Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/POCLCXOhGDXRilL6E83usH2k5-g.roa
File: POCLCXOhGDXRilL6E83usH2k5-g.roa (raw, json)
Hash identifier: 2osWX66+A7pvO5orkMiZG/eXF/HF2YZQaVTnksNLUcA=
Subject key identifier: 3C:E0:8B:09:73:A1:18:35:D1:8A:52:FA:13:CD:EE:B0:7D:A4:E7:E8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3177
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/POCLCXOhGDXRilL6E83usH2k5-g.roa
Signing time: Mon 26 Aug 2024 05:30:29 +0000
ROA not before: Mon 26 Aug 2024 05:30:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.176.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12663 (0x3177)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:29 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3CE08B0973A11835D18A52FA13CDEEB07DA4E7E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ac:b5:7f:46:56:88:d1:c7:8d:06:43:7f:50:
66:33:27:7a:65:f2:84:89:2b:4f:cf:3a:6a:a2:30:
58:f5:eb:76:8e:bc:d9:66:2b:e7:53:f7:51:55:61:
0c:34:33:7c:7f:d9:5a:d7:1a:5a:3c:3e:a0:da:c1:
24:06:eb:50:9c:79:63:dd:2a:af:30:63:58:33:4c:
4f:bb:0f:cd:ce:f4:a1:d7:d8:bd:9b:c4:b7:21:88:
bd:8d:c6:93:6a:5f:40:88:35:8b:84:0d:df:10:4d:
08:02:96:5a:21:7f:d7:d2:e7:bf:e8:72:15:df:64:
bb:e6:c5:72:e3:22:c1:4b:82:76:b8:28:01:ce:ca:
1c:08:1e:b2:61:26:38:d2:df:ee:66:01:51:cb:72:
6b:be:0e:19:8f:6f:50:7f:4c:f9:fc:af:8f:a5:65:
85:3e:4f:01:56:8a:a8:10:b7:7e:8e:4c:37:00:10:
ff:71:29:52:bd:cf:13:22:5f:7b:6c:3d:1a:2c:e8:
c4:ae:4f:56:b2:7e:e1:3c:69:7f:fc:68:86:87:e5:
00:33:73:b7:94:29:2e:50:65:cf:03:35:66:a0:e9:
54:5d:9a:95:ed:78:88:56:38:bf:91:d6:f3:a2:10:
5b:29:2b:14:06:8f:51:78:f8:20:78:37:57:3a:24:
52:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E0:8B:09:73:A1:18:35:D1:8A:52:FA:13:CD:EE:B0:7D:A4:E7:E8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/POCLCXOhGDXRilL6E83usH2k5-g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.176.4.0/22
Signature Algorithm: sha256WithRSAEncryption
64:ac:80:21:7e:39:42:af:66:62:d9:eb:f2:1f:01:d4:85:f8:
df:29:45:ba:94:41:da:65:bc:12:a3:40:b2:de:2f:e7:da:21:
d7:38:1a:65:35:90:2d:ec:7c:49:32:83:1a:75:58:6e:e8:68:
bc:eb:e9:be:4c:b6:19:32:dd:aa:f6:7d:27:cd:6f:51:01:58:
10:73:2b:50:b2:df:92:55:b6:d8:ce:65:6d:c1:ec:66:cd:03:
6e:41:e8:89:78:eb:9e:1b:f1:a6:b8:13:13:62:ca:1b:88:65:
70:e5:f9:6a:ad:b9:52:8c:fb:c0:c3:71:3e:6a:2c:5e:1b:74:
49:8b:9d:24:13:0d:02:9e:1a:9d:30:b9:76:ee:c7:c9:c8:34:
78:c0:82:d7:1c:40:2e:fa:8b:8c:3b:2a:e7:8d:9c:e2:5d:09:
d5:a5:ec:0e:74:5d:96:d4:25:d8:22:88:73:9e:c8:eb:7a:76:
a1:65:9e:25:3c:ea:c3:c9:d2:5d:e3:b2:65:85:85:db:ea:84:
5e:57:2e:b5:fd:f0:81:bc:12:08:48:13:6f:89:cc:16:75:3e:
84:bf:e1:00:51:fe:75:00:fb:1c:e5:f9:a6:df:c0:7f:eb:fe:
13:0b:4e:15:a3:f2:91:aa:eb:6d:51:18:df:2c:a7:eb:fd:89:
07:84:2a:4b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMXcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDRTA4QjA5NzNBMTE4
MzVEMThBNTJGQTEzQ0RFRUIwN0RBNEU3RTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnrLV/RlaI0ceNBkN/UGYzJ3pl8oSJK0/POmqiMFj163aOvNlm
K+dT91FVYQw0M3x/2VrXGlo8PqDawSQG61CceWPdKq8wY1gzTE+7D83O9KHX2L2b
xLchiL2NxpNqX0CINYuEDd8QTQgCllohf9fS57/ochXfZLvmxXLjIsFLgna4KAHO
yhwIHrJhJjjS3+5mAVHLcmu+DhmPb1B/TPn8r4+lZYU+TwFWiqgQt36OTDcAEP9x
KVK9zxMiX3tsPRos6MSuT1ayfuE8aX/8aIaH5QAzc7eUKS5QZc8DNWag6VRdmpXt
eIhWOL+R1vOiEFspKxQGj1F4+CB4N1c6JFKjAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPOCLCXOhGDXRilL6E83usH2k5+gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BPQ0xDWE9oR0RYUmlsTDZF
ODN1c0gyazUtZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sAQwDQYJKoZIhvcNAQELBQADggEBAGSsgCF+OUKvZmLZ6/IfAdSF+N8pRbqUQdpl
vBKjQLLeL+faIdc4GmU1kC3sfEkygxp1WG7oaLzr6b5Mthky3ar2fSfNb1EBWBBz
K1Cy35JVttjOZW3B7GbNA25B6Il4654b8aa4ExNiyhuIZXDl+WqtuVKM+8DDcT5q
LF4bdEmLnSQTDQKeGp0wuXbux8nINHjAgtccQC76i4w7KueNnOJdCdWl7A50XZbU
JdgiiHOeyOt6dqFlniU86sPJ0l3jsmWFhdvqhF5XLrX98IG8EghIE2+JzBZ1PoS/
4QBR/nUA+xzl+abfwH/r/hMLThWj8pGq621RGN8sp+v9iQeEKks=
-----END CERTIFICATE-----
Generated at Mon Apr 28 19:18:39 2025 by rpki-client