Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/frAM-UnndO09rutwHuFvn5wyVvE.roa
File: frAM-UnndO09rutwHuFvn5wyVvE.roa (raw, json)
Hash identifier: opJ7Zvi/klyVd3OHbh1S1CQk9dab+I6AcDQ2Zlamzns=
Subject key identifier: 7E:B0:0C:F9:49:E7:74:ED:3D:AE:EB:70:1E:E1:6F:9F:9C:32:56:F1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34A6
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/frAM-UnndO09rutwHuFvn5wyVvE.roa
Signing time: Mon 10 Feb 2025 13:52:35 +0000
ROA not before: Mon 10 Feb 2025 13:52:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13478 (0x34a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=7EB00CF949E774ED3DAEEB701EE16F9F9C3256F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:be:71:23:f1:ba:c3:21:63:d6:a7:64:ff:a6:
37:8f:13:0d:69:73:fb:93:63:cc:0e:05:10:14:84:
33:13:38:d9:ec:a1:a3:b1:af:cd:6b:93:66:88:5d:
42:c2:b1:d3:8c:5f:24:0a:23:fd:73:fa:d8:2b:85:
9a:76:bc:14:00:9a:27:0d:b1:25:c1:30:eb:3c:bf:
0b:89:4c:83:45:7b:cb:1b:87:96:11:fa:25:ad:4a:
ca:00:c5:d3:59:9c:32:38:ca:af:a0:b7:65:f3:0e:
72:6b:c3:d1:21:0c:2a:b3:9b:f0:e5:35:8b:19:f5:
78:4c:ff:12:a0:71:50:df:80:96:c0:d7:24:c2:3c:
37:d8:17:c8:fd:08:da:6b:9f:9f:b9:c6:50:56:2d:
48:4a:5a:33:be:3b:88:c3:74:f2:3c:86:ad:11:88:
eb:d0:6f:0b:f0:be:ee:9e:45:91:3c:59:fa:8d:55:
7d:51:38:d8:ea:fc:9b:09:71:4e:62:ec:2a:96:93:
be:70:15:10:44:d0:98:64:2a:48:0b:eb:08:60:fa:
14:93:7e:1f:6a:69:ed:bc:11:32:d4:34:16:fe:91:
3f:11:7d:21:d6:c2:4b:d3:b4:87:f7:fa:4d:f3:c6:
66:d9:0f:c2:6c:dc:5c:d0:90:2a:b1:14:cd:5e:fa:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B0:0C:F9:49:E7:74:ED:3D:AE:EB:70:1E:E1:6F:9F:9C:32:56:F1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/frAM-UnndO09rutwHuFvn5wyVvE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:f9:21:83:55:93:c2:74:2d:3f:f8:39:bf:ad:99:b1:54:c3:
6b:2d:17:d0:67:1f:fe:c5:f0:d2:69:18:c8:06:0e:0b:a3:af:
b2:28:24:4a:5a:59:5a:58:83:d0:aa:a1:eb:4e:a5:e7:27:59:
fe:96:d8:ff:15:af:ec:d9:4f:85:9b:d3:12:cf:35:d4:03:57:
f5:7b:08:4c:73:95:94:d8:17:08:6e:7f:7c:79:b4:4a:99:97:
11:51:80:d1:2e:f5:09:b9:85:15:12:7d:7b:e8:b8:b4:5a:9e:
fd:88:89:33:b5:e6:a1:1b:f2:46:9d:68:15:ec:4c:9e:d8:b7:
84:ac:65:21:64:02:96:12:08:19:31:5e:bc:f8:d4:82:e4:f7:
04:29:08:42:cd:cc:e0:d3:49:27:30:15:78:e7:5b:bd:6a:51:
c8:e1:74:17:0c:31:7f:85:5d:e5:d7:24:7b:24:75:5c:45:d6:
a6:ee:67:a4:28:39:61:cf:43:a9:ad:97:01:ae:77:37:c9:d8:
74:bc:11:82:d5:70:6d:97:08:85:49:44:90:a5:ac:4c:92:29:
07:ce:eb:f9:bd:29:93:dc:48:aa:90:92:db:46:9f:09:66:bd:
51:2a:37:69:16:f0:9e:d7:6c:c4:32:a0:1d:c5:0e:d0:dc:a6:
ec:49:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:57 2025 by rpki-client