Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sy1NK6RrEqeQe8kNzJ5EfTqEejU.roa
File: Sy1NK6RrEqeQe8kNzJ5EfTqEejU.roa (raw, json)
Hash identifier: 4Z/kv7Kl1+D2bdpD3K4pwLqbEn5ysM257ljwaCeVhyE=
Subject key identifier: 4B:2D:4D:2B:A4:6B:12:A7:90:7B:C9:0D:CC:9E:44:7D:3A:84:7A:35
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 308D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sy1NK6RrEqeQe8kNzJ5EfTqEejU.roa
Signing time: Mon 26 Aug 2024 05:29:35 +0000
ROA not before: Mon 26 Aug 2024 05:29:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.205.32/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12429 (0x308d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:35 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4B2D4D2BA46B12A7907BC90DCC9E447D3A847A35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:ba:f8:3e:7c:29:f9:5d:c0:dd:ab:f1:2c:
e2:dc:db:95:da:42:b1:3b:dd:43:be:da:be:da:fe:
e3:41:e8:09:4b:1c:12:c7:a4:00:88:c6:e2:0f:69:
8c:ed:16:bc:29:12:76:a4:5b:de:f5:be:1b:5d:40:
3f:6b:1d:cd:07:bb:ae:8e:b1:bd:e9:0a:7f:85:96:
dd:b4:46:46:3e:c2:d6:62:38:45:e2:08:14:07:91:
75:26:ac:ac:37:2a:75:1a:29:7c:25:99:ba:46:02:
23:6a:b9:1f:23:d9:4b:02:2a:de:95:56:e4:dd:4c:
54:b7:40:a1:c0:dd:f4:b9:f2:24:cd:3b:d7:cc:1a:
00:35:7b:a4:ca:11:8a:8e:fc:7d:76:94:d5:af:15:
df:96:e8:cc:27:cf:96:7b:ea:c8:80:71:b2:19:56:
a6:a7:da:d7:90:ca:0d:45:87:a8:99:c8:fd:8d:e8:
22:d2:89:6e:97:a5:89:b3:43:57:43:05:2d:5d:69:
1f:21:97:3e:92:95:69:08:e5:3a:2b:37:6d:0b:db:
bb:36:f0:c1:4b:7c:7e:46:91:36:7d:c3:9d:4b:51:
d5:00:40:96:79:41:c7:80:57:45:90:06:31:13:f0:
10:2a:14:3a:78:59:16:5a:2d:44:c0:e3:3b:44:df:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2D:4D:2B:A4:6B:12:A7:90:7B:C9:0D:CC:9E:44:7D:3A:84:7A:35
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Sy1NK6RrEqeQe8kNzJ5EfTqEejU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.32/27
Signature Algorithm: sha256WithRSAEncryption
12:53:d1:22:27:41:a8:0f:37:53:7f:03:ed:53:56:61:ce:87:
0b:f3:8f:8b:ed:e2:3a:ee:96:f9:58:89:d8:0b:72:71:b1:4b:
93:d4:50:a3:f7:0c:a5:5a:a6:3a:ce:21:be:ed:cc:04:b9:d3:
dd:a2:5d:e0:38:ab:3d:32:bc:71:03:1b:0a:47:06:46:82:e9:
47:27:9b:3f:bc:23:c1:14:81:a6:8d:99:41:16:52:4b:62:10:
df:1a:24:9c:e1:28:a0:c5:23:8b:72:34:b3:7b:b2:ea:36:8d:
19:6c:06:37:05:f0:79:ee:fb:b0:86:6d:fe:82:11:d3:9b:65:
53:22:3a:8f:59:03:10:6d:e5:f1:74:96:78:db:36:aa:9d:4a:
05:b7:f2:24:cb:4a:d0:77:86:b3:a9:42:3a:64:94:31:30:35:
29:6e:ae:48:2f:be:64:3c:a2:df:8d:b1:4c:40:cf:d7:dc:4e:
77:da:80:bd:1f:c3:a8:3d:58:f7:a2:24:4a:c6:e4:15:3a:85:
d7:01:b8:c0:09:22:6d:32:1a:e5:56:7e:b3:55:ad:88:5c:c3:
1b:36:0c:4f:9a:df:ba:76:ee:74:5d:38:7b:76:e7:59:09:2b:
fc:15:e8:c2:97:ab:f5:f8:13:7b:76:a2:9f:86:18:22:18:c7:
41:d1:32:63
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICMI0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTI5MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRCMkQ0RDJCQTQ2QjEy
QTc5MDdCQzkwRENDOUU0NDdEM0E4NDdBMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1zLr4Pnwp+V3A3avxLOLc25XaQrE73UO+2r7a/uNB6AlLHBLH
pACIxuIPaYztFrwpEnakW971vhtdQD9rHc0Hu66Osb3pCn+Flt20RkY+wtZiOEXi
CBQHkXUmrKw3KnUaKXwlmbpGAiNquR8j2UsCKt6VVuTdTFS3QKHA3fS58iTNO9fM
GgA1e6TKEYqO/H12lNWvFd+W6Mwnz5Z76siAcbIZVqan2teQyg1Fh6iZyP2N6CLS
iW6XpYmzQ1dDBS1daR8hlz6SlWkI5TorN20L27s28MFLfH5GkTZ9w51LUdUAQJZ5
QceAV0WQBjET8BAqFDp4WRZaLUTA4ztE3/rfAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUSy1NK6RrEqeQe8kNzJ5EfTqEejUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1N5MU5LNlJyRXFlUWU4a056
SjVFZlRxRWVqVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQV7
ws0gMA0GCSqGSIb3DQEBCwUAA4IBAQASU9EiJ0GoDzdTfwPtU1ZhzocL84+L7eI6
7pb5WInYC3JxsUuT1FCj9wylWqY6ziG+7cwEudPdol3gOKs9MrxxAxsKRwZGgulH
J5s/vCPBFIGmjZlBFlJLYhDfGiSc4SigxSOLcjSze7LqNo0ZbAY3BfB57vuwhm3+
ghHTm2VTIjqPWQMQbeXxdJZ42zaqnUoFt/Iky0rQd4azqUI6ZJQxMDUpbq5IL75k
PKLfjbFMQM/X3E532oC9H8OoPVj3oiRKxuQVOoXXAbjACSJtMhrlVn6zVa2IXMMb
NgxPmt+6du50XTh7dudZCSv8FejCl6v1+BN7dqKfhhgiGMdB0TJj
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:55:23 2025 by rpki-client