Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGY3KF92aunmf9CgHNX3vJFxkCM.roa
File: kGY3KF92aunmf9CgHNX3vJFxkCM.roa (raw, json)
Hash identifier: gS8ghbVulPl7MdHgv7DHH4FSfgfm+I9slZQa8pZBbv4=
Subject key identifier: 90:66:37:28:5F:76:6A:E9:E6:7F:D0:A0:1C:D5:F7:BC:91:71:90:23
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33C2
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGY3KF92aunmf9CgHNX3vJFxkCM.roa
Signing time: Mon 10 Feb 2025 13:51:44 +0000
ROA not before: Mon 10 Feb 2025 13:51:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.47.0/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13250 (0x33c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=906637285F766AE9E67FD0A01CD5F7BC91719023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:b1:8c:e9:6a:cf:5a:0b:7d:1e:b9:6a:99:
3e:fa:7b:84:30:65:85:5c:fb:bc:50:3e:a9:95:b2:
ba:7e:41:c2:8a:e3:ba:71:27:1b:ee:a9:91:2e:52:
e4:5f:45:50:69:9d:89:d0:6f:31:10:d9:f8:16:57:
a6:c9:35:e5:75:c9:d8:1a:d0:65:9d:b2:9d:59:d5:
de:5a:2c:51:74:7b:01:c7:73:24:b5:cf:7b:4b:bd:
28:7c:7b:60:4e:43:1d:b0:a7:23:8c:78:a9:2c:6d:
23:93:04:a6:97:95:d3:7d:01:5d:c0:ae:07:d8:e5:
cf:fc:93:e8:64:03:4e:7b:8e:e4:e0:6b:0a:79:28:
6c:74:8b:37:c5:d4:e7:ea:1f:7b:ea:8b:3c:d0:66:
38:14:43:7e:7e:4d:49:f8:ed:31:3a:30:cc:e7:41:
ac:85:0c:04:01:f0:37:5c:40:f3:70:90:84:7b:6a:
3c:3c:45:56:87:f5:8d:e5:5c:60:c0:1e:e2:a1:4d:
b4:b4:b0:02:94:67:63:6a:e2:6a:98:7b:59:9a:ab:
32:07:b1:f9:16:91:07:1c:50:83:22:2d:ba:a1:bc:
a0:cd:69:3b:e6:9f:b2:69:8d:51:88:bf:e4:86:1a:
b9:c6:b5:f2:c0:ba:6c:25:3c:21:71:46:62:50:4c:
7b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:66:37:28:5F:76:6A:E9:E6:7F:D0:A0:1C:D5:F7:BC:91:71:90:23
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kGY3KF92aunmf9CgHNX3vJFxkCM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.47.0/26
Signature Algorithm: sha256WithRSAEncryption
95:d9:10:17:e6:31:12:40:05:d5:b6:0d:f8:74:62:c5:99:a2:
ff:b7:bc:54:91:d4:64:e3:59:02:38:fa:49:d2:0c:0d:c8:74:
f0:08:af:df:47:e6:90:e7:ba:dc:f7:a7:27:fe:20:38:70:a4:
e7:ea:de:21:9e:db:1e:48:89:e2:c1:d0:3f:9f:ea:2c:63:5e:
bc:46:d0:ae:e5:4a:08:5d:10:3b:d5:72:b8:23:b0:a9:ad:f3:
9b:a9:19:e2:0a:53:69:56:f7:9f:bb:22:62:1f:0c:33:ea:d9:
f6:9e:ec:1d:b6:5a:cb:ad:a7:07:a1:81:75:86:71:af:73:29:
e0:71:52:c1:61:28:95:d3:52:3e:cd:2d:ad:c1:8f:d6:31:ac:
fb:eb:ca:30:42:86:36:b2:8b:f3:22:0e:0a:1a:15:d6:e1:ae:
f0:3e:c0:59:a9:89:48:b5:82:49:08:c3:7f:e2:89:1b:3f:b7:
4b:40:b5:1b:77:08:d1:5a:dc:dc:93:fb:c2:3d:a8:3b:07:3e:
5b:61:83:b9:0e:c8:1e:1a:ad:35:2c:9e:c4:24:3e:67:c5:f5:
e7:2c:32:af:fe:d3:49:7d:a1:49:4f:36:ae:21:74:c4:a6:f2:
b9:a6:8c:b3:6a:f8:af:e4:3f:c7:56:65:2d:f5:f4:b6:3a:b3:
c8:b9:ef:97
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICM8IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxNDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwNjYzNzI4NUY3NjZB
RTlFNjdGRDBBMDFDRDVGN0JDOTE3MTkwMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClpbGM6WrPWgt9HrlqmT76e4QwZYVc+7xQPqmVsrp+QcKK47px
JxvuqZEuUuRfRVBpnYnQbzEQ2fgWV6bJNeV1ydga0GWdsp1Z1d5aLFF0ewHHcyS1
z3tLvSh8e2BOQx2wpyOMeKksbSOTBKaXldN9AV3ArgfY5c/8k+hkA057juTgawp5
KGx0izfF1OfqH3vqizzQZjgUQ35+TUn47TE6MMznQayFDAQB8DdcQPNwkIR7ajw8
RVaH9Y3lXGDAHuKhTbS0sAKUZ2Nq4mqYe1maqzIHsfkWkQccUIMiLbqhvKDNaTvm
n7JpjVGIv+SGGrnGtfLAumwlPCFxRmJQTHtLAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUkGY3KF92aunmf9CgHNX3vJFxkCMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tHWTNLRjkyYXVubWY5Q2dI
TlgzdkpGeGtDTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQa0
sS8AMA0GCSqGSIb3DQEBCwUAA4IBAQCV2RAX5jESQAXVtg34dGLFmaL/t7xUkdRk
41kCOPpJ0gwNyHTwCK/fR+aQ57rc96cn/iA4cKTn6t4hntseSIniwdA/n+osY168
RtCu5UoIXRA71XK4I7CprfObqRniClNpVvefuyJiHwwz6tn2nuwdtlrLracHoYF1
hnGvcyngcVLBYSiV01I+zS2twY/WMaz768owQoY2sovzIg4KGhXW4a7wPsBZqYlI
tYJJCMN/4okbP7dLQLUbdwjRWtzck/vCPag7Bz5bYYO5DsgeGq01LJ7EJD5nxfXn
LDKv/tNJfaFJTzauIXTEpvK5poyzaviv5D/HVmUt9fS2OrPIue+X
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:36 2025 by rpki-client