Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y0q3a1gj6l9nIka6UzDEWswgbbo.roa
File: Y0q3a1gj6l9nIka6UzDEWswgbbo.roa (raw, json)
Hash identifier: TPSlCjbQLUxFliXKOIgjuzqSas5NDywOPQtxvzFEIu4=
Subject key identifier: 63:4A:B7:6B:58:23:EA:5F:67:22:46:BA:53:30:C4:5A:CC:20:6D:BA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3408
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y0q3a1gj6l9nIka6UzDEWswgbbo.roa
Signing time: Mon 10 Feb 2025 13:52:01 +0000
ROA not before: Mon 10 Feb 2025 13:52:01 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13320 (0x3408)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:01 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=634AB76B5823EA5F672246BA5330C45ACC206DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:c1:c1:26:87:15:e6:e4:e4:58:7b:08:68:
d8:52:f8:75:7e:1d:5b:f0:78:8f:8f:c4:be:0c:bd:
81:8c:f5:2d:2f:63:cd:06:3c:bd:5b:ba:87:3c:58:
a4:ed:53:50:f7:cc:8a:c3:d6:3f:de:7d:eb:ad:b0:
f4:01:5b:b4:45:47:10:c3:83:8a:bd:0c:96:94:d4:
cc:7a:5f:e4:c2:9b:b5:23:f0:42:8f:8b:37:6b:cd:
67:6b:65:56:07:fd:dc:0e:9f:73:6f:60:f3:fb:b8:
f0:80:cd:19:9f:cf:55:1f:9d:39:46:61:14:64:54:
55:cb:64:49:d2:1a:e5:de:b5:f7:0a:73:ec:3d:54:
f4:cb:da:03:b9:d5:71:2f:e3:a9:97:da:b3:0a:b6:
85:93:db:ce:49:e1:fe:4a:fc:4b:ee:99:88:57:1a:
bf:79:b9:30:0d:00:85:e6:9d:fa:ec:5f:13:53:81:
a1:60:3d:f4:bd:92:dc:2a:67:56:d7:a9:f5:47:87:
54:10:c2:54:14:08:c9:8d:88:fb:76:f6:7e:4c:a7:
fe:e0:04:1d:05:00:d1:08:de:b7:7e:dc:b0:f4:3e:
22:68:5c:22:fc:26:4e:30:fe:65:42:16:1d:0c:b1:
33:b3:2f:12:0b:27:b2:71:7a:e4:ae:fa:db:86:5e:
88:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4A:B7:6B:58:23:EA:5F:67:22:46:BA:53:30:C4:5A:CC:20:6D:BA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y0q3a1gj6l9nIka6UzDEWswgbbo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.22.0/24
Signature Algorithm: sha256WithRSAEncryption
03:ef:30:fc:cd:02:7d:8c:9c:e5:f2:54:2d:7c:20:ed:7b:1f:
89:81:28:d7:c3:c8:2b:49:f2:85:be:03:7a:6c:d0:c7:63:17:
f6:e1:b9:0e:ec:a6:26:79:7e:34:96:9b:4d:05:6d:1c:34:8c:
91:c2:6d:ca:4a:f4:82:cd:ad:5c:0d:a3:4a:64:96:74:99:c5:
c4:b0:b7:50:6e:59:75:8c:d7:2f:bb:30:08:09:cd:b7:4d:87:
fe:92:e4:30:b0:4e:f6:ea:6b:8c:fe:38:71:96:33:02:7f:93:
a2:76:40:67:71:8d:52:20:51:b9:c6:74:4d:22:20:68:e1:b9:
54:af:b1:25:c4:45:d4:c6:f6:5f:c2:c3:b4:8e:60:5a:cb:8e:
88:19:62:33:e9:d9:c9:19:16:b3:76:b8:b8:f7:ae:8a:30:c6:
56:e2:0e:6a:c1:1e:0c:f9:ff:36:35:2e:41:2e:64:cd:3d:08:
dc:1c:43:38:01:ee:2f:5c:e7:2d:2c:45:fc:6c:37:9a:12:34:
e3:38:c7:3c:b5:35:b9:3f:c4:a4:b0:81:66:a7:bc:ca:dc:80:
ab:61:d1:83:90:b0:b1:77:ca:52:8e:26:ea:2f:b8:c0:cb:13:
d1:96:0f:0e:80:14:98:93:2b:29:9b:cb:67:62:8a:5c:96:cb:
9b:99:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:42 2025 by rpki-client