Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ConFkz5zLsS2Ox6SgRACzDSTMdw.roa
File: ConFkz5zLsS2Ox6SgRACzDSTMdw.roa (raw, json)
Hash identifier: vuMcTF/MOZKdkvI+CT5V8futIwF6prre307x4YH4QUQ=
Subject key identifier: 0A:89:C5:93:3E:73:2E:C4:B6:3B:1E:92:81:10:02:CC:34:93:31:DC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36AD
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ConFkz5zLsS2Ox6SgRACzDSTMdw.roa
Signing time: Mon 10 Feb 2025 13:54:34 +0000
ROA not before: Mon 10 Feb 2025 13:54:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.112.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13997 (0x36ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0A89C5933E732EC4B63B1E92811002CC349331DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:60:39:d6:89:f2:d9:63:c6:bb:57:23:3e:6d:
ea:a0:59:e6:ca:86:c1:8d:07:f2:ae:ac:f6:11:b6:
1f:e0:a4:f8:22:5e:e5:09:61:29:d0:f4:b8:32:8e:
b9:ad:61:5b:35:8d:b9:58:dc:c3:e4:ee:97:4c:34:
93:85:62:3b:15:d0:a2:80:c7:41:96:f3:57:eb:4c:
87:60:ea:a9:73:e8:38:cb:57:9b:3f:25:da:86:ba:
ad:de:ae:15:d2:06:43:85:98:b0:46:74:fc:69:9f:
07:7d:ba:74:d1:1f:4c:d3:bd:f6:98:e5:39:58:52:
21:15:32:60:39:54:c1:51:22:16:d7:03:95:45:a8:
99:b6:cc:fd:82:2c:f6:65:e2:6d:16:bf:86:bc:c9:
e8:fc:22:57:ab:e8:ae:ef:ad:a7:c5:82:61:48:8e:
d4:be:db:7e:e4:aa:73:2e:b7:94:ef:82:2b:ec:f6:
42:ef:bf:fd:62:31:67:a8:33:5a:12:ec:78:b3:d6:
98:38:df:39:6c:a5:52:60:27:57:d5:e9:91:0c:26:
3e:f5:74:38:4c:22:05:5c:79:a5:bb:f6:b5:05:01:
41:94:85:08:f4:50:92:77:a5:29:84:a2:ce:1c:6b:
61:63:86:44:9d:8e:4d:50:2f:79:05:44:b1:fd:b6:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:C5:93:3E:73:2E:C4:B6:3B:1E:92:81:10:02:CC:34:93:31:DC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ConFkz5zLsS2Ox6SgRACzDSTMdw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.112.0/21
Signature Algorithm: sha256WithRSAEncryption
60:20:b1:3b:36:26:e9:d9:17:3e:b8:da:48:63:a7:3c:ad:f8:
1d:25:63:fc:00:6f:57:77:58:61:fe:79:96:00:6a:7b:8f:cc:
05:11:ff:12:46:cb:ee:a8:d3:79:0a:54:b9:a8:ca:75:95:6e:
d0:dd:58:64:09:27:5c:fa:16:6c:48:fd:68:c6:43:97:3f:67:
48:da:b7:c9:06:67:45:2e:4e:b2:b6:35:c0:13:d4:be:b2:54:
07:a4:71:99:c3:da:a7:b6:82:b2:ed:6e:c7:91:50:59:e9:f8:
08:29:ac:f8:ee:06:fd:c1:61:fb:c8:e0:86:0b:67:c0:51:3c:
98:e3:ef:fc:1a:51:63:f0:a7:93:a2:9e:eb:cf:91:b8:d5:2f:
e3:3c:c0:39:19:3e:8b:f5:29:d2:46:ca:25:05:5c:e7:5d:37:
1d:03:fc:72:9e:5f:22:65:69:05:cc:e9:a6:b4:11:4e:cc:49:
34:6e:ea:5e:44:6c:b7:8d:b5:0c:3b:3f:d2:10:f3:35:4b:f7:
b7:bd:52:20:4a:52:b5:2a:4b:12:ab:87:9d:d7:74:e0:5f:a2:
ae:0a:0f:69:07:51:95:d5:e5:3c:99:10:29:52:8f:e0:45:40:
76:e1:dc:7a:29:31:e0:09:e8:e1:dd:31:52:a0:aa:a1:4d:c1:
20:4e:c0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:05 2025 by rpki-client