Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_hO-oZXr0lxTuxNna0xk-1N9-Vc.roa
File: _hO-oZXr0lxTuxNna0xk-1N9-Vc.roa (raw, json)
Hash identifier: Na/loD9ir9KFmXH8bAJ0MgvsOtdqLrviMR4gTO0QdQ8=
Subject key identifier: FE:13:BE:A1:95:EB:D2:5C:53:BB:13:67:6B:4C:64:FB:53:7D:F9:57
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2FEB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_hO-oZXr0lxTuxNna0xk-1N9-Vc.roa
Signing time: Mon 26 Aug 2024 05:28:59 +0000
ROA not before: Mon 26 Aug 2024 05:28:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12267 (0x2feb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:28:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FE13BEA195EBD25C53BB13676B4C64FB537DF957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:66:40:bf:cd:5c:bf:3a:20:e3:f9:88:cc:
c1:8f:55:5a:8b:b6:e9:fa:05:fd:a6:67:aa:1e:b8:
c4:ff:ae:e7:ab:30:bc:36:df:70:70:28:46:5a:6a:
ec:cd:0d:b7:b2:fd:7b:ee:82:7f:32:56:0b:8b:b4:
e1:44:f4:69:4d:a3:89:0b:ca:b8:a3:fe:ef:0b:40:
4d:ec:71:f6:24:89:4b:8f:53:53:13:31:32:44:d7:
70:5b:b0:0b:c0:1b:09:27:6b:86:89:af:ad:2b:08:
d9:84:2e:d2:a3:f7:ab:63:c8:34:9f:d8:af:bc:23:
f1:c4:44:e6:bc:86:50:81:d1:8f:8e:d3:9a:cb:af:
fd:54:32:6a:2f:cd:88:0c:9e:d3:3e:7d:ba:3c:c7:
e6:e7:a8:4f:8c:d4:6d:70:aa:21:73:2e:c7:2f:4a:
55:3c:5d:c8:d3:6c:4d:b3:29:f9:19:1d:7d:ea:ed:
19:88:89:3e:7a:16:4b:e4:43:9c:6a:92:ff:27:33:
2e:5b:95:02:e0:9a:7c:8a:eb:c5:69:7c:3a:1d:6d:
47:bf:19:c9:ea:f6:e1:84:ef:5b:7a:54:a2:3e:65:
48:da:84:7d:04:48:7e:82:19:5b:8c:4f:8f:1d:e5:
f4:2f:a1:1d:08:da:3c:5f:e9:c2:95:ac:4f:3d:60:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:13:BE:A1:95:EB:D2:5C:53:BB:13:67:6B:4C:64:FB:53:7D:F9:57
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/_hO-oZXr0lxTuxNna0xk-1N9-Vc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.28.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:23:c3:0d:f0:fd:7c:db:2e:74:f6:cb:75:9e:d2:8e:c4:78:
97:6f:90:bd:f2:72:68:78:69:30:1e:44:a5:91:7b:ec:c5:ec:
89:f8:b0:07:c5:ed:0b:56:df:d8:d6:01:76:44:bb:ca:01:2c:
ad:71:68:97:80:23:e6:94:ab:85:31:7a:aa:de:20:74:b2:e2:
9a:eb:08:60:a4:b0:7b:af:c4:d8:a6:8e:5e:7d:f5:11:9d:86:
e6:7b:a9:98:bc:f0:73:31:17:7e:80:0d:a5:9c:58:90:78:39:
9a:08:11:40:d7:49:eb:40:1d:4a:ac:c1:93:39:de:b0:e2:1b:
8c:03:13:6a:1e:15:2b:a8:b0:33:0c:e4:f7:a3:fe:4c:ce:f5:
9e:3c:db:c5:b3:53:c5:bd:44:0d:d7:9a:06:f8:57:54:9e:9e:
f9:15:11:52:f6:61:5a:e7:8d:04:4e:e0:fd:0c:b9:45:78:c6:
b2:79:a1:29:43:42:25:31:e6:2c:1e:8f:28:2f:1e:24:e2:5c:
53:8f:7b:33:2a:6b:37:85:6b:0a:d9:41:ab:80:6a:61:b2:99:
fb:03:9b:87:27:0e:e2:4d:15:0f:74:bc:61:a6:a8:2c:3a:e5:
ba:8a:86:71:a5:fb:5b:c8:cc:9a:f4:41:a9:f6:56:d8:d4:51:
f1:f1:74:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:06:43 2025 by rpki-client