Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5ykJgd1kPOuONK7CJBueW_EwlM.roa
File: S5ykJgd1kPOuONK7CJBueW_EwlM.roa (raw, json)
Hash identifier: tLcKyJd26avu5U5+tZqD3G2D5XKTAM2mEKveZ8XQLP0=
Subject key identifier: 4B:9C:A4:26:07:75:90:F3:AE:38:D2:BB:08:90:6E:79:6F:C4:C2:53
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3558
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5ykJgd1kPOuONK7CJBueW_EwlM.roa
Signing time: Mon 10 Feb 2025 13:53:15 +0000
ROA not before: Mon 10 Feb 2025 13:53:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.228.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13656 (0x3558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4B9CA426077590F3AE38D2BB08906E796FC4C253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:33:03:3b:1c:e7:a8:41:de:b8:4c:92:12:4a:
8a:7d:cc:8f:e9:b1:08:72:53:8d:29:32:14:55:2b:
f8:89:d8:97:09:0b:b0:b7:d4:c2:7a:cb:ff:11:99:
13:88:40:eb:75:da:d3:21:8a:13:6e:06:4f:a8:da:
34:44:99:8d:42:7d:44:ce:ae:bd:99:81:b7:07:a1:
fb:89:84:7f:94:b0:ae:6e:b0:06:eb:85:d0:3a:cb:
99:d3:b9:73:1a:fe:0e:68:1b:8c:28:09:75:fb:7a:
25:61:2d:6e:c7:e9:38:a7:b0:d3:7f:bf:b8:52:55:
b8:ae:50:1a:0a:43:20:a4:d3:6e:9a:05:0d:ea:d3:
34:37:65:dd:77:50:8d:6b:3c:d7:9d:97:37:ef:2c:
10:c2:6a:7d:3a:ac:a5:53:45:85:59:77:ca:0f:9d:
29:ef:75:2a:6f:90:d8:36:31:11:4d:55:c4:18:21:
bb:7b:cf:29:6f:14:88:dc:e5:37:db:66:77:03:6e:
d4:a2:e9:f9:bb:31:80:17:01:ea:e8:1e:54:98:40:
92:2c:89:bc:21:04:ac:46:b1:5f:3c:93:c6:d4:7b:
b4:fc:8e:65:8e:06:b5:ee:4f:88:4a:0a:5b:fe:38:
09:56:5b:d4:05:1f:12:c6:78:ba:69:b3:93:4a:e8:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9C:A4:26:07:75:90:F3:AE:38:D2:BB:08:90:6E:79:6F:C4:C2:53
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/S5ykJgd1kPOuONK7CJBueW_EwlM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.228.0/22
Signature Algorithm: sha256WithRSAEncryption
42:83:f0:b5:e3:e1:6f:3d:ae:ad:d3:fb:f9:89:e7:bf:26:87:
fc:15:68:d5:0f:b2:23:00:de:ff:a7:85:61:82:ab:92:3d:6b:
d2:52:a5:9f:27:a6:ea:23:72:88:cf:c0:95:92:56:1e:35:d2:
6e:98:36:96:65:f8:64:dc:b4:0d:1c:37:90:05:80:da:87:f5:
4d:8c:92:36:cf:45:ed:c2:0b:c1:79:d8:dc:27:07:70:8c:46:
a3:bf:4f:1d:9b:26:42:3a:5a:d4:19:96:e6:72:89:ed:06:0e:
0e:df:0a:2b:4e:b1:c2:c4:40:0e:0f:d5:06:70:67:91:b9:d8:
bd:de:51:fb:f4:26:ed:12:d6:48:b7:f0:ae:fe:9e:f0:86:b1:
4f:cc:d6:e6:d9:32:37:18:a5:cf:cc:84:e0:10:a1:38:5c:45:
52:a8:2b:07:31:0d:31:fd:94:ed:f7:73:b3:b4:e2:e4:20:92:
9b:e1:56:00:86:ad:e6:85:96:7a:93:f7:66:93:67:d5:64:32:
e7:ad:61:eb:2e:a1:c0:9e:83:88:c8:08:d0:b1:45:79:85:bd:
36:31:50:94:36:ad:7f:b4:a5:bb:3b:d9:e1:73:fa:8c:fe:3d:
3d:6b:da:a4:5f:0a:25:87:2b:5f:b2:fa:10:68:4f:94:82:36:
6d:31:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:32 2025 by rpki-client