Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a02M0VtLqhBhqD3Uek2A3cWOU_M.roa
File: a02M0VtLqhBhqD3Uek2A3cWOU_M.roa (raw, json)
Hash identifier: oEDbCHWhUfZYU2/sStRFvK6v9lMff2hs62AA2xWokVs=
Subject key identifier: 6B:4D:8C:D1:5B:4B:AA:10:61:A8:3D:D4:7A:4D:80:DD:C5:8E:53:F3
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 32DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a02M0VtLqhBhqD3Uek2A3cWOU_M.roa
Signing time: Mon 26 Aug 2024 05:32:05 +0000
ROA not before: Mon 26 Aug 2024 05:32:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.172.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13019 (0x32db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:32:05 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=6B4D8CD15B4BAA1061A83DD47A4D80DDC58E53F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ac:84:2d:71:91:9d:30:59:cf:20:4f:57:61:
08:44:f3:3a:4f:0f:4a:c9:ee:c4:b4:7f:1f:26:0f:
0d:8e:d7:52:0e:8f:14:45:53:4c:66:aa:f9:8b:68:
d4:e4:5a:c4:13:77:d8:a2:b5:7c:e2:a3:d2:6d:3d:
fe:e9:6e:8e:1b:47:52:11:9d:63:bd:d8:9c:44:ed:
80:a3:ca:5b:27:72:40:93:88:21:2c:f1:48:60:38:
b5:48:84:d2:dc:26:2c:1b:f9:e9:6a:3e:dc:ea:44:
91:15:ea:a0:01:07:0f:df:56:10:c0:2f:b9:0c:d2:
33:9c:96:73:52:b8:d7:13:7c:e9:e2:3f:52:02:8f:
4b:2d:87:1c:38:ef:79:31:47:fe:09:0b:a7:26:50:
b4:ba:32:c1:f2:09:ba:56:19:29:08:23:f6:e9:8c:
fa:f3:a1:e1:76:83:af:58:1d:f7:c0:2a:7c:71:5c:
8b:35:38:6a:d9:3a:67:ac:19:f4:65:f3:ef:65:c0:
1c:eb:30:83:35:f8:48:d3:d5:20:c2:3b:77:d9:a1:
a7:35:71:db:55:fa:c4:ec:cf:c7:b0:00:80:a8:9c:
22:e4:77:8f:4c:59:f5:45:13:3e:44:98:1a:0d:94:
3e:eb:30:86:58:3c:f9:40:88:73:43:b1:24:31:3e:
d3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:8C:D1:5B:4B:AA:10:61:A8:3D:D4:7A:4D:80:DD:C5:8E:53:F3
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/a02M0VtLqhBhqD3Uek2A3cWOU_M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.172.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:f3:a9:af:aa:f6:bf:4e:2d:94:bb:48:a8:82:c1:c6:91:d2:
6a:02:2f:97:73:fe:d7:dd:21:ad:fa:3e:2a:b9:d5:c7:8a:31:
ce:dd:ab:d6:dc:1c:6f:0b:3f:2d:2f:88:a7:04:4e:20:49:09:
be:63:15:47:78:62:09:a8:c0:e6:b5:61:a8:a4:7b:de:d9:b8:
e7:74:e9:59:d9:5f:58:43:cb:7f:57:7e:d1:e2:d3:01:91:6e:
6a:bc:f7:76:64:97:43:0c:97:86:08:64:ad:81:8c:9b:a7:53:
2c:02:3b:8d:4a:b3:7c:4f:20:4f:b7:3f:ee:d2:23:f8:64:0a:
35:be:5a:02:97:8b:25:2b:78:05:6e:d5:71:76:5f:54:ec:7d:
e2:0a:39:db:43:a0:8e:b0:c4:e2:c4:5f:b7:90:82:ca:84:5c:
dc:9f:95:e3:3f:c5:de:2d:b8:3a:0e:43:05:eb:13:21:c9:a7:
01:a3:f4:dc:3d:5a:5b:fc:58:19:a9:48:63:3d:35:72:83:c9:
29:e8:a3:93:c0:b1:3c:f1:ed:a4:7a:fe:e7:1f:8e:37:de:2c:
fa:ee:0c:0b:47:3f:a5:03:8d:8e:69:a0:e5:d0:42:4d:98:83:
f0:e6:24:a6:90:30:ae:31:6c:b9:bb:bd:26:3a:86:b0:cc:d7:
72:0c:41:29
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMyMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDZCNEQ4Q0QxNUI0QkFB
MTA2MUE4M0RENDdBNEQ4MEREQzU4RTUzRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgrIQtcZGdMFnPIE9XYQhE8zpPD0rJ7sS0fx8mDw2O11IOjxRF
U0xmqvmLaNTkWsQTd9iitXzio9JtPf7pbo4bR1IRnWO92JxE7YCjylsnckCTiCEs
8UhgOLVIhNLcJiwb+elqPtzqRJEV6qABBw/fVhDAL7kM0jOclnNSuNcTfOniP1IC
j0sthxw473kxR/4JC6cmULS6MsHyCbpWGSkII/bpjPrzoeF2g69YHffAKnxxXIs1
OGrZOmesGfRl8+9lwBzrMIM1+EjT1SDCO3fZoac1cdtV+sTsz8ewAIConCLkd49M
WfVFEz5EmBoNlD7rMIZYPPlAiHNDsSQxPtP5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUa02M0VtLqhBhqD3Uek2A3cWOU/MwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2EwMk0wVnRMcWhCaHFEM1Vl
azJBM2NXT1VfTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK0
sawwDQYJKoZIhvcNAQELBQADggEBAFvzqa+q9r9OLZS7SKiCwcaR0moCL5dz/tfd
Ia36Piq51ceKMc7dq9bcHG8LPy0viKcETiBJCb5jFUd4YgmowOa1Yaike97ZuOd0
6VnZX1hDy39XftHi0wGRbmq893Zkl0MMl4YIZK2BjJunUywCO41Ks3xPIE+3P+7S
I/hkCjW+WgKXiyUreAVu1XF2X1TsfeIKOdtDoI6wxOLEX7eQgsqEXNyfleM/xd4t
uDoOQwXrEyHJpwGj9Nw9Wlv8WBmpSGM9NXKDySnoo5PAsTzx7aR6/ucfjjfeLPru
DAtHP6UDjY5poOXQQk2Yg/DmJKaQMK4xbLm7vSY6hrDM13IMQSk=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:06:27 2025 by rpki-client