Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u9wNIr3ne1IYugbEJyKetbSPVZo.roa
File: u9wNIr3ne1IYugbEJyKetbSPVZo.roa (raw, json)
Hash identifier: 11Hvc4y6LGsmbrwZQBWW3hxpmuwCCH8JVaW7coD/xm4=
Subject key identifier: BB:DC:0D:22:BD:E7:7B:52:18:BA:06:C4:27:22:9E:B5:B4:8F:55:9A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3672
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u9wNIr3ne1IYugbEJyKetbSPVZo.roa
Signing time: Mon 10 Feb 2025 13:54:20 +0000
ROA not before: Mon 10 Feb 2025 13:54:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.72.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13938 (0x3672)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BBDC0D22BDE77B5218BA06C427229EB5B48F559A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cb:a9:8d:19:aa:34:27:d8:ff:81:43:9a:77:
7e:75:86:41:a4:c6:af:e0:99:2c:da:3d:09:c6:51:
66:f5:ed:3f:7b:b2:bd:b8:65:fc:76:cd:4d:d3:c1:
1e:19:cc:25:56:f1:9c:8f:e3:27:d2:fb:ca:8a:d8:
a4:29:54:be:67:da:a9:82:62:f1:d7:d8:98:ee:1a:
36:f0:98:aa:70:16:e2:c0:8a:6e:d9:07:03:34:cc:
81:70:11:8c:f9:94:37:ab:d2:fb:9d:c4:32:ab:c5:
f3:df:14:c4:b7:66:fe:41:59:82:85:eb:8d:a1:99:
5a:a9:a1:25:bb:85:28:54:b8:f4:26:da:77:4f:cf:
27:65:70:bc:82:2c:03:47:d9:d3:96:e2:63:3c:86:
a0:75:5c:8a:4b:c9:bd:62:36:93:77:0a:24:39:9d:
cd:47:c7:ce:f6:bd:58:dc:40:3e:1a:99:ac:90:9d:
b1:fe:c0:2e:c1:59:eb:1f:99:fd:af:43:ff:97:dc:
98:dc:00:82:6d:06:e0:17:cc:46:2d:ad:2e:25:fd:
34:65:d4:75:b6:79:14:73:7e:af:92:d3:e5:c3:c4:
c0:8f:21:5a:7b:96:7a:80:8e:db:50:6f:86:55:4e:
f4:a4:97:f8:48:e6:25:09:a7:c6:e8:5f:4b:cc:a2:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DC:0D:22:BD:E7:7B:52:18:BA:06:C4:27:22:9E:B5:B4:8F:55:9A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/u9wNIr3ne1IYugbEJyKetbSPVZo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:dd:99:e1:43:d5:8d:90:e2:6e:30:bd:9a:e5:77:78:53:be:
e0:bc:19:9e:94:b7:70:86:38:ce:87:b7:ab:25:7f:42:9b:a3:
97:f7:2b:0d:3b:c1:7a:4a:29:3b:b5:04:cc:fb:68:6d:9a:0c:
7c:49:76:70:1e:8f:4f:e3:16:b7:47:57:34:ea:51:97:58:0e:
fc:7f:12:74:57:a2:ef:90:4c:97:68:d1:6f:ee:b9:3e:81:24:
c8:59:a2:fb:a8:ce:29:8b:a1:9d:50:46:78:dd:7c:9e:bb:25:
a4:16:0d:30:e7:c9:83:59:bc:99:42:bb:e5:ad:33:19:2a:a7:
94:87:7d:d8:82:4b:b2:c0:2b:c8:7c:a7:ce:28:50:74:b6:7c:
12:b6:5d:3d:d6:c9:ed:1a:56:20:e1:fa:1c:77:5e:5a:b7:ca:
18:de:f8:53:8b:10:28:63:10:95:e4:06:ce:c3:10:0f:78:bd:
67:46:a7:c7:f4:9b:3d:28:3e:c8:73:17:92:b2:7c:37:39:a4:
8f:eb:85:7c:52:06:72:f0:f7:30:3e:85:49:7d:0c:2f:3c:66:
1d:92:ad:e0:b4:6d:f8:98:4e:9f:f9:16:45:90:73:86:83:3b:
0a:b8:0c:7f:b0:59:0a:42:ec:a0:d7:22:e9:8b:e0:29:83:2b:
72:21:61:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:11 2025 by rpki-client