Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g_shprK8fTbucrWeifdM1Q2WLwk.roa
File: g_shprK8fTbucrWeifdM1Q2WLwk.roa (raw, json)
Hash identifier: wgHGbLruBHDQveBsJmq+zK589WPlVh0SJ3sxqljeczY=
Subject key identifier: 83:FB:21:A6:B2:BC:7D:36:EE:72:B5:9E:89:F7:4C:D5:0D:96:2F:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3554
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g_shprK8fTbucrWeifdM1Q2WLwk.roa
Signing time: Mon 10 Feb 2025 13:53:14 +0000
ROA not before: Mon 10 Feb 2025 13:53:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13652 (0x3554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=83FB21A6B2BC7D36EE72B59E89F74CD50D962F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:86:b5:1c:4f:e1:4a:26:be:05:d3:8a:e5:
73:4c:d2:da:2e:e7:52:33:fe:17:b2:2f:ad:5f:48:
5a:a9:74:ed:77:40:aa:89:04:c7:02:ea:b6:2e:4f:
70:05:30:06:f7:b6:1f:ca:e2:ae:a1:0d:16:9e:94:
81:cc:8d:99:82:ef:d1:e1:f5:7e:db:97:6a:90:44:
7f:3f:63:3d:75:6e:91:f5:c1:e0:8c:aa:40:28:d9:
f6:7e:c8:d0:e5:99:85:f5:a7:fb:a1:68:df:57:1b:
20:52:32:d7:00:b8:73:b3:e1:2f:83:78:9a:d3:e5:
32:2d:0e:b3:a7:9a:07:40:11:89:01:1a:b1:c9:9b:
4d:ec:0c:07:03:78:8d:27:c3:4a:0d:21:7c:69:80:
6a:e3:8e:8d:19:7b:3e:bf:80:8a:b0:6e:72:18:94:
36:2a:32:c5:52:07:04:96:4b:ea:be:41:b3:fb:de:
2b:67:cf:1c:10:02:4b:c1:20:ef:53:4a:c9:b7:1a:
00:e2:9e:60:9b:b4:df:81:21:7b:62:2d:4b:95:58:
d4:48:01:44:0f:d6:1c:04:51:4b:ed:3e:04:7d:91:
1e:70:1e:7d:1f:f9:69:ef:05:93:8e:c7:2c:ea:c1:
72:ab:2c:75:30:ae:af:c5:d6:98:b1:36:91:0e:09:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:FB:21:A6:B2:BC:7D:36:EE:72:B5:9E:89:F7:4C:D5:0D:96:2F:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/g_shprK8fTbucrWeifdM1Q2WLwk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.64.0/22
Signature Algorithm: sha256WithRSAEncryption
07:d3:54:19:0b:5b:1a:96:9b:7a:42:1c:23:62:b9:ef:67:f1:
e6:75:38:93:68:62:0c:d3:a5:65:11:e1:c9:2e:9c:a4:a4:f7:
a2:bd:13:0d:bc:77:00:00:2a:11:d1:1e:5f:93:47:3f:73:62:
3f:8d:95:27:38:9d:09:5d:ec:32:4c:d6:b8:3b:49:fe:2a:24:
2c:6d:a6:6e:e7:c9:c4:45:c3:a5:8e:14:e0:fe:67:f1:ba:00:
07:94:33:bd:b1:d3:a0:b5:79:76:df:af:b8:7d:98:49:b0:15:
81:02:44:20:1a:7f:73:e2:96:a7:10:2a:c2:51:e0:35:20:eb:
2c:67:d7:c3:d0:39:c1:79:0e:6e:b0:07:8e:ff:6c:8a:ea:d9:
1d:4e:e3:0c:0b:bf:dd:df:eb:28:fa:76:7f:93:45:36:df:ab:
11:6e:c5:15:cb:67:c0:f8:5c:8f:4d:6e:a0:4c:23:8f:5f:2c:
9d:0d:2f:6e:23:93:d2:c9:af:04:0b:a9:03:7d:ab:71:3a:a8:
2b:3b:d3:bd:f5:11:9c:92:5e:6f:bf:a8:b7:15:18:60:65:b8:
10:98:b7:98:0d:24:34:36:ea:e6:e2:b0:8f:9a:82:5d:8c:23:
f9:40:fd:1a:d4:77:8d:14:b0:b6:2b:d0:ec:61:1a:0c:61:cd:
dd:60:93:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:12 2025 by rpki-client