Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDYH775OjMl4H0Ih4mxRa0si5Lw.roa
File: TDYH775OjMl4H0Ih4mxRa0si5Lw.roa (raw, json)
Hash identifier: ZWTIUEeI99cOlQDckGpp4aM3p23wXR75alGJcCpI8O0=
Subject key identifier: 4C:36:07:EF:BE:4E:8C:C9:78:1F:42:21:E2:6C:51:6B:4B:22:E4:BC
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 30F8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDYH775OjMl4H0Ih4mxRa0si5Lw.roa
Signing time: Mon 26 Aug 2024 05:29:59 +0000
ROA not before: Mon 26 Aug 2024 05:29:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12536 (0x30f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:29:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4C3607EFBE4E8CC9781F4221E26C516B4B22E4BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:dc:1f:7a:60:e0:3b:59:d1:78:86:e3:82:
5e:1a:52:64:ad:cd:9f:55:ba:a8:09:3b:4c:d2:93:
af:29:f6:49:ab:5c:e1:ae:90:0f:24:b6:61:f7:a2:
df:dd:fe:b9:f7:7c:8a:3a:df:bb:30:06:70:00:08:
fb:17:d7:bb:c7:e0:8d:c4:f4:ef:e0:c3:15:9e:e0:
ac:39:96:90:b3:58:83:56:e9:57:d6:f2:77:84:9f:
30:3a:00:80:d9:95:6b:1a:17:c9:e9:30:30:67:c5:
3c:9a:c7:f1:ad:b1:62:0d:d5:73:12:a8:3b:ba:ec:
69:7d:96:13:9a:83:6b:01:ed:ea:54:6f:8d:7c:f9:
c3:48:1b:e0:34:4b:43:17:0a:13:bf:5e:71:ba:fc:
8a:7e:e5:36:a7:a8:87:3d:0d:1e:98:3d:d9:38:42:
c1:c0:6e:60:c3:d5:a4:b4:a6:35:a4:4e:dd:bc:78:
2c:08:44:da:d2:3e:8d:39:c1:ca:2e:df:a3:81:a2:
64:f1:c5:38:5d:64:b4:3f:e8:2d:88:fd:d2:88:fa:
85:bf:a6:01:a3:24:13:d3:1c:42:87:a1:c1:42:9f:
30:7a:09:4b:8c:10:35:9c:d6:57:7d:25:73:13:04:
6d:05:9f:79:1c:c1:c5:21:a2:43:f5:0d:49:9b:6c:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:07:EF:BE:4E:8C:C9:78:1F:42:21:E2:6C:51:6B:4B:22:E4:BC
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/TDYH775OjMl4H0Ih4mxRa0si5Lw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.104.0/22
Signature Algorithm: sha256WithRSAEncryption
79:3a:13:b8:a9:4f:73:2d:d4:84:b9:72:6e:2d:a0:e3:25:64:
28:f0:6b:a1:0b:76:d4:ba:16:79:2f:24:47:89:e5:86:0e:db:
2d:2b:34:16:7e:c8:ac:97:f6:be:bc:49:37:e8:20:21:77:a7:
ad:c7:31:56:84:30:b5:9a:01:fc:54:ef:e3:1f:57:7d:82:a7:
e1:cb:41:43:50:72:ff:bc:06:87:45:f4:aa:e0:c6:84:42:f5:
8b:6b:75:6f:53:5c:b4:8a:e7:16:3a:50:08:ae:95:dc:68:9d:
82:05:98:04:4d:80:e3:e1:ed:5c:8c:cb:24:fc:78:cd:5e:e5:
fa:fe:ce:59:54:81:a9:0a:06:f7:46:77:86:d6:b6:77:50:49:
5d:8b:a3:c5:9d:3a:28:ef:0b:f4:59:9e:2b:62:cc:50:76:aa:
96:8b:2b:76:58:59:94:7f:58:72:38:81:3d:3b:27:65:d5:c5:
7a:d0:92:9d:6a:50:02:d4:e5:56:b5:05:77:0f:1c:15:b2:77:
5d:a9:86:55:f4:fb:12:e2:8e:7a:d7:c8:d2:f7:2d:41:88:ca:
8c:df:a9:05:29:58:f4:6f:d5:c4:34:37:91:c4:7d:c3:b9:0f:
ac:2a:1d:0c:64:d2:6d:43:7d:23:95:eb:19:27:2f:0d:ac:85:
21:ac:93:47
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMPgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTI5NTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRDMzYwN0VGQkU0RThD
Qzk3ODFGNDIyMUUyNkM1MTZCNEIyMkU0QkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCHdwfemDgO1nReIbjgl4aUmStzZ9VuqgJO0zSk68p9kmrXOGu
kA8ktmH3ot/d/rn3fIo637swBnAACPsX17vH4I3E9O/gwxWe4Kw5lpCzWINW6VfW
8neEnzA6AIDZlWsaF8npMDBnxTyax/GtsWIN1XMSqDu67Gl9lhOag2sB7epUb418
+cNIG+A0S0MXChO/XnG6/Ip+5TanqIc9DR6YPdk4QsHAbmDD1aS0pjWkTt28eCwI
RNrSPo05wcou36OBomTxxThdZLQ/6C2I/dKI+oW/pgGjJBPTHEKHocFCnzB6CUuM
EDWc1ld9JXMTBG0Fn3kcwcUhokP1DUmbbGl9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUTDYH775OjMl4H0Ih4mxRa0si5LwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1REWUg3NzVPak1sNEgwSWg0
bXhSYTBzaTVMdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w2gwDQYJKoZIhvcNAQELBQADggEBAHk6E7ipT3Mt1IS5cm4toOMlZCjwa6ELdtS6
FnkvJEeJ5YYO2y0rNBZ+yKyX9r68STfoICF3p63HMVaEMLWaAfxU7+MfV32Cp+HL
QUNQcv+8BodF9KrgxoRC9YtrdW9TXLSK5xY6UAiuldxonYIFmARNgOPh7VyMyyT8
eM1e5fr+zllUgakKBvdGd4bWtndQSV2Lo8WdOijvC/RZnitizFB2qpaLK3ZYWZR/
WHI4gT07J2XVxXrQkp1qUALU5Va1BXcPHBWyd12phlX0+xLijnrXyNL3LUGIyozf
qQUpWPRv1cQ0N5HEfcO5D6wqHQxk0m1DfSOV6xknLw2shSGsk0c=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:49:47 2025 by rpki-client