Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r2lT37Uw25i0oxS4sy6R2iyOq0E.roa
File: r2lT37Uw25i0oxS4sy6R2iyOq0E.roa (raw, json)
Hash identifier: xZ2BJR9NeRaIsOvknS960jL91JSIUDCVwPEioZMwWw8=
Subject key identifier: AF:69:53:DF:B5:30:DB:98:B4:A3:14:B8:B3:2E:91:DA:2C:8E:AB:41
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2A47
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r2lT37Uw25i0oxS4sy6R2iyOq0E.roa
Signing time: Fri 01 Sep 2023 10:07:42 +0000
ROA not before: Fri 01 Sep 2023 10:07:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.177.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10823 (0x2a47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:07:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AF6953DFB530DB98B4A314B8B32E91DA2C8EAB41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:ce:96:c2:27:5b:0d:a8:f2:1e:c5:ea:c1:
4a:c6:25:9d:f3:e0:e8:cc:93:61:7e:63:85:05:77:
ef:4d:e9:e4:c1:d2:83:a6:b0:a9:e6:e4:ce:f7:5d:
7c:ba:4d:43:24:20:64:fd:2b:53:99:c7:0c:91:77:
0a:c7:dd:f9:5a:8e:36:80:ba:43:b9:fc:e4:57:75:
15:22:d0:04:d7:89:ad:7b:88:2f:3f:01:28:8f:1b:
51:64:6b:9c:42:68:1a:b8:54:2a:d7:1e:6a:4f:f9:
51:bd:01:59:f0:34:81:7f:1e:ed:36:c2:93:20:55:
50:de:7b:fa:77:3e:14:8a:e4:0c:dc:2b:e8:7c:83:
28:0a:75:49:26:96:c6:1f:c9:f9:13:a6:e0:f9:af:
e2:79:43:22:c6:aa:c7:b7:32:b7:0f:19:14:ca:81:
de:0f:94:a2:cd:de:6e:6e:2a:ad:5f:0b:36:94:d3:
ea:fc:e7:71:9e:8f:ad:46:33:c5:62:15:a8:c1:b3:
2b:c7:78:d6:c0:b4:45:44:51:e1:2f:89:40:44:a7:
0b:99:1f:d5:e3:09:24:d9:01:db:90:1e:a4:a8:7c:
6b:b5:34:36:7b:14:d5:56:35:71:0f:93:d0:d6:35:
60:f8:6b:fb:23:de:f9:09:7f:75:dd:be:a0:16:6a:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:69:53:DF:B5:30:DB:98:B4:A3:14:B8:B3:2E:91:DA:2C:8E:AB:41
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/r2lT37Uw25i0oxS4sy6R2iyOq0E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.68.0/22
Signature Algorithm: sha256WithRSAEncryption
78:b5:eb:8b:02:0b:41:34:e1:b0:9b:65:3a:22:94:21:95:d2:
61:e3:25:f5:85:91:ff:16:c9:5e:09:2b:db:78:cc:41:b9:cc:
0a:e6:f4:a4:b5:7c:88:3f:a5:0e:86:58:17:1d:f3:4f:6a:b3:
9a:c5:79:50:49:d0:8f:f3:29:13:2c:45:2f:2a:e5:c2:e9:c4:
df:5e:7f:33:52:df:86:dc:c1:dd:42:91:d1:33:71:40:2b:4d:
97:bc:37:d3:f4:74:f5:39:e0:dc:06:50:b9:87:70:ef:b6:9e:
69:84:b1:c3:24:bb:96:89:85:ca:9f:6f:9d:81:c7:8d:46:2b:
58:b4:e2:1b:09:65:e6:bf:e4:23:0e:23:41:b2:d4:29:86:98:
8c:c7:1c:7f:2e:4c:3a:8d:1c:fb:9f:fb:85:92:fc:e3:22:c0:
44:d2:6f:fb:e8:3a:7b:b8:80:50:3e:11:af:77:33:2d:26:9e:
fb:63:af:a8:d3:b5:7c:27:ce:7a:f8:79:18:fc:9c:17:e6:8c:
9b:c1:92:ce:2c:3a:f6:f5:e0:ff:a3:b4:3e:1d:51:f9:b9:48:
2e:0c:9e:90:61:09:9e:0e:f0:c6:8c:3b:33:c2:79:0b:92:70:
cd:85:77:92:bd:9e:4f:46:a9:74:c7:d8:31:a0:c9:73:f1:a7:
fa:80:fe:ec
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKkcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA3NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFGNjk1M0RGQjUzMERC
OThCNEEzMTRCOEIzMkU5MURBMkM4RUFCNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJE86WwidbDajyHsXqwUrGJZ3z4OjMk2F+Y4UFd+9N6eTB0oOm
sKnm5M73XXy6TUMkIGT9K1OZxwyRdwrH3flajjaAukO5/ORXdRUi0ATXia17iC8/
ASiPG1Fka5xCaBq4VCrXHmpP+VG9AVnwNIF/Hu02wpMgVVDee/p3PhSK5AzcK+h8
gygKdUkmlsYfyfkTpuD5r+J5QyLGqse3MrcPGRTKgd4PlKLN3m5uKq1fCzaU0+r8
53Gej61GM8ViFajBsyvHeNbAtEVEUeEviUBEpwuZH9XjCSTZAduQHqSofGu1NDZ7
FNVWNXEPk9DWNWD4a/sj3vkJf3XdvqAWamPvAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUr2lT37Uw25i0oxS4sy6R2iyOq0EwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3IybFQzN1V3MjVpMG94UzRz
eTZSMml5T3EwRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sUQwDQYJKoZIhvcNAQELBQADggEBAHi164sCC0E04bCbZToilCGV0mHjJfWFkf8W
yV4JK9t4zEG5zArm9KS1fIg/pQ6GWBcd809qs5rFeVBJ0I/zKRMsRS8q5cLpxN9e
fzNS34bcwd1CkdEzcUArTZe8N9P0dPU54NwGULmHcO+2nmmEscMku5aJhcqfb52B
x41GK1i04hsJZea/5CMOI0Gy1CmGmIzHHH8uTDqNHPuf+4WS/OMiwETSb/voOnu4
gFA+Ea93My0mnvtjr6jTtXwnznr4eRj8nBfmjJvBks4sOvb14P+jtD4dUfm5SC4M
npBhCZ4O8MaMOzPCeQuScM2Fd5K9nk9GqXTH2DGgyXPxp/qA/uw=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:26 2024 by rpki-client on console-fra.rpki-client.org