Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7NHDBSNlshOgsHMvQWkdgR4izU.roa
File: E7NHDBSNlshOgsHMvQWkdgR4izU.roa (raw, json)
Hash identifier: 7H06BYrYsFbtf47kNQBenleZNs5pBx88EtYeczdJwxo=
Subject key identifier: 13:B3:47:0C:14:8D:96:C8:4E:82:C1:CC:BD:05:A4:76:04:78:8B:35
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35AA
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7NHDBSNlshOgsHMvQWkdgR4izU.roa
Signing time: Mon 10 Feb 2025 13:53:34 +0000
ROA not before: Mon 10 Feb 2025 13:53:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13738 (0x35aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:34 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=13B3470C148D96C84E82C1CCBD05A47604788B35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:49:2d:50:a2:99:c8:6c:b6:6f:d7:fe:0b:b8:
58:8a:44:7f:e2:fa:ba:40:65:27:55:f6:14:a1:f8:
1e:70:4e:7b:fd:6e:db:6a:d1:65:ad:2f:b5:27:0c:
fb:68:e4:66:ff:91:c6:86:1f:f8:24:00:92:41:54:
06:d7:f3:a6:53:f2:0a:0e:3b:bd:f4:6c:7e:ef:fc:
71:54:a8:ca:62:42:36:9b:12:40:e4:9c:67:7f:30:
d4:4c:69:0e:b1:74:d6:09:26:05:37:73:a6:b8:38:
61:6b:79:d3:1b:e5:32:4b:9e:10:aa:10:bf:16:26:
9c:83:3b:f9:fb:aa:89:b4:86:40:32:a1:7e:4b:43:
e9:56:38:a8:e0:06:5f:df:7d:44:2f:1d:a9:b8:42:
87:62:d5:ec:db:ab:69:7a:1a:a8:72:14:0f:22:ed:
f8:ee:d8:ee:97:fa:e1:d6:26:5b:26:b2:48:70:21:
4e:3f:07:e3:83:b1:3e:35:77:00:b3:dc:62:59:02:
4c:56:ca:52:60:d0:cd:38:cf:99:ef:e8:66:66:94:
a6:2e:32:9d:1b:c0:52:81:7d:21:8a:3d:b5:13:ca:
37:a3:2e:a1:d8:ca:5b:cc:fc:a5:5f:89:02:3f:e2:
8a:25:91:df:13:d9:24:74:37:83:7e:9a:2a:a7:65:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B3:47:0C:14:8D:96:C8:4E:82:C1:CC:BD:05:A4:76:04:78:8B:35
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E7NHDBSNlshOgsHMvQWkdgR4izU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:2f:27:ae:d2:ab:6b:39:da:32:b8:e2:67:a6:b0:29:aa:76:
b8:2a:4a:af:f6:97:bd:d4:53:7c:9a:08:07:40:ba:a4:c2:63:
5c:fe:f3:20:c1:c8:74:c9:33:95:4d:66:f7:fa:6c:43:fd:15:
7d:43:0c:76:d7:c9:93:f3:5d:98:e4:06:87:b5:7f:8e:ee:eb:
da:75:2c:55:78:c2:e0:36:5e:b3:4e:b6:91:d1:e4:ce:43:58:
d8:05:83:39:2b:6b:79:8d:25:d6:e3:a5:92:eb:6a:8f:31:1a:
54:57:3a:bc:c8:d0:e2:12:0c:26:ac:86:f6:bd:99:0c:f7:8b:
99:29:5b:8a:55:40:08:0f:55:71:c4:00:06:75:d2:a6:c9:aa:
7e:b9:fd:ed:7d:a6:81:a8:e7:3b:b6:88:a1:39:fe:c4:99:26:
f8:94:45:9e:2d:af:34:60:78:3e:d7:9d:2f:1b:4e:8f:c7:3b:
86:72:63:94:11:e6:13:ed:96:c2:34:50:04:c3:ef:85:8a:ce:
2b:25:56:4f:5a:f7:1d:ac:7a:e5:e8:79:0e:0b:3d:2a:4c:eb:
bf:e2:b8:da:d3:4c:10:d5:4a:ca:88:b1:d5:f2:2b:e5:41:f4:
99:4d:89:a1:74:25:2a:40:fa:4f:f4:e9:b3:85:09:e4:ab:9d:
8a:74:7a:d6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzQjM0NzBDMTQ4RDk2
Qzg0RTgyQzFDQ0JEMDVBNDc2MDQ3ODhCMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmSS1QopnIbLZv1/4LuFiKRH/i+rpAZSdV9hSh+B5wTnv9bttq
0WWtL7UnDPto5Gb/kcaGH/gkAJJBVAbX86ZT8goOO730bH7v/HFUqMpiQjabEkDk
nGd/MNRMaQ6xdNYJJgU3c6a4OGFredMb5TJLnhCqEL8WJpyDO/n7qom0hkAyoX5L
Q+lWOKjgBl/ffUQvHam4Qodi1ezbq2l6GqhyFA8i7fju2O6X+uHWJlsmskhwIU4/
B+ODsT41dwCz3GJZAkxWylJg0M04z5nv6GZmlKYuMp0bwFKBfSGKPbUTyjejLqHY
ylvM/KVfiQI/4oolkd8T2SR0N4N+miqnZdJpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUE7NHDBSNlshOgsHMvQWkdgR4izUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0U3TkhEQlNObHNoT2dzSE12
UVdrZGdSNGl6VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sOAwDQYJKoZIhvcNAQELBQADggEBAF0vJ67Sq2s52jK44memsCmqdrgqSq/2l73U
U3yaCAdAuqTCY1z+8yDByHTJM5VNZvf6bEP9FX1DDHbXyZPzXZjkBoe1f47u69p1
LFV4wuA2XrNOtpHR5M5DWNgFgzkra3mNJdbjpZLrao8xGlRXOrzI0OISDCashva9
mQz3i5kpW4pVQAgPVXHEAAZ10qbJqn65/e19poGo5zu2iKE5/sSZJviURZ4trzRg
eD7XnS8bTo/HO4ZyY5QR5hPtlsI0UATD74WKzislVk9a9x2seuXoeQ4LPSpM67/i
uNrTTBDVSsqIsdXyK+VB9JlNiaF0JSpA+k/06bOFCeSrnYp0etY=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:32 2025 by rpki-client