Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvCeboi_4Rc1q-gBdUnvI3PbuZM.roa
File: MvCeboi_4Rc1q-gBdUnvI3PbuZM.roa (raw, json)
Hash identifier: rizvxTkcFKZsdH+Az/xuh2woulE41WMgTO6AByZa/LA=
Subject key identifier: 32:F0:9E:6E:88:BF:E1:17:35:AB:E8:01:75:49:EF:23:73:DB:B9:93
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3390
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvCeboi_4Rc1q-gBdUnvI3PbuZM.roa
Signing time: Mon 10 Feb 2025 13:51:32 +0000
ROA not before: Mon 10 Feb 2025 13:51:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13200 (0x3390)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=32F09E6E88BFE11735ABE8017549EF2373DBB993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:2c:73:cc:c0:32:79:0f:68:2b:8d:f2:94:
04:47:a1:34:8b:34:6c:54:ab:de:52:c0:72:d7:ed:
cb:64:0c:37:ae:b5:fb:7b:d1:0d:92:d5:4b:db:fa:
68:d4:2a:40:37:d8:31:57:59:b8:1d:c1:3c:c7:0f:
b4:47:a0:08:d5:ca:2a:2a:c8:22:ab:4b:a2:42:24:
9a:82:90:72:13:2d:fc:fe:ac:79:6c:b4:a6:17:73:
e9:f9:22:d8:da:dd:5c:be:f1:b4:ca:0a:8e:b5:53:
db:b5:fd:be:48:91:34:60:19:f5:3d:7f:e3:89:9f:
11:38:5d:f3:85:ef:a5:b0:94:40:f4:27:8d:79:c8:
1f:80:37:56:b5:5e:0e:c7:57:7d:93:12:5c:e7:9a:
17:9d:9e:fd:e7:ac:92:0b:a5:c1:63:f0:a0:43:e6:
da:4f:2e:e6:bf:c8:fa:36:5b:6d:d3:5e:68:a8:3d:
76:0e:92:d9:f3:63:1b:7d:b2:6f:3f:1e:32:e6:69:
e1:34:c8:c0:6d:55:81:b6:8c:e8:fc:ff:6f:22:6e:
21:21:8c:ba:23:d1:1a:3e:a2:82:0a:95:17:7c:eb:
0d:4e:7c:ac:6c:b4:70:6c:f6:a0:90:de:17:d5:09:
cd:87:16:5b:2b:5d:3c:0c:57:d7:f3:3e:a8:a2:1d:
a0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F0:9E:6E:88:BF:E1:17:35:AB:E8:01:75:49:EF:23:73:DB:B9:93
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MvCeboi_4Rc1q-gBdUnvI3PbuZM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.23.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a1:44:96:3a:41:98:40:ce:23:ea:9a:94:5c:31:a5:61:0c:
bf:ec:54:99:13:88:dd:90:84:e1:a9:de:4d:8f:62:ec:d2:97:
61:3a:d9:4e:f2:7a:76:f9:32:b7:ca:fe:94:fe:64:03:78:01:
98:2b:ea:43:7c:96:d0:cf:f3:0e:ed:23:d6:4e:f6:44:65:b4:
e6:c9:5c:1e:72:45:03:45:d4:86:b6:be:1e:b8:57:4b:5b:db:
07:32:7d:e4:05:ee:80:8c:c1:5f:cf:b4:d1:0b:69:04:b7:a5:
dc:43:f0:45:8e:1e:f7:22:83:2c:f0:04:18:62:d3:a8:a8:6b:
1a:10:4a:28:ea:f1:73:2b:a5:d3:a5:8c:a5:6f:80:a8:5f:5e:
90:63:07:e6:55:88:0f:3a:fa:b0:5b:36:6f:c2:a6:10:2a:be:
9d:70:87:a7:5e:7b:32:db:95:c6:5f:05:cc:a3:29:39:06:87:
06:31:4f:b6:15:4e:21:17:91:74:f8:85:e5:f9:13:eb:bc:ee:
18:47:8e:34:5c:1e:50:64:b5:cc:3f:64:a2:17:93:a6:4e:69:
22:6f:a2:b4:31:4d:64:bb:40:c4:ab:34:00:38:49:b4:1e:7b:
93:9c:49:82:82:30:db:df:d1:63:e6:1c:17:fa:2e:9a:4a:84:
52:78:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:41 2025 by rpki-client