Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sEHLaDvyWweiUKvMiIJ97aifcTs.roa
File: sEHLaDvyWweiUKvMiIJ97aifcTs.roa (raw, json)
Hash identifier: ichX82gorZA/Guil4WsSBqDvRa1BdVhyBlWt0QUxezY=
Subject key identifier: B0:41:CB:68:3B:F2:5B:07:A2:50:AB:CC:88:82:7D:ED:A8:9F:71:3B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33DC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sEHLaDvyWweiUKvMiIJ97aifcTs.roa
Signing time: Mon 10 Feb 2025 13:51:51 +0000
ROA not before: Mon 10 Feb 2025 13:51:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13276 (0x33dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B041CB683BF25B07A250ABCC88827DEDA89F713B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6f:3c:24:bd:5a:e7:76:77:7b:76:5a:13:92:
b0:56:8f:d8:5e:f3:5d:d4:b7:2a:32:d3:5f:d8:ac:
fd:7b:dc:12:6d:a9:27:cb:e7:1a:1e:9d:bb:87:f1:
5a:c6:57:35:33:10:d7:65:4d:e7:25:12:03:0e:d4:
01:3f:40:a1:92:d1:ac:3b:dc:fa:8e:92:bd:83:55:
dd:f6:89:7f:4d:43:7a:50:6d:e4:90:ee:e7:ae:9f:
2d:d9:f3:78:bf:30:f1:45:a5:69:d4:19:5e:54:21:
00:e6:87:d2:9b:e8:db:95:2f:50:e9:85:f8:44:78:
59:44:f5:a3:96:ad:9a:ad:e5:72:01:c1:ba:04:85:
0a:3c:a3:a1:8d:ba:19:44:c4:49:86:3e:75:68:5d:
25:8a:a8:6e:51:7b:74:05:df:f6:34:d2:e4:ae:43:
6a:19:dc:85:66:4a:a2:e2:dc:46:8a:21:49:53:d7:
a7:61:55:6f:fc:c4:b5:13:f6:cc:e0:88:cf:6f:3f:
d7:e3:55:a8:e5:d1:1b:74:e4:25:33:6f:c6:1d:c2:
6f:38:ac:b2:94:c8:01:5f:31:73:9b:b1:1c:06:88:
e9:ff:93:92:c3:af:45:12:b7:0e:b0:d3:20:f6:d7:
5a:48:9f:ef:13:87:24:e1:4b:36:1c:57:73:a8:21:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:41:CB:68:3B:F2:5B:07:A2:50:AB:CC:88:82:7D:ED:A8:9F:71:3B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/sEHLaDvyWweiUKvMiIJ97aifcTs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.108.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:a9:72:8e:9e:5c:82:97:1d:2d:8a:71:f3:de:ce:f2:f5:33:
01:06:64:30:17:04:94:5b:ab:24:b5:59:db:bd:84:a4:50:76:
09:69:1f:23:d6:7a:53:0a:00:7b:ab:13:c7:fd:fe:05:b5:76:
5b:6b:4c:e1:cc:bf:9a:93:a1:53:c9:c3:88:d2:e7:04:c4:0e:
cc:9b:eb:a8:56:2e:8f:a7:52:14:8b:4a:35:02:da:8e:f4:ee:
19:e0:b9:44:bb:e3:ec:ec:83:44:18:77:c6:08:ad:bd:2d:f3:
3b:ea:97:ec:7f:78:5c:c9:e0:ad:7c:3e:d2:ab:a3:a5:27:03:
77:3c:32:56:b7:c9:8d:89:db:b7:35:e5:65:9a:8b:50:44:ba:
41:7f:11:ad:f0:c9:05:fc:2b:7a:f4:b5:c0:ba:dc:d1:c3:60:
a6:73:62:47:5c:67:cf:41:78:b2:34:84:e0:e4:79:c8:5d:21:
45:08:00:8c:2e:30:c8:a2:ab:41:40:8c:35:d5:db:fc:bb:6d:
15:80:87:5e:ad:4b:31:6c:9d:9e:74:51:6e:66:33:c9:d1:b0:
ba:61:f6:91:d1:3a:e9:ba:86:1b:b3:cf:84:e6:3f:a9:ba:d3:
09:58:3e:b4:1c:d8:d1:ec:49:06:ba:c3:16:83:fe:e0:14:b1:
19:2a:cf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:23 2025 by rpki-client