Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z5iUp4I55zHRCy1XqUwBzr6cO0I.roa
File: Z5iUp4I55zHRCy1XqUwBzr6cO0I.roa (raw, json)
Hash identifier: ZobAuJ71vMRk3wesV9MxT2p8q4R44MUPNeoLMmCWENY=
Subject key identifier: 67:98:94:A7:82:39:E7:31:D1:0B:2D:57:A9:4C:01:CE:BE:9C:3B:42
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 297D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z5iUp4I55zHRCy1XqUwBzr6cO0I.roa
Signing time: Fri 01 Sep 2023 10:06:40 +0000
ROA not before: Fri 01 Sep 2023 10:06:40 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10621 (0x297d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:06:40 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=679894A78239E731D10B2D57A94C01CEBE9C3B42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:52:fa:17:91:e6:4b:b8:d3:25:4b:56:be:4b:
85:98:dc:58:8b:6e:24:d1:fc:dc:7f:fe:9a:5e:2c:
10:11:bb:86:83:d2:9a:1e:96:c7:97:05:9a:0d:45:
20:b8:e2:51:14:b3:cd:e2:6d:6a:eb:5e:9d:aa:65:
16:d1:8e:ba:c7:20:c1:e3:8f:b1:1a:03:1b:6c:45:
3d:d5:10:d1:a0:e4:d7:4d:0f:b4:4e:99:52:16:50:
15:4f:73:24:9f:4c:76:52:32:e2:5a:02:b0:0a:07:
f3:be:e4:61:4c:3a:18:fe:3c:72:ed:ed:ad:c8:5a:
41:22:35:86:0b:cc:31:16:58:52:a5:2a:a0:f4:6c:
a1:83:73:ce:26:e8:c8:78:e6:45:b1:6f:58:5a:91:
2b:c6:37:b4:33:e2:50:67:4e:2a:53:9e:d8:2c:93:
f9:6f:c6:4d:84:39:80:ef:42:ba:4c:90:c0:71:06:
40:f7:82:fb:87:10:ec:65:06:3a:82:97:50:27:bb:
fe:61:3d:ec:c1:1f:d0:19:f2:e8:63:80:a9:30:1b:
aa:15:a3:40:2f:89:62:1c:4a:03:4e:0a:71:45:97:
9d:51:75:60:a9:48:cf:68:50:92:7f:42:71:dd:f5:
bf:cd:3a:00:43:df:62:df:83:a3:f0:cd:ee:e6:23:
fd:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:98:94:A7:82:39:E7:31:D1:0B:2D:57:A9:4C:01:CE:BE:9C:3B:42
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Z5iUp4I55zHRCy1XqUwBzr6cO0I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.152.0/21
Signature Algorithm: sha256WithRSAEncryption
70:ba:ef:d4:dd:19:ff:d2:d8:a5:a5:d7:d0:f6:60:02:9f:76:
b5:03:b8:5e:d3:75:ae:a6:aa:14:b9:32:a8:73:a2:e5:69:41:
84:7c:f1:4e:c1:60:70:d8:f2:85:9c:e4:a2:0d:40:f6:15:6a:
2e:e5:ba:75:ea:a4:9e:67:d0:da:89:3c:3e:74:0c:c3:5b:18:
03:ae:5e:3d:4f:34:cd:0b:1e:c4:09:84:04:09:8b:b5:69:e6:
de:ac:71:07:b5:9b:1c:5a:56:70:1c:eb:56:51:ba:90:45:f0:
c0:d7:0e:d7:27:dd:76:1d:8d:46:5c:36:42:d8:63:bc:5e:5f:
8b:3f:92:e8:1d:4e:98:cf:5e:24:8f:b7:b1:19:9a:f9:84:11:
54:2a:93:05:03:00:fe:89:6f:0f:5c:41:15:60:d8:8f:0d:1c:
49:53:b3:2f:e1:83:7b:b3:aa:56:c3:12:50:73:0d:47:88:41:
35:9e:f6:e3:34:aa:28:06:38:df:9a:a6:85:e0:32:9a:27:05:
75:42:e8:1d:b0:48:ed:43:da:ef:5f:a9:e5:3a:79:bf:73:5f:
1b:d0:d3:23:26:0b:16:ca:50:93:ce:6d:2c:c0:f3:3b:a6:e1:
30:f9:e4:a2:87:ba:3f:03:9c:73:73:49:65:86:db:02:a9:ff:
af:1e:4c:f9
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKX0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA2NDBaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDY3OTg5NEE3ODIzOUU3
MzFEMTBCMkQ1N0E5NEMwMUNFQkU5QzNCNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnUvoXkeZLuNMlS1a+S4WY3FiLbiTR/Nx//ppeLBARu4aD0poe
lseXBZoNRSC44lEUs83ibWrrXp2qZRbRjrrHIMHjj7EaAxtsRT3VENGg5NdND7RO
mVIWUBVPcySfTHZSMuJaArAKB/O+5GFMOhj+PHLt7a3IWkEiNYYLzDEWWFKlKqD0
bKGDc84m6Mh45kWxb1hakSvGN7Qz4lBnTipTntgsk/lvxk2EOYDvQrpMkMBxBkD3
gvuHEOxlBjqCl1Anu/5hPezBH9AZ8uhjgKkwG6oVo0AviWIcSgNOCnFFl51RdWCp
SM9oUJJ/QnHd9b/NOgBD32Lfg6Pwze7mI/29AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUZ5iUp4I55zHRCy1XqUwBzr6cO0IwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1o1aVVwNEk1NXpIUkN5MVhx
VXdCenI2Y08wSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sJgwDQYJKoZIhvcNAQELBQADggEBAHC679TdGf/S2KWl19D2YAKfdrUDuF7Tda6m
qhS5MqhzouVpQYR88U7BYHDY8oWc5KINQPYVai7lunXqpJ5n0NqJPD50DMNbGAOu
Xj1PNM0LHsQJhAQJi7Vp5t6scQe1mxxaVnAc61ZRupBF8MDXDtcn3XYdjUZcNkLY
Y7xeX4s/kugdTpjPXiSPt7EZmvmEEVQqkwUDAP6Jbw9cQRVg2I8NHElTsy/hg3uz
qlbDElBzDUeIQTWe9uM0qigGON+apoXgMponBXVC6B2wSO1D2u9fqeU6eb9zXxvQ
0yMmCxbKUJPObSzA8zum4TD55KKHuj8DnHNzSWWG2wKp/68eTPk=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:25 2024 by rpki-client on console-fra.rpki-client.org