Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtDcrt6mG5rFYfj_s-LrCLyHhCs.roa
File: DtDcrt6mG5rFYfj_s-LrCLyHhCs.roa (raw, json)
Hash identifier: SpBDF005rDRA98bAQslLW73YP56WgiE7+53QyoRGJ2Q=
Subject key identifier: 0E:D0:DC:AE:DE:A6:1B:9A:C5:61:F8:FF:B3:E2:EB:08:BC:87:84:2B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 344F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtDcrt6mG5rFYfj_s-LrCLyHhCs.roa
Signing time: Mon 10 Feb 2025 13:52:15 +0000
ROA not before: Mon 10 Feb 2025 13:52:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.80.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13391 (0x344f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0ED0DCAEDEA61B9AC561F8FFB3E2EB08BC87842B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4f:c2:6d:ac:4a:86:ea:74:de:06:22:5f:4c:
f2:2f:8b:09:e9:05:b7:0b:11:7f:a3:6f:54:44:cc:
41:91:71:cd:7e:f6:64:bb:29:a6:95:e6:94:1a:c3:
6e:c5:40:96:e9:12:fe:c5:32:e8:a3:d9:30:3d:15:
1e:c9:29:c3:dc:a2:26:2a:aa:fd:c7:f8:da:53:c3:
62:ff:83:e2:ee:17:4c:58:d3:28:91:d9:1d:d3:53:
1f:fe:67:03:e6:25:42:4e:ae:80:2d:77:45:c5:ce:
0e:3e:ab:67:de:d2:13:56:3b:0b:06:6e:03:82:39:
ad:62:20:84:a5:fe:51:cd:39:f8:5c:fc:bf:f6:dc:
89:c7:e7:e9:a8:ba:26:1f:b9:39:26:fc:01:3b:44:
88:49:9a:5c:7e:46:e7:f7:0d:d2:ad:8f:d2:1a:40:
95:e3:78:15:66:8c:8b:23:90:ab:2e:a8:e9:d9:5f:
a0:fb:49:48:60:22:6f:aa:e6:8a:49:6f:74:81:f5:
3e:4a:d2:cd:5a:76:61:23:ed:69:f8:dd:35:66:9f:
ec:ba:c5:d7:f6:fa:32:7f:42:3d:20:09:74:37:e6:
9c:16:cd:49:ca:c6:5b:2d:c7:e8:92:f3:09:02:cb:
af:ca:65:fb:af:64:6a:c0:6c:d0:7b:24:6d:2e:2a:
a1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D0:DC:AE:DE:A6:1B:9A:C5:61:F8:FF:B3:E2:EB:08:BC:87:84:2B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DtDcrt6mG5rFYfj_s-LrCLyHhCs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.80.0/21
Signature Algorithm: sha256WithRSAEncryption
04:dc:47:d2:b2:de:aa:43:55:8f:5d:b2:64:d4:fa:cb:f2:3d:
a0:00:1f:ee:be:7e:9e:81:a4:63:54:86:72:38:d6:01:f3:d1:
1a:c2:78:fb:85:46:fc:af:61:77:64:59:d3:e3:e4:a6:09:39:
85:b2:2d:47:d4:23:67:c1:58:2e:e9:f6:93:87:da:6a:b9:bb:
c6:f7:62:2b:91:60:29:c5:b9:ff:e8:ad:61:8a:76:2b:eb:e3:
0a:a1:46:33:f7:92:26:da:f7:3a:10:56:20:46:ca:03:c4:09:
02:4f:9f:9f:5f:95:39:2f:18:8b:a0:68:aa:33:9f:61:dd:8e:
66:ce:5f:7c:05:95:a5:42:bb:02:48:90:0e:a7:06:26:3a:da:
fd:2f:42:94:75:03:86:af:d4:9e:79:78:25:e5:96:94:b5:80:
21:18:ea:f0:2f:04:41:e1:3d:02:bc:e4:a5:9f:a8:62:50:f9:
52:38:cc:12:46:7a:7d:88:fc:cc:89:02:ea:3c:e3:e5:d9:1a:
1e:96:5e:af:71:2d:d9:b5:79:82:7f:e3:38:19:e4:4b:be:eb:
f1:62:4b:5a:33:83:2f:b9:61:fd:f7:88:89:eb:e8:b8:3c:ac:
a7:f2:5b:f3:fa:04:71:76:97:25:49:8d:e6:c1:d7:a2:73:ee:
47:bf:74:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:55 2025 by rpki-client