Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y-ks8PPEMQcwzYvU2VlIMS8GpvE.roa
File: Y-ks8PPEMQcwzYvU2VlIMS8GpvE.roa (raw, json)
Hash identifier: vS4h7Th6kgcXQcJ3TDSoJp8beHjB4BVBs+dBmp3Yyzc=
Subject key identifier: 63:E9:2C:F0:F3:C4:31:07:30:CD:8B:D4:D9:59:48:31:2F:06:A6:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3625
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y-ks8PPEMQcwzYvU2VlIMS8GpvE.roa
Signing time: Mon 10 Feb 2025 13:54:02 +0000
ROA not before: Mon 10 Feb 2025 13:54:02 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.136.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13861 (0x3625)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:02 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=63E92CF0F3C4310730CD8BD4D95948312F06A6F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:2b:e1:b6:a8:11:a3:e2:4c:da:ff:1e:0b:
48:fc:94:f3:68:99:b0:e2:78:bc:20:99:6f:a5:5b:
09:e9:65:a9:cf:1e:fc:f8:4e:6f:9b:f2:99:4b:b2:
f6:8d:e6:6e:16:03:67:16:32:c4:a5:b7:84:96:f6:
b7:c0:d9:a2:e7:d3:52:c3:ac:16:49:91:63:63:51:
24:a0:3d:93:23:58:cb:c9:b4:d0:80:78:f7:cc:9d:
e0:c4:dd:c3:57:f8:9b:a1:e2:35:2c:85:49:52:ed:
80:4f:d1:80:9c:2b:33:b5:27:3b:fc:46:ca:c5:4f:
30:7d:f1:5d:b7:35:66:28:d9:73:0f:09:62:7b:ba:
70:9b:16:ee:76:26:35:71:75:3d:d7:c9:bb:6a:d6:
10:01:d8:a3:77:0e:da:e3:f5:90:74:5f:cf:3e:80:
d1:1e:ac:0b:d2:71:f0:75:61:19:66:81:ac:92:ea:
f4:67:8b:07:fe:cd:16:93:9e:83:a7:e8:ee:46:e4:
97:1b:48:62:77:89:5d:de:63:ea:77:5f:86:e2:02:
a7:e2:f2:73:54:5d:84:12:c2:ff:ef:7e:66:de:74:
ca:a5:6e:d2:27:fe:81:b4:9e:eb:2c:b3:5a:53:94:
3d:86:4a:68:bd:74:fa:65:d3:0a:70:22:10:17:90:
85:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:2C:F0:F3:C4:31:07:30:CD:8B:D4:D9:59:48:31:2F:06:A6:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y-ks8PPEMQcwzYvU2VlIMS8GpvE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.136.0/22
Signature Algorithm: sha256WithRSAEncryption
22:a6:87:0d:15:b6:94:0a:1c:e5:2f:95:f8:9c:6b:4a:04:18:
09:cf:23:cb:56:ca:ce:00:17:ff:9a:d8:66:0d:df:bf:b3:79:
42:fe:c1:2e:b7:87:6f:21:e4:cb:2a:a8:bb:a7:82:91:7b:4c:
4e:a3:81:9e:0f:22:13:5e:43:91:13:09:9a:ad:25:19:73:d8:
3a:7d:06:92:69:68:fc:e7:0d:32:bd:76:94:06:bc:a6:37:18:
5b:0c:ba:ef:38:87:af:03:ba:83:ed:2c:ad:32:5b:24:88:78:
50:5c:2a:46:c5:1a:83:a9:20:8b:cc:46:bd:d7:a5:d6:a4:8b:
be:76:69:f8:aa:2b:cb:3b:ab:fd:c4:33:44:4a:0d:61:80:01:
95:c4:f6:b9:11:12:ae:7a:bb:97:c4:70:7e:61:94:1d:3d:50:
73:80:28:c1:95:7a:7a:18:99:59:5c:ab:2d:74:ce:c8:f1:2e:
92:36:be:4f:8a:d3:d2:a8:f4:f4:bd:d5:a9:dd:7f:19:ff:bd:
83:c7:50:85:cf:2d:d1:e1:79:ec:3e:6f:55:5e:08:1f:b0:46:
b5:20:54:8c:64:b5:1f:4a:62:fa:18:79:6b:97:00:99:29:64:
6b:f8:4a:a6:fa:72:e1:6d:fe:ae:a8:7f:9a:95:7c:92:19:c4:
e4:74:f3:b6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNiUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0MDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzRTkyQ0YwRjNDNDMx
MDczMENEOEJENEQ5NTk0ODMxMkYwNkE2RjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkISvhtqgRo+JM2v8eC0j8lPNombDieLwgmW+lWwnpZanPHvz4
Tm+b8plLsvaN5m4WA2cWMsSlt4SW9rfA2aLn01LDrBZJkWNjUSSgPZMjWMvJtNCA
ePfMneDE3cNX+Juh4jUshUlS7YBP0YCcKzO1Jzv8RsrFTzB98V23NWYo2XMPCWJ7
unCbFu52JjVxdT3Xybtq1hAB2KN3Dtrj9ZB0X88+gNEerAvScfB1YRlmgayS6vRn
iwf+zRaTnoOn6O5G5JcbSGJ3iV3eY+p3X4biAqfi8nNUXYQSwv/vfmbedMqlbtIn
/oG0nusss1pTlD2GSmi9dPpl0wpwIhAXkIWzAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUY+ks8PPEMQcwzYvU2VlIMS8GpvEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1kta3M4UFBFTVFjd3pZdlUy
VmxJTVM4R3B2RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sYgwDQYJKoZIhvcNAQELBQADggEBACKmhw0VtpQKHOUvlfica0oEGAnPI8tWys4A
F/+a2GYN37+zeUL+wS63h28h5MsqqLungpF7TE6jgZ4PIhNeQ5ETCZqtJRlz2Dp9
BpJpaPznDTK9dpQGvKY3GFsMuu84h68DuoPtLK0yWySIeFBcKkbFGoOpIIvMRr3X
pdaki752afiqK8s7q/3EM0RKDWGAAZXE9rkREq56u5fEcH5hlB09UHOAKMGVenoY
mVlcqy10zsjxLpI2vk+K09Ko9PS91andfxn/vYPHUIXPLdHheew+b1VeCB+wRrUg
VIxktR9KYvoYeWuXAJkpZGv4Sqb6cuFt/q6of5qVfJIZxOR087Y=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:07 2025 by rpki-client