025 13:52:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.112.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13378 (0x3442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D5BF253EAEB24860849157883261E658665466D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:95:37:47:77:cd:0a:f1:84:b0:71:41:75:b0:
a2:c6:50:52:5e:aa:9d:56:7b:ba:dc:a1:9a:20:dc:
6f:3e:4b:17:a2:83:dc:de:bc:75:ec:7c:0b:0d:80:
c3:69:c4:2c:ef:99:08:ae:00:32:5f:b3:8a:f2:36:
1a:b4:32:51:04:28:c7:76:0e:bd:ec:ff:2e:7b:d5:
0a:7f:90:5b:fd:8d:10:da:c4:a1:87:50:da:f1:9c:
12:c1:63:eb:25:ba:93:7e:83:e9:e2:bd:fb:8a:cc:
bd:96:77:bc:ed:a5:60:ac:65:ea:f5:e1:c6:37:6b:
a4:56:14:0d:60:52:24:85:0a:7b:a1:14:67:bf:32:
58:3a:68:1b:96:1c:de:0b:00:71:17:9b:48:b9:8a:
f0:89:c4:5e:0e:83:3e:14:00:92:ae:4a:c4:9e:d3:
56:2e:e5:8a:a1:d2:59:ba:27:a5:eb:ee:41:54:49:
97:29:a1:3d:44:82:c8:08:76:72:d4:de:38:ba:2b:
f7:43:f5:5b:d2:98:fc:ba:48:76:6e:5f:de:d7:94:
36:ac:c8:26:41:a6:b1:30:34:32:96:40:57:3c:53:
63:ed:bc:1f:ce:90:cf:91:4e:f3:0b:99:fd:7f:5a:
80:04:a3:41:0c:40:ef:5a:9f:b6:0d:c6:20:1c:67:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:25:3E:AE:B2:48:60:84:91:57:88:32:61:E6:58:66:54:66:D7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1b8lPq6ySGCEkVeIMmHmWGZUZtc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.112.0/23
Signature Algorithm: sha256WithRSAEncryption
80:73:50:49:65:0d:c4:dc:e8:47:e0:45:c9:58:f2:2c:7f:bc:
3d:de:0c:90:ef:b7:fb:97:ce:af:ae:e8:3b:e9:aa:86:5e:d3:
d9:f0:cc:e5:57:82:f1:9b:a7:b1:80:b7:4a:cb:a3:7e:93:44:
58:57:88:09:8e:6c:d5:a2:36:9b:ad:91:41:89:03:84:65:85:
16:bb:13:24:53:db:4d:ee:ac:70:86:1b:6b:e4:5e:99:46:b8:
3a:12:5b:8e:e5:c9:d3:14:3a:44:dc:31:31:8e:63:60:6a:6a:
21:58:00:05:ad:23:81:04:a4:d5:8e:b4:14:32:c7:91:81:11:
d6:b9:71:f2:8c:c9:9b:17:bf:4f:2d:7d:bc:41:82:81:26:6f:
29:cf:ee:2c:ba:08:a8:3f:16:34:f2:cb:42:19:a5:09:65:3f:
f6:ed:66:1f:a4:14:22:9a:0b:ef:89:38:15:00:60:8d:1d:de:
93:36:b3:8e:55:8e:32:e5:f1:59:f2:de:a3:6f:61:37:92:14:
5a:09:b7:3f:ef:54:65:24:c9:37:ad:a9:81:fd:ee:97:15:e5:
b7:72:d8:4a:95:7f:1a:6a:47:48:3e:70:cf:f3:91:4a:e1:02:
68:39:2a:8d:d7:50:a8:08:f9:f6:ad:2f:95:7a:bc:d2:b0:ed:
48:e1:47:80
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNEIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ1QkYyNTNFQUVCMjQ4
NjA4NDkxNTc4ODMyNjFFNjU4NjY1NDY2RDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdlTdHd80K8YSwcUF1sKLGUFJeqp1We7rcoZog3G8+Sxeig9ze
vHXsfAsNgMNpxCzvmQiuADJfs4ryNhq0MlEEKMd2Dr3s/y571Qp/kFv9jRDaxKGH
UNrxnBLBY+slupN+g+nivfuKzL2Wd7ztpWCsZer14cY3a6RWFA1gUiSFCnuhFGe/
Mlg6aBuWHN4LAHEXm0i5ivCJxF4Ogz4UAJKuSsSe01Yu5Yqh0lm6J6Xr7kFUSZcp
oT1EgsgIdnLU3ji6K/dD9VvSmPy6SHZuX97XlDasyCZBprEwNDKWQFc8U2PtvB/O
kM+RTvMLmf1/WoAEo0EMQO9an7YNxiAcZ6IhAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU1b8lPq6ySGCEkVeIMmHmWGZUZtcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFiOGxQcTZ5U0dDRWtWZUlN
bUhtV0daVVp0Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG0
sXAwDQYJKoZIhvcNAQELBQADggEBAIBzUEllDcTc6EfgRclY8ix/vD3eDJDvt/uX
zq+u6DvpqoZe09nwzOVXgvGbp7GAt0rLo36TRFhXiAmObNWiNputkUGJA4RlhRa7
EyRT203urHCGG2vkXplGuDoSW47lydMUOkTcMTGOY2BqaiFYAAWtI4EEpNWOtBQy
x5GBEda5cfKMyZsXv08tfbxBgoEmbynP7iy6CKg/FjTyy0IZpQllP/btZh+kFCKa
C++JOBUAYI0d3pM2s45VjjLl8Vny3qNvYTeSFFoJtz/vVGUkyTetqYH97pcV5bdy
2EqVfxpqR0g+cM/zkUrhAmg5Ko3XUKgI+fatL5V6vNKw7UjhR4A=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:09 2025 by rpki-client