Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5JvwsjXgOOqPT9JoLnY2770_VRU.roa
File: 5JvwsjXgOOqPT9JoLnY2770_VRU.roa (raw, json)
Hash identifier: FRp6yvM+GGuw0axuxflL2hhSjn1AmBwIALOca25e9Hk=
Subject key identifier: E4:9B:F0:B2:35:E0:38:EA:8F:4F:D2:68:2E:76:36:EF:BD:3F:55:15
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3564
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5JvwsjXgOOqPT9JoLnY2770_VRU.roa
Signing time: Mon 10 Feb 2025 13:53:18 +0000
ROA not before: Mon 10 Feb 2025 13:53:18 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13668 (0x3564)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:18 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E49BF0B235E038EA8F4FD2682E7636EFBD3F5515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:56:21:7f:33:05:30:4b:d9:86:dc:6e:c6:
04:11:04:48:56:b6:08:4a:54:00:5b:f9:ad:a0:9e:
f5:c7:96:9b:b2:8c:3b:8c:88:4e:86:4d:37:51:c1:
3f:2b:2d:c3:5e:0e:b0:a5:4a:65:2b:f4:b5:ce:3a:
f6:1f:c6:36:18:da:58:92:e9:94:a8:14:a0:49:9b:
2a:fb:f1:18:42:f8:f7:02:8d:3f:11:11:24:a0:e2:
32:71:3b:4f:98:d7:44:5b:9e:c3:1e:24:c5:01:79:
aa:0e:e0:f5:03:c8:ad:d4:34:94:64:ba:94:63:83:
30:3f:db:1d:f9:5b:36:22:1c:12:e2:75:b9:fc:80:
d4:f3:74:b5:c1:2d:1b:9f:90:86:05:26:a6:00:30:
15:22:4c:2a:ad:86:8c:04:71:0f:34:a2:c7:31:4b:
d6:f5:84:15:89:31:41:fc:f7:a0:76:46:ad:68:d7:
d2:1a:cc:f5:e5:a2:ae:b3:cd:0b:c1:a4:42:bc:90:
52:77:59:66:da:e3:f5:05:80:56:39:6e:54:fa:8e:
d5:a8:d4:a8:9d:7c:62:7a:23:5c:06:0a:3c:36:5a:
1b:87:1e:34:c5:7b:aa:57:b0:8b:e1:c9:61:6b:eb:
35:8f:e9:8e:b4:9a:01:98:23:67:ac:ba:b6:2c:a9:
8e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:F0:B2:35:E0:38:EA:8F:4F:D2:68:2E:76:36:EF:BD:3F:55:15
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5JvwsjXgOOqPT9JoLnY2770_VRU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.85.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8a:bf:58:22:b9:20:00:2e:cf:42:8d:b1:ec:ad:ce:6f:f8:
a1:83:b2:8a:05:5f:bf:a9:9d:60:e3:5e:dd:2c:d8:d4:cf:9e:
1d:99:4e:5c:77:5d:0e:1e:26:b6:c1:6f:de:ef:10:20:64:14:
34:b0:c4:72:cb:19:ce:60:5d:88:2f:13:31:a1:7a:47:43:70:
56:61:85:22:d5:a1:f9:c7:43:dc:ef:80:d2:83:02:0e:db:1e:
5a:e0:80:6b:a6:43:41:7d:dc:88:58:bf:3b:c0:9e:03:a7:b4:
62:a5:4d:ef:66:a5:f8:0f:5c:10:2b:96:8b:46:2c:85:3d:bb:
8d:c9:a3:d5:5a:62:a5:c7:89:cf:d3:cc:1f:d4:e2:af:57:ea:
b5:06:58:95:f1:1b:16:93:28:d0:52:4d:a2:55:85:a4:62:36:
51:18:2a:96:e4:13:77:95:f0:c2:60:27:26:05:3c:e3:5d:6c:
91:7d:0c:3c:70:bd:be:93:38:61:21:01:43:4a:c3:32:9f:ea:
76:91:43:c1:9d:50:cd:4f:70:dd:2e:5f:71:f9:55:30:fd:4d:
89:97:16:7f:e6:b2:b5:cb:83:dc:5d:89:a5:e8:21:11:88:ff:
92:fd:5d:17:19:59:be:86:3e:01:e0:37:44:ad:32:58:d9:ae:
f3:61:6e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:23 2025 by rpki-client