Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R-PQNvaZRYwYVp2y3NzPn_QuPMQ.roa
File: R-PQNvaZRYwYVp2y3NzPn_QuPMQ.roa (raw, json)
Hash identifier: I/BRrmiIXYHJsUmMxJnETn6DIkDhs/bHtKgcMc2yaNo=
Subject key identifier: 47:E3:D0:36:F6:99:45:8C:18:56:9D:B2:DC:DC:CF:9F:F4:2E:3C:C4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33E3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R-PQNvaZRYwYVp2y3NzPn_QuPMQ.roa
Signing time: Mon 10 Feb 2025 13:51:52 +0000
ROA not before: Mon 10 Feb 2025 13:51:52 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.0.0/15 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13283 (0x33e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:52 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=47E3D036F699458C18569DB2DCDCCF9FF42E3CC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:59:9b:a8:c9:ab:38:00:39:c0:4b:9a:c5:
62:b4:e6:ba:ee:c6:48:50:ef:9d:3a:a4:5f:fc:fe:
6d:31:88:75:c3:7c:b9:7b:b3:e1:12:3d:84:ca:e7:
9c:6b:b0:99:9a:2a:11:2e:61:e1:11:7c:b0:c5:36:
12:aa:5d:2b:d8:41:0e:fc:db:07:6d:35:5c:05:fb:
b7:21:fd:06:2a:6f:15:5d:22:74:71:c8:c8:a1:76:
9a:bb:c8:40:20:48:a1:07:16:d3:61:1c:7e:e3:22:
2c:88:cd:5c:99:74:56:3d:28:cb:2d:fb:6c:71:c0:
0e:12:29:0a:03:ab:7e:a6:6c:16:bc:cd:f7:4d:d2:
9f:65:b8:f5:f7:21:5d:7d:91:ec:60:38:31:61:cf:
db:55:b4:64:84:54:4a:fe:1e:95:71:50:61:06:98:
43:56:4e:4a:b8:5f:11:1c:22:90:72:63:3a:20:a9:
96:e9:82:4a:4c:e2:20:e1:31:fd:c4:8b:73:9d:81:
d8:09:b1:34:9c:c4:a6:85:f1:d5:23:ce:fa:77:8b:
d7:d3:72:fb:b1:76:8f:11:44:ea:54:e9:94:d8:bd:
06:62:5c:bf:be:c7:43:ee:d1:1c:cc:51:12:b4:5d:
3d:cd:80:64:1f:fb:bf:2d:8c:df:13:d1:21:69:af:
0c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E3:D0:36:F6:99:45:8C:18:56:9D:B2:DC:DC:CF:9F:F4:2E:3C:C4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/R-PQNvaZRYwYVp2y3NzPn_QuPMQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0c:69:55:3e:b7:e0:3a:07:b6:61:ac:71:01:7b:86:d0:1e:b7:
3d:51:db:27:43:e5:4e:b5:04:80:05:f8:81:95:7f:1c:2f:f8:
96:83:43:df:bf:f9:14:b1:04:e9:2d:f5:cf:88:a8:13:24:1d:
7e:c0:5b:4d:00:0c:56:97:ba:59:71:0e:fc:12:49:90:09:c6:
5f:b0:27:d2:a3:ed:a4:92:05:be:e5:9b:b6:04:63:54:39:8d:
e2:01:21:3b:bd:ec:c1:5c:ed:18:e6:52:c7:7b:0a:3c:0a:d7:
a3:f4:16:50:5e:99:55:ae:c5:03:96:92:21:09:04:74:51:7f:
a3:8c:cf:bc:30:38:9a:b7:67:4c:13:d3:d7:48:b8:99:53:57:
93:f1:f3:16:99:1c:b8:56:bf:46:1b:d2:84:9b:6f:33:00:ac:
ef:81:c8:3f:9a:24:d2:4d:ad:1e:24:f9:e8:87:4b:03:45:33:
98:94:3c:25:7f:82:3a:4d:4e:50:70:c5:c4:6a:ef:89:ed:59:
14:26:e9:ab:10:83:ff:a9:ee:75:45:ea:c2:aa:86:7b:cd:92:
4f:be:36:85:e3:ee:64:3f:fe:c4:53:b7:1d:de:8b:45:b6:e8:
0a:18:cc:43:8d:68:27:89:8b:0b:6e:90:fa:62:cb:f7:8f:ac:
44:20:65:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:51 2025 by rpki-client