Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2ZP3DPe1ddI9B1_lACTrhdTInL0.roa
File: 2ZP3DPe1ddI9B1_lACTrhdTInL0.roa (raw, json)
Hash identifier: kbcVb3tWZFeEcZ/BjoyDi+t+BeHlN1/6XrADzAEMm0c=
Subject key identifier: D9:93:F7:0C:F7:B5:75:D2:3D:07:5F:E5:00:24:EB:85:D4:C8:9C:BD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 356C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2ZP3DPe1ddI9B1_lACTrhdTInL0.roa
Signing time: Mon 10 Feb 2025 13:53:19 +0000
ROA not before: Mon 10 Feb 2025 13:53:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.132.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13676 (0x356c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D993F70CF7B575D23D075FE50024EB85D4C89CBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:92:2b:95:88:ab:24:01:82:2c:4a:cc:dd:72:
f1:64:52:84:02:c7:28:fd:fb:22:3c:12:4a:4b:9a:
b0:d8:aa:4c:32:b4:23:3a:06:b9:f8:40:54:39:39:
39:d9:03:44:fc:f4:f6:b3:d2:33:d7:18:11:ff:89:
33:28:be:7b:5b:7f:81:d0:d0:2f:3d:a4:e7:d7:11:
62:6e:c1:0e:00:61:3a:85:24:b8:a6:8d:b3:0c:8d:
94:17:ae:a7:65:77:8a:70:da:5a:c2:3b:56:9f:ae:
46:65:26:4f:7c:41:31:27:96:3f:ec:a3:ed:fe:30:
75:df:44:53:3c:4e:ab:fa:31:1d:68:82:33:2b:18:
d1:f2:17:65:ec:46:a0:8e:97:5d:c8:ee:01:2c:95:
87:b0:20:3f:ef:a1:21:67:89:49:97:92:5b:3a:e9:
b0:7d:65:92:b1:d8:fb:7c:cc:3b:d9:d7:22:2d:1c:
36:4a:b9:83:1a:f6:d1:3e:1f:22:27:4c:8d:f4:1a:
84:8d:41:6d:c4:0d:22:e0:55:56:21:87:fe:45:c7:
41:bc:57:ad:c4:0a:49:ad:59:8b:7e:8f:ae:75:63:
51:27:14:7b:1c:2a:5e:42:fb:1e:a3:13:e5:db:2b:
25:57:58:3f:d4:fd:25:fb:75:fa:06:d8:fd:7b:6e:
69:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:93:F7:0C:F7:B5:75:D2:3D:07:5F:E5:00:24:EB:85:D4:C8:9C:BD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2ZP3DPe1ddI9B1_lACTrhdTInL0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.132.0/22
Signature Algorithm: sha256WithRSAEncryption
00:7e:48:68:8e:ad:cb:98:72:3d:1d:62:b7:af:24:fe:b2:b1:
2c:cc:da:d6:02:da:37:bd:58:e6:31:75:52:ce:67:bb:bc:1a:
42:0e:c9:12:a5:2a:fd:1c:c1:dc:ca:06:70:02:8d:2f:18:27:
e9:40:cd:54:79:fb:c2:e4:19:9a:d4:21:db:af:6f:38:15:c2:
4f:71:75:d7:da:4f:6b:f9:ab:34:01:4f:59:e0:40:6e:28:25:
f1:66:db:f6:de:16:7a:a6:39:4b:6f:79:4b:3b:79:3e:73:07:
5e:d6:d2:38:02:b7:0d:18:25:a4:9b:71:65:11:43:8a:87:33:
19:5c:a5:8e:a8:2a:20:85:7a:d2:de:34:6e:8f:bf:f3:0e:39:
9c:5f:9a:cc:51:87:80:6a:c5:d6:e2:24:04:8f:ad:23:59:d2:
17:45:f4:c5:93:dd:53:d4:27:e1:9f:54:42:78:e9:bb:cf:30:
10:e1:46:54:61:5c:64:d2:e6:1b:85:2f:70:c0:36:8b:8c:89:
90:f4:82:1f:94:5d:e1:bf:c3:ac:8a:27:3d:a9:8a:93:42:46:
da:ce:df:b3:76:4b:39:97:f9:e5:00:51:f5:8b:64:27:0f:6c:
c2:12:93:b1:9d:0e:56:e7:f2:ec:4f:4c:7d:f6:ad:a8:80:c3:
f5:48:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:48 2025 by rpki-client