Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j95A71Fk3vkkcQXooBr59xr5n78.roa
File: j95A71Fk3vkkcQXooBr59xr5n78.roa (raw, json)
Hash identifier: WggAsXTOp4HPf7F/5FGkT/K49K1aJF/NhFa/eFg/Cp4=
Subject key identifier: 8F:DE:40:EF:51:64:DE:F9:24:71:05:E8:A0:1A:F9:F7:1A:F9:9F:BF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 367E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j95A71Fk3vkkcQXooBr59xr5n78.roa
Signing time: Mon 10 Feb 2025 13:54:22 +0000
ROA not before: Mon 10 Feb 2025 13:54:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13950 (0x367e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8FDE40EF5164DEF9247105E8A01AF9F71AF99FBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:02:97:3d:19:1f:2d:8a:84:fb:dd:70:90:
f5:07:33:3a:b3:64:4a:30:6a:84:af:fe:e9:c3:dc:
44:a2:6b:bb:fa:a5:f0:34:39:b2:82:64:c9:68:b0:
ac:01:7f:07:74:7f:d8:5d:88:ba:12:a5:d6:01:34:
1f:49:75:03:bc:03:85:4b:6b:fa:80:f8:a8:2f:a7:
46:b0:3d:83:94:09:2e:75:ba:d8:f0:9c:0d:d3:8a:
49:1e:a3:44:68:96:15:5d:c9:e2:0c:31:8f:d1:6f:
2b:51:6c:32:de:20:83:4d:ac:0e:72:20:88:b3:12:
c0:b3:62:9f:25:2a:a3:16:e8:b9:26:fd:39:20:fb:
e1:48:df:90:dd:6b:a9:91:1f:50:75:b9:34:2e:8e:
6d:80:7d:33:ba:7e:9c:6d:b0:02:0c:1c:4f:99:35:
e6:92:cc:f4:8a:e0:4d:f1:a0:03:ac:bb:a5:ca:9e:
b5:b9:ab:b1:3f:4f:47:4c:19:ab:e4:05:74:06:d1:
f9:5c:bc:8c:c8:6c:8c:8c:25:69:56:01:21:30:a5:
37:29:ed:47:8a:0f:07:fd:25:9a:fa:f2:ff:b3:40:
81:52:77:72:77:ba:67:d2:3e:8a:32:12:34:6a:0b:
7b:3f:fd:cc:10:31:e1:f4:bb:71:d6:f0:d8:22:2f:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:DE:40:EF:51:64:DE:F9:24:71:05:E8:A0:1A:F9:F7:1A:F9:9F:BF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/j95A71Fk3vkkcQXooBr59xr5n78.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.216.0/22
Signature Algorithm: sha256WithRSAEncryption
08:cb:b8:5e:19:1c:29:e1:4d:4d:a2:58:43:da:33:f0:ea:ba:
52:07:ac:43:9c:7b:7d:fd:b3:93:fb:4d:0c:50:44:b7:80:ad:
9d:0d:df:47:0f:0b:02:a6:7a:86:03:00:4f:bd:e6:5c:30:c7:
9d:99:48:4e:cb:c4:11:59:40:db:b5:81:85:20:0a:8c:bd:f1:
ec:64:09:78:dc:bc:3d:5e:77:45:84:56:64:e5:e4:73:08:2a:
2a:6f:d9:1d:f2:96:67:b0:1c:54:13:80:f5:8c:5b:5f:07:5a:
8c:1a:4d:4e:4b:3b:04:4f:b6:a2:2b:a2:f1:38:5c:03:15:4b:
50:2b:c9:8e:0f:85:cf:8d:ca:d5:96:07:c6:f9:f3:55:87:c3:
d7:54:53:a9:74:17:75:66:dd:45:60:8d:5a:14:db:92:50:6d:
76:26:df:0c:8c:8e:2e:61:46:e8:17:07:34:3a:f1:9e:23:a0:
46:7e:d7:bc:5a:e3:99:3e:77:d3:77:70:7c:d5:4a:42:42:97:
4f:f0:19:f5:e1:90:14:5b:8d:65:b6:7a:59:fe:15:72:7d:8c:
f6:40:a3:f1:6e:6f:42:91:5f:74:76:90:42:85:75:41:79:13:
fb:74:e3:31:4a:cd:bd:63:aa:65:8f:ba:77:2d:53:e2:5a:cd:
bf:39:53:30
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0MjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhGREU0MEVGNTE2NERF
RjkyNDcxMDVFOEEwMUFGOUY3MUFGOTlGQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZ5AKXPRkfLYqE+91wkPUHMzqzZEowaoSv/unD3ESia7v6pfA0
ObKCZMlosKwBfwd0f9hdiLoSpdYBNB9JdQO8A4VLa/qA+Kgvp0awPYOUCS51utjw
nA3Tikkeo0RolhVdyeIMMY/RbytRbDLeIINNrA5yIIizEsCzYp8lKqMW6Lkm/Tkg
++FI35Dda6mRH1B1uTQujm2AfTO6fpxtsAIMHE+ZNeaSzPSK4E3xoAOsu6XKnrW5
q7E/T0dMGavkBXQG0flcvIzIbIyMJWlWASEwpTcp7UeKDwf9JZr68v+zQIFSd3J3
umfSPooyEjRqC3s//cwQMeH0u3HW8NgiL55rAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUj95A71Fk3vkkcQXooBr59xr5n78wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2o5NUE3MUZrM3Zra2NRWG9v
QnI1OXhyNW43OC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sdgwDQYJKoZIhvcNAQELBQADggEBAAjLuF4ZHCnhTU2iWEPaM/DqulIHrEOce339
s5P7TQxQRLeArZ0N30cPCwKmeoYDAE+95lwwx52ZSE7LxBFZQNu1gYUgCoy98exk
CXjcvD1ed0WEVmTl5HMIKipv2R3ylmewHFQTgPWMW18HWowaTU5LOwRPtqIrovE4
XAMVS1AryY4Phc+NytWWB8b581WHw9dUU6l0F3Vm3UVgjVoU25JQbXYm3wyMji5h
RugXBzQ68Z4joEZ+17xa45k+d9N3cHzVSkJCl0/wGfXhkBRbjWW2eln+FXJ9jPZA
o/Fub0KRX3R2kEKFdUF5E/t04zFKzb1jqmWPunctU+Jazb85UzA=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:49 2025 by rpki-client