Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Q_Jh10cv6RJ04mKEo8CfvDCcTU.roa
File: _Q_Jh10cv6RJ04mKEo8CfvDCcTU.roa (raw, json)
Hash identifier: SluDTesBsc2R+uBP/7DnhGa8VFx9x02A4+tyI9uARqc=
Subject key identifier: FD:0F:C9:87:5D:1C:BF:A4:49:D3:89:8A:12:8F:02:7E:F0:C2:71:35
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A71
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Q_Jh10cv6RJ04mKEo8CfvDCcTU.roa
Signing time: Fri 01 Sep 2023 10:07:54 +0000
ROA not before: Fri 01 Sep 2023 10:07:54 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.200.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10865 (0x2a71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:54 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=FD0FC9875D1CBFA449D3898A128F027EF0C27135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:fa:b6:4c:2e:f2:be:05:49:1a:92:5c:45:
e3:5c:82:78:c3:1b:eb:22:86:0d:e5:5c:4d:55:4f:
4a:7a:a8:5b:47:c6:7a:39:31:19:9e:4b:8c:4a:52:
ee:3d:34:05:04:62:06:3c:8e:9e:00:1f:9d:b3:99:
fc:7f:d0:d5:4f:8a:e8:7c:9a:91:01:27:f3:cc:68:
95:f4:57:94:a0:8e:7e:17:7d:27:b2:49:1a:b1:b9:
1a:47:f1:f4:72:bf:9c:15:4b:ad:fd:60:48:f5:0d:
d7:25:16:83:f1:93:84:77:1e:2e:45:a1:61:03:52:
d8:23:5f:43:7b:f5:ac:c2:96:b3:4a:cc:fa:81:53:
e5:6e:3d:f6:2a:5c:bf:08:ec:cc:e1:1c:2b:e5:fe:
ed:55:23:f8:49:b4:55:ce:f9:d1:a0:a4:64:71:f2:
3c:e0:5b:3d:48:9c:f4:45:20:8a:a8:c2:bc:99:d8:
bc:ed:a5:32:db:54:eb:2a:f6:f7:d3:c7:45:16:d0:
99:11:c7:23:04:d4:56:38:a5:61:53:34:f1:22:cf:
6d:9e:4a:8a:fb:ed:5a:ab:9b:0e:eb:ea:dd:e6:4f:
26:7f:3b:8e:ee:24:a6:9f:53:fb:fb:5b:09:9c:01:
d5:82:5f:df:b5:f5:c5:3a:39:95:94:52:0d:56:06:
1c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0F:C9:87:5D:1C:BF:A4:49:D3:89:8A:12:8F:02:7E:F0:C2:71:35
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_Q_Jh10cv6RJ04mKEo8CfvDCcTU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.200.0/21
Signature Algorithm: sha256WithRSAEncryption
21:67:5d:ba:df:75:79:87:10:f8:ec:36:7e:2e:1e:b6:28:e7:
7d:4c:1a:cc:fe:8e:2e:7c:55:ec:21:3b:9a:99:c3:fc:ef:bd:
c2:35:c5:68:2e:65:3e:b2:19:8a:68:f4:89:6f:c2:c2:26:e6:
46:72:0d:8c:5b:f7:d7:8d:e3:45:9a:51:80:28:65:7a:28:80:
f3:46:1d:99:50:78:21:f0:8a:eb:6d:aa:25:b0:46:b3:51:61:
85:ac:68:1e:4d:eb:bb:e2:e6:92:a4:5a:d4:15:e6:58:9a:80:
47:92:79:f2:33:9b:84:9a:b7:64:6b:42:9c:33:14:21:b5:d6:
a5:7a:9d:74:00:cb:30:66:56:10:e5:4c:7d:7d:81:e1:d9:b1:
61:d6:13:11:bd:72:f4:be:7c:bc:ff:79:39:40:05:65:32:e9:
e1:f0:17:57:30:c1:04:95:1f:5f:d2:bf:05:f2:4a:9c:90:6e:
73:fb:16:7d:11:fe:fc:d4:4c:d7:a7:3d:82:84:bb:fc:05:0d:
96:3b:56:7b:96:fc:3d:21:26:9b:4f:1b:08:b1:0c:04:cc:a5:
90:7e:90:cb:b7:fb:3e:17:51:c9:c4:1d:31:1c:b2:1a:a3:7c:
1e:fd:d7:24:e1:4c:13:76:16:34:fd:2b:0d:8f:ed:01:ad:8c:
ed:41:35:b0
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKnEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NTRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEZEMEZDOTg3NUQxQ0JG
QTQ0OUQzODk4QTEyOEYwMjdFRjBDMjcxMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyifq2TC7yvgVJGpJcReNcgnjDG+sihg3lXE1VT0p6qFtHxno5
MRmeS4xKUu49NAUEYgY8jp4AH52zmfx/0NVPiuh8mpEBJ/PMaJX0V5Sgjn4XfSey
SRqxuRpH8fRyv5wVS639YEj1DdclFoPxk4R3Hi5FoWEDUtgjX0N79azClrNKzPqB
U+VuPfYqXL8I7MzhHCvl/u1VI/hJtFXO+dGgpGRx8jzgWz1InPRFIIqowryZ2Lzt
pTLbVOsq9vfTx0UW0JkRxyME1FY4pWFTNPEiz22eSor77Vqrmw7r6t3mTyZ/O47u
JKafU/v7WwmcAdWCX9+19cU6OZWUUg1WBhxVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU/Q/Jh10cv6RJ04mKEo8CfvDCcTUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL19RX0poMTBjdjZSSjA0bUtF
bzhDZnZEQ2NUVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
scgwDQYJKoZIhvcNAQELBQADggEBACFnXbrfdXmHEPjsNn4uHrYo531MGsz+ji58
VewhO5qZw/zvvcI1xWguZT6yGYpo9IlvwsIm5kZyDYxb99eN40WaUYAoZXoogPNG
HZlQeCHwiuttqiWwRrNRYYWsaB5N67vi5pKkWtQV5liagEeSefIzm4Sat2RrQpwz
FCG11qV6nXQAyzBmVhDlTH19geHZsWHWExG9cvS+fLz/eTlABWUy6eHwF1cwwQSV
H1/SvwXySpyQbnP7Fn0R/vzUTNenPYKEu/wFDZY7VnuW/D0hJptPGwixDATMpZB+
kMu3+z4XUcnEHTEcshqjfB791yThTBN2FjT9Kw2P7QGtjO1BNbA=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:19 2024 by rpki-client on console-ams.rpki-client.org