Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bpYGzm55IHR_HFx71NhtmMkRVhY.roa
File: bpYGzm55IHR_HFx71NhtmMkRVhY.roa (raw, json)
Hash identifier: Rv9YJGzV6Sz1TI7ECfhRdMSmxc39rfrwbdesZhMFmg4=
Subject key identifier: 6E:96:06:CE:6E:79:20:74:7F:1C:5C:7B:D4:D8:6D:98:C9:11:56:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3544
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bpYGzm55IHR_HFx71NhtmMkRVhY.roa
Signing time: Mon 10 Feb 2025 13:53:10 +0000
ROA not before: Mon 10 Feb 2025 13:53:10 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.40.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13636 (0x3544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:10 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6E9606CE6E7920747F1C5C7BD4D86D98C9115616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a0:a5:03:d5:f3:78:80:51:40:9d:d7:32:d1:
3b:7e:41:5e:98:36:e0:b7:e7:20:44:b9:0c:e2:52:
ea:3b:34:8b:fd:09:fb:d3:42:34:6f:a8:73:e4:ed:
52:12:ef:15:0e:3e:d4:b0:1f:65:88:8f:c4:7c:7a:
45:e9:36:b2:e3:30:66:97:a4:db:e5:14:cb:a7:85:
cf:e0:cd:2a:8c:78:51:ce:aa:42:75:43:6c:4e:01:
7a:44:89:6d:47:a4:e3:1f:3d:f6:e0:30:97:e6:e4:
0f:73:25:30:24:f3:aa:ec:5a:ea:ce:6c:53:4b:62:
58:d1:91:de:92:b0:61:f1:2a:3b:2e:ee:19:90:35:
72:77:8b:5a:1a:14:12:d3:49:18:7b:13:02:b4:4d:
a2:ad:f8:66:6f:c8:f6:bf:53:ef:3e:ce:c9:31:a1:
bc:fe:b1:a6:12:1b:06:c7:aa:8a:58:00:19:cc:9c:
2e:e0:ac:21:ff:a3:17:85:76:ac:15:40:c3:a7:0c:
d7:11:10:b5:fa:d7:a5:89:af:09:5e:ed:fd:15:3f:
db:cf:e4:eb:33:6e:6c:a6:c9:08:e7:41:74:52:2f:
50:fd:e1:72:ab:d6:49:2d:63:e0:f3:ec:95:49:37:
aa:70:19:35:a9:54:1e:9d:0a:f8:b2:f1:6c:c4:d5:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:96:06:CE:6E:79:20:74:7F:1C:5C:7B:D4:D8:6D:98:C9:11:56:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/bpYGzm55IHR_HFx71NhtmMkRVhY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.40.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:92:4c:02:26:7b:d1:99:cb:cb:a1:a3:11:32:81:c9:bd:c4:
03:a9:ef:74:52:f1:50:cc:1d:3f:4f:0a:d0:ed:6d:26:0b:36:
58:3d:24:a8:68:c6:cf:e7:82:f3:a3:86:62:f1:5c:ef:ff:61:
5a:3b:08:2a:21:97:d5:8a:45:5a:2d:94:2c:dd:d1:f4:20:92:
5e:71:ef:0b:ee:ad:f1:9b:ab:e7:ba:52:3c:0d:71:5a:03:b8:
c9:0b:a4:1e:91:2f:99:c5:90:cb:c7:7d:b0:da:76:79:6e:fe:
f5:a5:b7:97:c6:95:11:1b:9c:15:35:c0:34:5d:d9:74:dc:b6:
41:b0:e8:5c:12:5e:04:7e:ca:17:c4:c7:ae:0b:ea:67:2d:1c:
af:56:51:45:4c:6f:ac:8d:4d:76:60:06:cd:ec:ce:74:1a:63:
16:56:d8:a7:6f:e2:b7:24:6b:85:73:ac:c1:c7:a9:58:5d:c4:
3a:61:0d:9b:23:5c:f1:38:a2:01:29:a0:0a:07:fd:7a:00:e7:
85:6d:bb:4d:d6:8d:e4:c9:53:ce:b1:2c:bb:93:75:e6:07:86:
24:48:af:be:dd:37:b8:d6:e1:42:83:0d:ff:9f:b8:2c:c8:96:
c7:c8:57:f8:85:b3:8f:91:06:a1:d1:46:b7:3f:e3:be:41:52:
7e:1a:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:15 2025 by rpki-client