Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kXxmBdwU5yupealEAWoDPFIDS0o.roa
File: kXxmBdwU5yupealEAWoDPFIDS0o.roa (raw, json)
Hash identifier: mc/Bgd5Dcb2qx5YY0j6MloBSED1p8j11a3Rwb45Zfns=
Subject key identifier: 91:7C:66:05:DC:14:E7:2B:A9:79:A9:44:01:6A:03:3C:52:03:4B:4A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35CE
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kXxmBdwU5yupealEAWoDPFIDS0o.roa
Signing time: Mon 10 Feb 2025 13:53:43 +0000
ROA not before: Mon 10 Feb 2025 13:53:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13774 (0x35ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=917C6605DC14E72BA979A944016A033C52034B4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:76:98:d3:03:f1:64:13:c9:b1:0e:41:12:7d:
d4:57:91:3d:9e:96:94:bb:4d:81:ea:05:dc:0d:6e:
f7:1b:c3:80:3b:27:9a:8d:a5:16:51:3c:31:a3:56:
fd:5c:04:e2:d8:57:c3:c4:75:b1:92:69:52:eb:b9:
cf:e4:a0:19:0f:08:af:14:af:c2:a0:b0:3e:16:94:
e2:1f:1b:7b:73:5d:dd:ed:23:d5:1f:de:cd:4c:92:
00:a0:3e:6f:cc:96:fc:e6:f6:0a:94:7a:ff:aa:c0:
fb:58:f0:34:af:67:5e:e3:22:70:b7:0a:9e:15:11:
d9:b2:c0:c0:08:d0:6a:67:59:bf:1f:22:27:ce:60:
b5:3a:d1:c9:d2:b3:57:09:ae:02:78:cd:9d:ce:2c:
35:fd:0d:50:f5:b8:ef:8d:fc:00:aa:a5:29:33:02:
b8:de:f7:07:8d:5a:e0:97:df:9a:38:b0:a4:db:11:
bc:00:b1:94:55:e4:cb:2a:8c:ad:5a:e0:ff:a0:08:
d6:ec:cd:4e:43:cf:30:79:c5:87:20:a3:68:20:ef:
5f:c4:b3:40:bb:0a:c9:52:59:16:76:05:e0:50:67:
65:6c:7d:0b:ae:a8:e1:98:fc:6b:8c:45:74:60:95:
93:48:3d:07:d3:c0:bf:b5:65:9c:b8:a7:e6:e1:08:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7C:66:05:DC:14:E7:2B:A9:79:A9:44:01:6A:03:3C:52:03:4B:4A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kXxmBdwU5yupealEAWoDPFIDS0o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.72.0/22
Signature Algorithm: sha256WithRSAEncryption
54:ea:73:01:48:31:5a:da:b3:6e:7f:6c:5c:f7:41:61:55:e6:
de:5b:3f:3b:c6:9d:a1:d2:1a:05:ee:a1:9f:21:16:70:9d:99:
29:84:59:ad:7c:d8:fe:d1:32:48:90:fc:29:f0:57:b7:f1:2d:
4c:75:7b:06:53:55:5b:88:1e:b9:1c:cc:65:4a:77:56:38:51:
5b:03:0e:6f:d8:d0:95:26:13:eb:1b:c1:ce:8c:54:99:64:68:
54:54:26:09:c1:df:5e:6f:d7:de:b9:2d:f2:ad:0b:ef:4e:53:
02:33:f0:35:65:cc:29:f5:84:e2:e2:0a:21:61:e0:b3:16:a1:
42:41:09:3b:56:b5:43:f2:0a:b7:12:99:c2:34:96:80:45:28:
7a:ef:38:2c:02:e3:da:db:8d:70:ef:c5:8b:9d:e9:da:63:46:
15:ca:d0:86:63:2a:05:c5:bd:74:f7:b9:cf:c3:0e:71:96:0c:
62:c6:02:44:38:70:f5:ab:02:29:ae:49:31:af:d3:6f:f3:f5:
bd:b5:4f:2b:db:73:7c:eb:63:61:02:a8:ac:a2:0a:a9:6c:bc:
70:63:ec:be:a2:f2:4e:76:f1:c5:93:ff:d2:d1:3e:8a:c6:17:
a0:49:6d:df:19:05:da:16:34:bc:b8:c3:6e:26:8f:97:92:9d:
21:67:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:06 2025 by rpki-client