Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8kamSlC7NIrGKegUeZxnS97YuAw.roa
File: 8kamSlC7NIrGKegUeZxnS97YuAw.roa (raw, json)
Hash identifier: OkTbM33jDuKeqTiQpPW+taaZLGbDkSdcL2Z1FxCZwyo=
Subject key identifier: F2:46:A6:4A:50:BB:34:8A:C6:29:E8:14:79:9C:67:4B:DE:D8:B8:0C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36AE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8kamSlC7NIrGKegUeZxnS97YuAw.roa
Signing time: Mon 10 Feb 2025 13:54:34 +0000
ROA not before: Mon 10 Feb 2025 13:54:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13998 (0x36ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F246A64A50BB348AC629E814799C674BDED8B80C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:cc:ea:28:4e:91:a3:c5:01:dd:a6:38:5c:
12:f9:75:63:11:06:0f:2d:a7:31:bb:44:13:43:db:
63:c0:ba:77:12:68:e3:19:d5:83:fc:63:6a:ae:96:
b4:a5:df:a5:c8:ef:4a:e1:41:96:89:fb:be:d9:f3:
c5:40:5e:f0:4b:9f:f9:91:d0:a9:c1:56:f6:39:01:
43:51:71:b6:4a:d5:b4:9e:ed:bc:46:d6:1b:37:98:
c0:a7:49:74:e3:c6:ec:62:a6:3b:17:cc:31:74:2e:
fd:b4:01:33:84:06:1c:18:50:b5:5e:1f:4c:13:1e:
e0:7e:8c:e3:cb:6b:a5:11:df:c6:3d:e4:e8:a5:15:
00:cb:2c:18:23:2d:39:59:e1:a3:44:34:72:9c:8d:
25:f4:52:ae:db:08:e2:4b:ea:6b:99:a6:4d:d1:d8:
ec:a8:81:ec:7f:ee:0b:e2:81:bc:2c:04:86:75:69:
f0:32:68:d5:0d:c8:d0:05:40:a3:58:2c:48:8b:0a:
e5:25:94:41:39:5c:13:b9:94:f4:b1:f6:da:f2:43:
b7:67:3d:50:b3:02:ae:af:8f:ab:30:8d:6f:06:9e:
63:0d:49:c5:29:5c:64:6e:ac:e5:58:e3:76:c0:89:
55:c7:ef:06:84:95:f3:1d:9f:1f:cc:fa:f1:5f:12:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:46:A6:4A:50:BB:34:8A:C6:29:E8:14:79:9C:67:4B:DE:D8:B8:0C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/8kamSlC7NIrGKegUeZxnS97YuAw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.208.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:ad:90:35:f5:73:c3:0d:36:ed:33:bf:8d:fc:b4:da:44:e1:
51:df:78:94:fc:0c:76:eb:c9:2a:11:97:dd:da:cc:9e:4c:17:
a8:9f:75:9a:0f:50:32:2c:48:6b:3f:84:5a:13:2e:0b:bf:a9:
fc:c2:d5:79:69:65:f0:52:2a:55:63:fa:8c:97:d7:6f:57:a9:
25:6a:1a:af:d6:54:0b:ff:3e:88:d0:32:14:2c:18:26:af:c9:
69:03:45:a7:19:b2:08:7f:15:1e:e1:c9:4f:be:e4:4e:19:b1:
da:87:d3:8e:57:3e:24:e3:ef:07:38:4e:e1:de:de:54:63:88:
65:ea:69:ae:9a:b5:2a:c0:05:a1:e0:5e:a3:b0:bf:4e:58:17:
4c:af:53:c8:d2:05:25:e8:40:60:c2:46:9c:a5:53:72:3b:bb:
b4:d1:32:00:31:db:64:cb:59:89:b2:3c:0e:fb:ab:b3:41:4b:
36:5a:5d:fe:87:59:cd:39:5d:21:7a:fe:42:86:75:54:43:46:
85:c5:39:c4:a7:4a:42:a8:37:58:0c:81:fe:da:ff:7e:22:53:
26:11:a0:a1:80:11:45:a1:69:28:fe:89:6b:f5:c5:9f:15:df:
77:35:2a:b4:14:fc:c7:7d:28:d0:da:72:79:ef:07:74:43:6d:
5d:b6:c4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:09 2025 by rpki-client