Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/unh1kirbKc0cPlbYXFe0PmEG9G0.roa
File: unh1kirbKc0cPlbYXFe0PmEG9G0.roa (raw, json)
Hash identifier: eR9voJTXRaHvhJMruhle/SnqMeXQ9mavBirujz6WE4E=
Subject key identifier: BA:78:75:92:2A:DB:29:CD:1C:3E:56:D8:5C:57:B4:3E:61:06:F4:6D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33A5
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/unh1kirbKc0cPlbYXFe0PmEG9G0.roa
Signing time: Mon 10 Feb 2025 13:51:37 +0000
ROA not before: Mon 10 Feb 2025 13:51:37 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 180.177.160.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13221 (0x33a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:37 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BA7875922ADB29CD1C3E56D85C57B43E6106F46D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:ea:c8:79:d0:ad:88:8f:13:b1:90:00:8d:
5e:26:33:ef:01:f6:32:3b:11:3d:7e:2c:d3:07:26:
26:8f:cb:d7:e7:e7:44:e3:9e:21:0c:92:82:1c:55:
b7:e4:65:94:c4:1e:08:94:c7:de:b6:fa:c1:8e:cf:
a6:d7:79:6c:8d:f3:bd:4d:1c:8a:6c:73:ce:94:10:
e6:a1:2d:f6:14:80:11:f1:24:93:92:97:6d:8b:3f:
af:81:eb:06:98:41:c8:90:6b:26:fe:87:26:3f:c7:
a0:6b:78:fb:fc:df:e3:31:e4:13:53:e6:ef:62:26:
84:67:a8:74:19:94:b7:ef:6a:94:9b:b6:99:6c:83:
ff:0c:8e:26:28:43:21:f4:79:7c:72:2b:f7:d1:f7:
76:86:a4:3e:17:ee:04:fb:62:4e:d9:cd:af:4f:50:
dd:b1:68:fe:e2:37:a5:87:9b:7d:55:45:cb:6f:68:
14:93:e6:11:14:e8:23:84:0c:6c:af:87:23:1b:23:
db:97:95:cb:f2:95:6f:04:9c:56:0e:ef:2a:57:b6:
0e:d4:6a:35:7a:8f:59:a6:99:72:73:ee:79:1b:1f:
7b:c7:19:2a:d4:d1:6c:2a:ec:44:56:e3:a5:b0:85:
27:0a:88:19:ad:56:49:fe:1a:20:9d:0d:c8:0c:0a:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:78:75:92:2A:DB:29:CD:1C:3E:56:D8:5C:57:B4:3E:61:06:F4:6D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/unh1kirbKc0cPlbYXFe0PmEG9G0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.177.160.0/21
Signature Algorithm: sha256WithRSAEncryption
48:fb:74:fd:ca:2e:52:d9:eb:26:95:9a:92:38:ad:90:69:62:
1d:35:1b:99:00:17:04:aa:a7:79:7a:6e:68:5d:50:33:fe:42:
8d:96:15:d6:80:b2:d0:2d:7f:46:af:c2:57:db:df:47:bb:f7:
59:c6:be:07:70:38:3b:4e:da:95:c6:ba:8f:72:2a:85:cd:e5:
e2:f4:1a:82:56:31:cb:ac:60:51:34:6c:2d:44:ec:3d:a4:bf:
ad:8e:7c:eb:16:09:e7:9f:b5:ab:a7:5c:c2:eb:d7:0a:ee:ea:
82:b7:fa:e1:9c:68:bd:74:48:99:b6:49:c6:4f:5d:7c:0b:1b:
d0:08:0a:52:7f:cc:de:60:85:91:cc:5b:4e:2c:69:e4:c5:71:
2a:69:6e:60:c8:0f:46:a8:75:ff:ba:a4:fc:a8:4d:30:f9:00:
d4:2d:1f:76:ea:ac:0d:67:af:12:88:86:c1:83:cd:5e:9f:d2:
55:41:3e:76:c6:85:49:31:81:58:71:b9:16:6b:8d:b2:92:1a:
02:18:8f:81:57:de:86:4d:2e:06:08:12:6f:93:4b:4f:01:3e:
0f:ad:25:58:14:9e:14:a6:77:8e:1d:99:eb:1c:26:1c:1e:99:
5c:9f:16:5b:c6:8b:f4:50:3e:d2:e7:19:3e:fc:81:15:37:c8:
f5:94:f0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 05:06:21 2025 by rpki-client