Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6JfTMb-10fN8LCfhX629YKhREJg.roa
File: 6JfTMb-10fN8LCfhX629YKhREJg.roa (raw, json)
Hash identifier: qXrTGVDjy9TtkN893qg2Lwpyj5za/hXs57O/HRQG7Qo=
Subject key identifier: E8:97:D3:31:BF:B5:D1:F3:7C:2C:27:E1:5F:AD:BD:60:A8:51:10:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34A8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6JfTMb-10fN8LCfhX629YKhREJg.roa
Signing time: Mon 10 Feb 2025 13:52:35 +0000
ROA not before: Mon 10 Feb 2025 13:52:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13480 (0x34a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E897D331BFB5D1F37C2C27E15FADBD60A8511098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:33:09:cf:e9:9a:1a:01:14:af:47:3a:53:
b6:7b:a0:d2:40:95:ca:2d:ae:b1:25:95:66:41:f6:
e1:52:0e:f8:87:51:3b:57:82:ee:1a:ea:42:fe:dd:
32:c5:10:f1:98:61:c4:07:ec:ae:8c:9f:16:d4:48:
65:73:07:99:b4:b0:d3:e5:59:a6:0e:cb:c5:2d:08:
e9:94:ba:af:6d:5a:5b:ba:54:40:78:f0:19:7b:ed:
42:08:df:3a:bf:26:f2:c9:8c:69:4e:95:f0:3c:b6:
48:4b:4b:cf:43:10:0a:33:23:55:0e:d3:4c:f3:8a:
9a:4e:21:c3:a0:62:62:2a:1e:74:06:1d:4e:eb:9e:
ac:3d:58:53:50:11:c9:4f:10:47:10:e6:84:89:95:
13:71:9e:de:8e:bd:3c:70:8d:19:11:87:ac:84:d1:
06:3f:e0:c2:53:54:cb:03:69:25:30:0b:cd:a1:e2:
13:25:c1:4e:88:8d:38:97:fb:68:69:bd:5c:8f:c2:
6b:84:2f:3f:7d:72:85:7b:44:a9:61:49:0f:b1:28:
79:0a:dd:2d:4e:c4:21:a7:00:c6:67:34:93:e5:20:
64:1c:8c:0a:78:2a:4e:72:e4:16:2d:5c:39:ee:c3:
21:d0:d8:c8:1a:56:36:3b:b2:45:c9:57:46:30:10:
12:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:97:D3:31:BF:B5:D1:F3:7C:2C:27:E1:5F:AD:BD:60:A8:51:10:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/6JfTMb-10fN8LCfhX629YKhREJg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.148.0/22
Signature Algorithm: sha256WithRSAEncryption
27:ca:ad:36:c4:2b:1c:d4:02:0b:34:9b:29:a9:a2:77:72:49:
cf:24:82:90:98:c0:c8:f4:fe:e8:3e:e4:16:c8:98:a0:17:d5:
4c:55:81:cd:20:9d:3f:c3:be:49:90:7e:72:b5:f9:74:80:eb:
e6:d3:42:55:66:92:24:ac:96:bb:54:b4:a9:a7:96:60:28:e0:
6c:11:45:9c:82:54:f8:0e:c8:34:7d:5a:3b:9f:ea:bf:bf:da:
da:f8:a6:37:54:f4:cf:75:8d:b6:82:c5:cf:e4:99:9c:67:d4:
a4:93:ea:54:c0:59:18:42:d8:07:de:45:7c:ff:70:fa:cc:38:
0a:19:9e:0c:9e:a8:b6:51:f8:4f:dd:f9:21:63:fd:24:54:70:
66:b1:c3:39:7a:ad:0c:6d:6f:62:61:fe:73:eb:a0:c9:39:cc:
83:09:c7:18:9f:d1:cd:0c:77:e9:29:b3:f9:2c:94:ad:b1:05:
a9:46:1f:cf:ac:42:b6:7c:87:22:e9:a1:90:13:d9:d5:13:a7:
17:26:08:98:cf:bc:9b:6f:71:48:31:a7:05:16:f5:80:39:8e:
11:d3:94:91:ff:b0:6e:0f:9b:44:d2:eb:c7:db:9a:16:9a:28:
c3:46:f0:33:27:c7:80:75:60:11:ff:d8:70:7e:d7:e3:e5:ec:
02:d7:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:22 2025 by rpki-client