Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0B5xci0RU7i_Qv3_DwKCvTQPs2U.roa
File: 0B5xci0RU7i_Qv3_DwKCvTQPs2U.roa (raw, json)
Hash identifier: TZGCBXPS6NGMb4uYxJROXlVgBm5E7LlQRfz5g2P/E9o=
Subject key identifier: D0:1E:71:72:2D:11:53:B8:BF:42:FD:FF:0F:02:82:BD:34:0F:B3:65
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 353B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0B5xci0RU7i_Qv3_DwKCvTQPs2U.roa
Signing time: Mon 10 Feb 2025 13:53:09 +0000
ROA not before: Mon 10 Feb 2025 13:53:09 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.116.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13627 (0x353b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:09 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D01E71722D1153B8BF42FDFF0F0282BD340FB365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:63:8d:d3:bd:b9:4e:45:dc:ed:48:35:4d:
6d:1b:07:1f:58:b0:2c:64:1f:a0:16:3d:98:72:27:
6d:51:d4:04:61:97:d9:c9:70:d0:11:eb:5b:75:98:
d3:80:c9:5b:b6:d2:f2:1c:8d:3e:4a:f6:3e:cc:1b:
b0:12:0a:83:0a:f8:7e:91:ab:50:54:4c:ab:01:c2:
f0:ff:4b:7d:4c:9d:b6:9f:f0:1d:12:dc:84:82:4c:
62:aa:d8:2f:19:45:30:4b:a9:89:77:09:75:2b:87:
cb:80:af:b4:f8:29:34:01:91:49:34:9e:7b:f8:16:
a2:32:69:b7:8d:18:cb:80:98:5d:8a:a6:c9:ad:50:
4b:57:67:9d:77:e1:b4:ad:2b:6c:68:40:cc:d3:7b:
9c:a4:16:4f:ae:d9:2b:3b:b1:ca:41:ec:9b:64:8b:
6d:4c:13:0f:29:86:d5:51:03:38:85:25:42:e7:1d:
78:3b:e7:34:00:56:c3:37:96:15:d9:f6:94:6b:90:
57:c3:f3:4e:39:28:4a:a3:f0:b3:eb:81:2f:b0:a7:
b9:4e:65:39:b9:c0:e2:97:88:36:ff:25:13:73:8e:
1e:38:29:e4:9f:1b:a7:14:13:09:66:13:76:59:fa:
e2:1a:00:fd:11:3c:fa:77:07:bf:26:dd:b4:c6:7d:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:71:72:2D:11:53:B8:BF:42:FD:FF:0F:02:82:BD:34:0F:B3:65
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/0B5xci0RU7i_Qv3_DwKCvTQPs2U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.116.0/23
Signature Algorithm: sha256WithRSAEncryption
20:4b:a1:83:a1:27:93:95:90:e6:82:89:bf:f6:68:e6:5d:59:
86:58:da:aa:e5:14:54:6b:89:de:60:c6:b0:af:76:49:15:7f:
ca:e0:b9:7e:12:4d:a2:4e:6e:88:15:88:6b:5a:8d:14:8d:62:
1b:2c:6e:d1:17:4f:da:1b:e5:a5:03:df:a0:aa:2f:72:73:28:
00:e4:2e:f5:68:12:d2:da:c4:1c:ea:84:8b:0d:3c:46:14:fa:
7a:11:4b:e9:27:cc:92:58:40:1b:8c:b2:27:70:a8:a6:f1:fa:
16:87:b7:dd:b8:90:77:43:62:f1:d1:f0:a7:e3:c2:9c:5c:d3:
59:e4:d6:d4:ec:c9:ed:32:88:bf:73:65:d0:86:5c:71:16:f0:
a8:57:09:98:22:36:ec:46:ae:68:54:76:1d:af:2b:93:53:0d:
5d:f0:f4:55:ae:5c:b4:40:30:f2:a2:58:dd:f9:d3:4b:a4:e1:
d0:32:f8:c1:50:b9:73:d7:83:92:a4:61:90:87:a8:f1:ff:b7:
a1:8c:e6:54:0f:60:90:fd:9a:96:72:b5:e3:1d:e1:cf:f9:99:
ff:cd:20:aa:c7:13:b8:c8:70:33:dc:9a:31:ed:b4:f5:a3:9a:
7f:6f:1b:cd:ad:0f:9e:c2:8c:6f:60:a0:22:97:76:1e:6c:60:
72:06:62:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 09:35:51 2025 by rpki-client