Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KrZUyDQL18khrPNOUH1l1fmCHxY.roa
File: KrZUyDQL18khrPNOUH1l1fmCHxY.roa (raw, json)
Hash identifier: Ce3nnxhBmjPtlzFgvHFXOCbEcSQTyFXrLgFu7rtUpZg=
Subject key identifier: 2A:B6:54:C8:34:0B:D7:C9:21:AC:F3:4E:50:7D:65:D5:F9:82:1F:16
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3665
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KrZUyDQL18khrPNOUH1l1fmCHxY.roa
Signing time: Mon 10 Feb 2025 13:54:17 +0000
ROA not before: Mon 10 Feb 2025 13:54:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13925 (0x3665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2AB654C8340BD7C921ACF34E507D65D5F9821F16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:4a:f1:68:5b:db:aa:64:58:c3:5b:bc:98:e7:
64:e7:8e:6b:81:95:61:f5:0d:6c:09:b7:75:2e:15:
07:2f:24:f1:3c:33:1f:49:5d:95:28:bc:53:3e:37:
9a:e9:42:85:b5:e7:0d:87:70:58:d2:de:e1:6a:d7:
64:aa:3f:b9:49:67:0c:25:ae:9a:12:7c:68:70:47:
eb:5d:f1:c5:da:c1:d4:f1:3c:26:59:8c:22:88:5f:
1b:24:de:a3:e9:4b:0a:f5:79:66:a9:59:36:6f:ea:
c2:f3:96:dd:81:a2:ee:92:6c:8f:42:39:ab:93:80:
5a:1f:70:02:18:17:7f:ce:61:62:21:11:52:66:26:
00:70:24:a6:c4:72:b9:8d:c4:5b:09:43:d2:49:b6:
b2:90:73:2f:bc:c1:0a:c9:fb:2f:40:4c:2b:09:96:
36:3f:3d:e5:9d:f2:7a:66:c8:10:1d:65:41:a3:3d:
2e:da:66:c6:b3:d5:6b:26:56:dc:f4:2c:ef:f6:3e:
50:14:8f:50:6f:be:ff:02:22:21:b4:ad:bb:f1:ce:
59:be:d9:df:e5:c1:1f:88:9e:09:20:25:3f:64:61:
f2:16:c9:19:61:bb:13:4f:55:bd:8c:2b:93:c9:bd:
66:c7:eb:83:fa:e4:34:e9:c4:bd:0c:67:23:fa:9b:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B6:54:C8:34:0B:D7:C9:21:AC:F3:4E:50:7D:65:D5:F9:82:1F:16
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/KrZUyDQL18khrPNOUH1l1fmCHxY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.152.0/21
Signature Algorithm: sha256WithRSAEncryption
af:1c:2e:c5:c6:1e:5d:70:21:80:47:2f:2c:19:50:46:7e:ae:
8f:aa:b2:89:e1:db:7c:9d:9b:a5:55:a3:f9:a2:b3:b9:48:aa:
34:46:6f:ca:ee:b6:92:b1:f1:ce:68:9d:33:6c:2b:a6:8d:35:
a5:78:9e:6d:01:b2:e6:99:ff:97:24:88:16:23:4b:f1:bd:bd:
a9:66:e6:79:79:a3:76:88:26:72:01:cc:a2:33:ec:c5:0d:af:
2f:f7:82:3f:e8:7b:7c:86:6b:34:42:ca:18:89:59:46:db:7d:
bd:b2:eb:7d:ca:3f:17:bb:c6:da:4e:95:5f:8a:20:e2:4d:a7:
1c:89:bb:21:bf:c1:14:b3:2b:76:f4:13:0d:25:64:3c:93:27:
d6:9c:1d:10:ab:97:59:cf:a7:98:1f:8a:9c:09:7d:5a:51:ea:
77:62:ff:cd:13:53:c6:a8:16:c0:61:71:23:41:5b:bf:26:0b:
01:76:90:58:7c:c2:3b:d1:91:cb:e0:66:d1:00:80:9d:6c:0c:
e0:f7:20:d6:45:0a:96:8a:a4:f2:6a:b6:ad:b3:b3:70:98:73:
e6:ee:e0:98:d8:4c:dc:1b:e4:5a:61:52:02:0d:02:bd:87:13:
ce:3e:32:61:9c:f5:13:be:4b:42:aa:b1:84:06:b2:d5:7d:c1:
3a:35:1d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:43:18 2025 by rpki-client