Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDhwgxZN_2IcIcfjoaUtpDKS9Dw.roa
File: kDhwgxZN_2IcIcfjoaUtpDKS9Dw.roa (raw, json)
Hash identifier: Bsr91Os4/LSTvbuM2F89vGDTwwYz8RkjYN3aG9k9dKU=
Subject key identifier: 90:38:70:83:16:4D:FF:62:1C:21:C7:E3:A1:A5:2D:A4:32:92:F4:3C
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 320C
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDhwgxZN_2IcIcfjoaUtpDKS9Dw.roa
Signing time: Mon 26 Aug 2024 05:31:12 +0000
ROA not before: Mon 26 Aug 2024 05:31:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.0.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12812 (0x320c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:31:12 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=90387083164DFF621C21C7E3A1A52DA43292F43C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1f:54:8e:9a:2e:c1:15:e9:b6:94:26:28:bf:
ca:01:23:fe:ac:e0:23:8d:0e:21:18:b3:91:ea:55:
11:aa:f5:cf:31:d4:31:86:80:70:11:66:7c:4b:9c:
d0:6f:25:56:7c:4e:2d:da:5c:e8:a5:dd:82:bd:52:
02:bc:0d:1d:c1:a7:81:74:4c:25:08:84:f7:6e:c1:
3a:d7:1c:87:fe:cd:75:4d:a1:48:7a:a3:24:7d:d3:
90:f4:ac:d2:e5:c1:10:83:e7:5c:59:bc:f0:81:e7:
e2:ec:8d:ed:2e:5d:40:71:78:9b:f6:af:ba:88:30:
15:67:6c:0e:e6:40:33:bf:bc:30:09:5e:1e:a0:c2:
c4:d4:04:84:0e:ce:0e:ce:2e:3b:52:bc:b8:80:68:
14:ba:92:9b:70:52:7d:a1:63:f5:c7:a7:5f:28:c2:
59:8e:7a:e9:86:0e:15:4d:f1:01:6f:ef:b0:77:4f:
f1:d4:bf:9f:1b:95:f9:89:47:58:d4:98:f3:e0:c0:
4d:90:2e:ac:1f:99:d2:b3:38:db:e7:d8:80:2d:0f:
54:5f:36:f5:84:85:43:c2:e3:7f:52:f0:6c:4f:49:
9d:c6:2b:68:17:cf:40:57:96:07:44:9f:7d:c4:d7:
8b:fd:fd:23:99:34:2f:7e:15:67:28:4a:69:68:fe:
9f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:38:70:83:16:4D:FF:62:1C:21:C7:E3:A1:A5:2D:A4:32:92:F4:3C
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/kDhwgxZN_2IcIcfjoaUtpDKS9Dw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.0.0/21
Signature Algorithm: sha256WithRSAEncryption
70:f0:e6:9a:70:91:00:e8:07:4e:54:f1:02:14:eb:58:ce:e5:
e6:d2:7a:6b:c4:6d:5f:a7:bf:00:56:c6:6b:df:ab:22:bc:32:
1b:b2:f9:93:62:ed:fd:74:01:28:d5:5a:24:a2:0e:8d:1d:6f:
21:39:12:4b:81:ce:77:a7:c2:ae:4e:cf:aa:cd:00:84:d1:94:
70:85:79:fc:f6:44:d9:29:f1:e6:e8:bc:60:d4:ad:39:95:6e:
22:3f:32:4a:22:c0:7b:b7:7b:27:81:85:f8:2b:16:c2:74:08:
05:88:9a:50:8c:f1:56:81:83:77:8e:15:86:3f:e5:59:5a:a3:
7b:63:62:75:a6:71:9d:d3:fb:22:36:62:0c:6d:bb:11:3c:ce:
40:db:3d:a8:aa:fb:39:8a:26:18:9e:d4:7b:b1:80:87:7c:64:
97:89:91:23:e5:08:dd:94:57:b7:b6:b3:d4:47:60:d8:af:6e:
a0:b7:33:16:d7:75:7a:b0:41:03:73:b9:ec:98:38:b8:75:94:
8c:0b:b2:23:d0:e2:d2:bf:51:79:ea:45:fd:90:0a:7d:d8:c9:
97:34:51:b7:ad:75:29:6d:7d:4a:43:2c:8a:45:5e:a6:df:31:
11:19:5a:93:96:71:90:d3:a5:e6:75:84:47:52:a5:39:12:cc:
6d:0e:ce:32
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMgwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMxMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDkwMzg3MDgzMTY0REZG
NjIxQzIxQzdFM0ExQTUyREE0MzI5MkY0M0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwH1SOmi7BFem2lCYov8oBI/6s4CONDiEYs5HqVRGq9c8x1DGG
gHARZnxLnNBvJVZ8Ti3aXOil3YK9UgK8DR3Bp4F0TCUIhPduwTrXHIf+zXVNoUh6
oyR905D0rNLlwRCD51xZvPCB5+Lsje0uXUBxeJv2r7qIMBVnbA7mQDO/vDAJXh6g
wsTUBIQOzg7OLjtSvLiAaBS6kptwUn2hY/XHp18owlmOeumGDhVN8QFv77B3T/HU
v58blfmJR1jUmPPgwE2QLqwfmdKzONvn2IAtD1RfNvWEhUPC439S8GxPSZ3GK2gX
z0BXlgdEn33E14v9/SOZNC9+FWcoSmlo/p/ZAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUkDhwgxZN/2IcIcfjoaUtpDKS9DwwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2tEaHdneFpOXzJJY0ljZmpv
YVV0cERLUzlEdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wwAwDQYJKoZIhvcNAQELBQADggEBAHDw5ppwkQDoB05U8QIU61jO5ebSemvEbV+n
vwBWxmvfqyK8Mhuy+ZNi7f10ASjVWiSiDo0dbyE5EkuBznenwq5Oz6rNAITRlHCF
efz2RNkp8ebovGDUrTmVbiI/MkoiwHu3eyeBhfgrFsJ0CAWImlCM8VaBg3eOFYY/
5Vlao3tjYnWmcZ3T+yI2YgxtuxE8zkDbPaiq+zmKJhie1HuxgId8ZJeJkSPlCN2U
V7e2s9RHYNivbqC3MxbXdXqwQQNzueyYOLh1lIwLsiPQ4tK/UXnqRf2QCn3YyZc0
UbetdSltfUpDLIpFXqbfMREZWpOWcZDTpeZ1hEdSpTkSzG0OzjI=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:08 2025 by rpki-client