Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yRTeqW3mP_uI23pqmK3R7yghgSo.roa
File: yRTeqW3mP_uI23pqmK3R7yghgSo.roa (raw, json)
Hash identifier: tIW/eBr5CYexjB2uvGe+Ud0lLieeg9gmQ5Lmjb7xs5c=
Subject key identifier: C9:14:DE:A9:6D:E6:3F:FB:88:DB:7A:6A:98:AD:D1:EF:28:21:81:2A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 27E7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yRTeqW3mP_uI23pqmK3R7yghgSo.roa
Signing time: Fri 01 Sep 2023 10:04:42 +0000
ROA not before: Fri 01 Sep 2023 10:04:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 180.176.208.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10215 (0x27e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C914DEA96DE63FFB88DB7A6A98ADD1EF2821812A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:df:5f:d3:84:bc:ef:fa:dc:b6:3e:3c:19:b6:
a3:54:04:db:79:c9:90:5b:45:51:f5:35:07:14:fc:
a0:36:5d:04:fd:fa:a8:59:0a:74:97:28:4f:20:a1:
f7:33:cb:e6:0c:c8:95:bf:74:27:0e:7e:66:60:42:
6a:5f:f1:8c:d8:1a:e8:d7:75:6a:7d:ca:55:0d:f0:
20:c2:ca:03:27:85:f9:03:be:55:fd:f0:06:77:71:
d0:c9:1d:e8:b7:f1:32:36:2c:1e:fa:a7:d7:d7:a1:
15:27:52:fe:58:01:05:d7:6f:4a:62:ef:82:7b:3d:
62:21:79:30:67:ff:6b:92:4a:bb:0d:d0:af:57:0e:
e1:9c:80:a4:f0:1e:2c:54:c6:96:c2:d6:8a:bc:24:
37:0b:fb:ec:78:7f:c3:60:03:99:c7:e8:6c:a1:f6:
f6:86:51:f7:a6:bb:cf:3b:25:e0:1a:da:85:c2:25:
f2:1c:99:ed:d0:7d:7d:4c:0c:e3:9a:50:3e:a6:ab:
d4:5a:26:ef:a3:4e:8d:4d:4e:35:ff:75:db:4a:dc:
9c:6e:18:f9:a7:30:c3:02:70:27:d7:ae:53:6b:3b:
6b:71:79:bf:77:7a:d7:8c:0b:12:0e:48:3c:f4:aa:
f3:89:4b:a0:dc:5e:8e:a7:ee:44:12:af:99:e2:d3:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:14:DE:A9:6D:E6:3F:FB:88:DB:7A:6A:98:AD:D1:EF:28:21:81:2A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yRTeqW3mP_uI23pqmK3R7yghgSo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.208.0/21
Signature Algorithm: sha256WithRSAEncryption
01:8d:84:06:f8:f6:8b:e8:82:4a:72:b1:33:ae:b2:30:a1:44:
26:e0:b4:3c:45:67:1e:04:05:68:37:d0:71:fc:19:bd:e1:01:
e9:74:59:5c:ba:0f:00:33:ec:1b:f3:51:7f:85:61:05:73:6d:
1c:78:d9:a2:f8:f2:8c:1d:53:f3:2d:19:4b:95:4c:3f:f7:71:
b5:43:9c:14:69:f6:a9:31:51:3f:cd:04:4d:b6:e0:50:36:1d:
99:b8:bf:a1:dd:b9:1d:03:e9:fc:43:93:b8:0f:f6:9c:f9:0f:
bb:75:64:78:21:22:34:f2:a6:08:8d:5f:a7:cc:61:30:0d:11:
0d:31:5e:da:93:4e:da:44:3b:4a:e4:e4:3e:c2:da:a2:c6:b7:
ec:43:8e:32:44:18:45:f9:18:08:e9:27:10:84:55:c1:83:16:
c4:1d:db:c3:d6:65:58:28:7a:8e:55:25:36:ca:f1:72:89:77:
a2:b8:5d:42:3d:67:a8:9b:d2:0c:ab:28:9f:af:45:5d:f1:51:
8b:fc:81:00:9a:5f:c3:d4:d4:9b:a0:2a:49:53:a1:8c:6d:a3:
46:41:ae:2c:2c:4a:2b:d3:0c:ea:ee:a7:6c:de:0b:4b:64:ca:
f4:b1:12:c1:21:06:af:bb:9f:32:08:3b:90:08:79:36:a5:49:
ae:f1:0e:c4
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICJ+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA0NDJaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEM5MTRERUE5NkRFNjNG
RkI4OERCN0E2QTk4QUREMUVGMjgyMTgxMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDj31/ThLzv+ty2PjwZtqNUBNt5yZBbRVH1NQcU/KA2XQT9+qhZ
CnSXKE8gofczy+YMyJW/dCcOfmZgQmpf8YzYGujXdWp9ylUN8CDCygMnhfkDvlX9
8AZ3cdDJHei38TI2LB76p9fXoRUnUv5YAQXXb0pi74J7PWIheTBn/2uSSrsN0K9X
DuGcgKTwHixUxpbC1oq8JDcL++x4f8NgA5nH6Gyh9vaGUfemu887JeAa2oXCJfIc
me3QfX1MDOOaUD6mq9RaJu+jTo1NTjX/ddtK3JxuGPmnMMMCcCfXrlNrO2txeb93
eteMCxIOSDz0qvOJS6DcXo6n7kQSr5ni0xdtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyRTeqW3mP/uI23pqmK3R7yghgSowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lSVGVxVzNtUF91STIzcHFt
SzNSN3lnaGdTby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0
sNAwDQYJKoZIhvcNAQELBQADggEBAAGNhAb49ovogkpysTOusjChRCbgtDxFZx4E
BWg30HH8Gb3hAel0WVy6DwAz7BvzUX+FYQVzbRx42aL48owdU/MtGUuVTD/3cbVD
nBRp9qkxUT/NBE224FA2HZm4v6HduR0D6fxDk7gP9pz5D7t1ZHghIjTypgiNX6fM
YTANEQ0xXtqTTtpEO0rk5D7C2qLGt+xDjjJEGEX5GAjpJxCEVcGDFsQd28PWZVgo
eo5VJTbK8XKJd6K4XUI9Z6ib0gyrKJ+vRV3xUYv8gQCaX8PU1JugKklToYxto0ZB
riwsSivTDOrup2zeC0tkyvSxEsEhBq+7nzIIO5AIeTalSa7xDsQ=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:27 2024 by rpki-client on console-fra.rpki-client.org