Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IOgB8-aMgksnCE-KlwhAHaLmsoM.roa
File: IOgB8-aMgksnCE-KlwhAHaLmsoM.roa (raw, json)
Hash identifier: 83FhD+mKbSQ1gRo4MXo5Z4shvMEctQccZYO2gIrN4y4=
Subject key identifier: 20:E8:01:F3:E6:8C:82:4B:27:08:4F:8A:97:08:40:1D:A2:E6:B2:83
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33CF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IOgB8-aMgksnCE-KlwhAHaLmsoM.roa
Signing time: Mon 10 Feb 2025 13:51:48 +0000
ROA not before: Mon 10 Feb 2025 13:51:48 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.64.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13263 (0x33cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:48 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=20E801F3E68C824B27084F8A9708401DA2E6B283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:e9:28:f2:a6:68:33:81:b4:40:61:c1:0e:
77:e2:1d:c3:40:bf:a4:c9:30:07:f2:fc:7c:6b:f1:
94:36:62:1b:2b:7d:94:9b:40:cf:23:6a:1c:eb:dd:
11:7c:fb:bb:fd:18:9c:59:2d:f0:b6:08:5a:2c:9f:
6d:a8:60:93:70:4f:e6:a5:69:b2:47:c8:d3:f1:23:
f5:ff:88:bc:52:b2:09:59:7c:ed:22:a3:f4:ca:c6:
d8:83:ec:ab:5b:8c:6f:0d:67:88:2f:e3:81:db:a3:
e9:3c:38:c3:43:db:56:3e:72:33:5c:27:2d:2f:09:
78:c9:b5:6b:17:a1:dc:53:4b:76:b8:67:36:a6:86:
ca:13:0e:08:bf:ee:4a:aa:5a:35:86:c7:77:ff:95:
7f:10:32:a6:6d:f6:7e:d9:48:9d:fa:39:77:89:48:
72:7a:46:c5:59:f9:43:6e:cc:1f:d1:6d:39:18:b3:
85:89:4a:37:e6:e9:a8:2e:13:29:ab:7d:85:90:a5:
eb:cc:2d:0f:f2:f5:b2:5d:0e:dc:d9:33:26:24:d5:
2a:09:bb:31:de:a4:7c:94:fe:7a:93:74:9d:95:fc:
88:2b:cc:02:31:22:fe:51:05:ea:bf:33:f6:fb:3a:
f4:ea:ae:fb:81:6a:78:8b:47:1e:0e:ae:a5:7b:24:
c6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:01:F3:E6:8C:82:4B:27:08:4F:8A:97:08:40:1D:A2:E6:B2:83
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IOgB8-aMgksnCE-KlwhAHaLmsoM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.64.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:a4:d3:d6:0e:8c:90:5d:49:3c:a8:a2:b1:9b:b3:99:a2:6c:
f7:84:82:58:f8:98:7d:02:82:e7:77:f9:23:b4:de:bd:9d:3c:
25:1e:43:c3:52:fa:e3:3c:d7:4f:a1:ee:97:5a:23:43:ee:35:
eb:dc:07:42:3d:25:c3:10:eb:05:f9:49:0a:9a:02:ef:25:89:
d7:0e:c2:ed:39:be:4a:8b:1f:2a:f4:56:e8:8a:92:75:a2:44:
17:61:b1:2f:5c:78:30:ed:bf:c2:26:57:7c:16:a5:a5:2d:b8:
48:a0:53:e8:e9:3c:61:04:4c:35:0d:43:dc:d2:04:54:98:dc:
59:26:96:9b:9d:c1:b3:85:ce:c7:56:23:d1:68:b0:2a:9a:e4:
9d:93:04:a4:71:44:ca:01:aa:36:91:8d:66:d5:e6:e6:a1:62:
05:0e:62:65:4b:e8:7a:a0:6a:16:2d:f8:d6:92:6d:dd:4d:09:
58:f3:d4:af:a4:d3:91:6f:40:4e:11:f4:d3:6b:82:35:ec:2d:
13:aa:a1:da:77:b3:47:d8:2f:cc:c6:3b:ff:ed:65:51:82:bb:
d6:95:61:b7:16:f2:3f:db:b6:1a:0f:4c:a3:9a:b4:c3:be:80:
3f:1b:6f:00:98:74:26:8a:94:b0:8b:fa:c2:19:70:85:a3:4c:
db:ea:99:f2
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM88wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxNDhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIwRTgwMUYzRTY4Qzgy
NEIyNzA4NEY4QTk3MDg0MDFEQTJFNkIyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRVOko8qZoM4G0QGHBDnfiHcNAv6TJMAfy/Hxr8ZQ2YhsrfZSb
QM8jahzr3RF8+7v9GJxZLfC2CFosn22oYJNwT+alabJHyNPxI/X/iLxSsglZfO0i
o/TKxtiD7KtbjG8NZ4gv44Hbo+k8OMND21Y+cjNcJy0vCXjJtWsXodxTS3a4Zzam
hsoTDgi/7kqqWjWGx3f/lX8QMqZt9n7ZSJ36OXeJSHJ6RsVZ+UNuzB/RbTkYs4WJ
Sjfm6aguEymrfYWQpevMLQ/y9bJdDtzZMyYk1SoJuzHepHyU/nqTdJ2V/IgrzAIx
Iv5RBeq/M/b7OvTqrvuBaniLRx4OrqV7JMYHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIOgB8+aMgksnCE+KlwhAHaLmsoMwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0lPZ0I4LWFNZ2tzbkNFLUts
d2hBSGFMbXNvTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN2
6UAwDQYJKoZIhvcNAQELBQADggEBAA2k09YOjJBdSTyoorGbs5mibPeEglj4mH0C
gud3+SO03r2dPCUeQ8NS+uM810+h7pdaI0PuNevcB0I9JcMQ6wX5SQqaAu8lidcO
wu05vkqLHyr0VuiKknWiRBdhsS9ceDDtv8ImV3wWpaUtuEigU+jpPGEETDUNQ9zS
BFSY3FkmlpudwbOFzsdWI9FosCqa5J2TBKRxRMoBqjaRjWbV5uahYgUOYmVL6Hqg
ahYt+NaSbd1NCVjz1K+k05FvQE4R9NNrgjXsLROqodp3s0fYL8zGO//tZVGCu9aV
YbcW8j/bthoPTKOatMO+gD8bbwCYdCaKlLCL+sIZcIWjTNvqmfI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:23 2025 by rpki-client