Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lmQszfT0Jp0yQrt3TBtl3R3RXIU.roa
File: lmQszfT0Jp0yQrt3TBtl3R3RXIU.roa (raw, json)
Hash identifier: vW5j/Mxhu4j4GJctkP0JC9sE/Pe0897mzGvY5W3Dnqs=
Subject key identifier: 96:64:2C:CD:F4:F4:26:9D:32:42:BB:77:4C:1B:65:DD:1D:D1:5C:85
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3440
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lmQszfT0Jp0yQrt3TBtl3R3RXIU.roa
Signing time: Mon 10 Feb 2025 13:52:12 +0000
ROA not before: Mon 10 Feb 2025 13:52:12 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.50.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13376 (0x3440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:12 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=96642CCDF4F4269D3242BB774C1B65DD1DD15C85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:3e:03:56:ad:e7:4c:fd:b2:d1:75:41:4f:
d1:73:d9:f3:21:5a:50:f3:e4:27:c6:79:bc:e6:24:
4f:a3:33:e8:c6:bc:64:ba:22:ff:aa:58:c3:44:2d:
41:36:cb:19:9c:40:39:75:19:27:8a:28:82:ff:d1:
9b:94:df:5d:e4:13:76:e6:50:0f:8c:aa:d3:ad:6a:
67:98:fe:cb:79:ac:d3:04:8f:c5:ca:ce:7c:3a:4e:
bb:65:ff:1f:a1:0b:c1:2d:1e:b1:f2:61:ab:7b:a3:
44:70:dd:6a:ed:71:86:cf:73:7b:73:86:e4:79:8e:
8d:df:11:4a:90:0c:81:ef:07:a8:f6:1c:8d:34:7b:
90:6c:ee:fb:3d:0e:3b:d9:59:77:33:26:29:4d:68:
17:5e:f3:02:0d:cf:58:0b:40:c9:42:7f:6a:6a:f7:
1a:97:8b:c3:dc:d2:61:ca:4c:c2:4a:b3:31:91:e0:
e9:44:21:df:10:fb:18:25:d2:d1:4a:98:23:0c:51:
77:8e:97:10:6d:96:fd:23:12:55:ce:0f:0a:ee:96:
bf:8a:e9:14:1d:a0:db:de:e7:84:81:55:71:6b:d3:
93:96:68:f7:73:2e:85:27:9e:3a:07:30:56:a8:a2:
52:d3:0c:55:ff:8b:2a:a7:40:b3:f3:b5:ea:c5:db:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:2C:CD:F4:F4:26:9D:32:42:BB:77:4C:1B:65:DD:1D:D1:5C:85
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/lmQszfT0Jp0yQrt3TBtl3R3RXIU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.50.0/23
Signature Algorithm: sha256WithRSAEncryption
11:6c:72:a7:37:95:fb:95:26:67:9c:9d:a6:dd:b6:ee:4d:c3:
d7:7a:2d:ec:2f:08:67:1f:a8:c8:06:f8:dd:f4:4d:43:e4:30:
38:98:5e:b8:b4:4f:d4:e3:39:50:46:55:4d:ef:c3:21:9d:05:
ef:1e:40:f8:c1:92:54:08:87:23:dc:41:f6:89:fa:46:ed:03:
5f:9a:be:cb:db:dc:0a:57:8c:e1:4d:ae:2a:81:5c:b0:57:91:
95:f2:4b:04:d6:b7:c8:01:05:a3:b6:72:52:34:21:ef:91:38:
35:91:31:32:df:83:b2:04:db:1a:37:ae:04:b5:b2:01:8a:c8:
51:be:77:f0:f1:53:f8:1f:04:03:44:99:73:56:c5:a7:57:8d:
b4:fa:ad:1e:02:6d:36:fc:38:48:78:5e:a6:43:33:b9:45:eb:
ec:96:7d:7a:70:41:90:c7:ff:86:c4:4d:d0:e7:0b:2a:73:3c:
e8:c2:a2:14:8b:04:52:da:b1:a0:36:d7:20:44:1c:a2:6a:8f:
89:8c:b9:94:62:e6:93:11:5d:dc:80:db:b6:42:c8:5c:f8:41:
05:68:ec:bc:d8:9c:17:0a:f9:32:14:34:31:3c:c2:88:b1:15:
7e:b6:5b:4c:8b:23:33:e8:61:0f:af:d0:d2:2f:7d:8f:56:38:
2b:e4:dc:ef
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNEAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMTJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDk2NjQyQ0NERjRGNDI2
OUQzMjQyQkI3NzRDMUI2NUREMUREMTVDODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCDT4DVq3nTP2y0XVBT9Fz2fMhWlDz5CfGebzmJE+jM+jGvGS6
Iv+qWMNELUE2yxmcQDl1GSeKKIL/0ZuU313kE3bmUA+MqtOtameY/st5rNMEj8XK
znw6Trtl/x+hC8EtHrHyYat7o0Rw3WrtcYbPc3tzhuR5jo3fEUqQDIHvB6j2HI00
e5Bs7vs9DjvZWXczJilNaBde8wINz1gLQMlCf2pq9xqXi8Pc0mHKTMJKszGR4OlE
Id8Q+xgl0tFKmCMMUXeOlxBtlv0jElXODwrulr+K6RQdoNve54SBVXFr05OWaPdz
LoUnnjoHMFaoolLTDFX/iyqnQLPzterF26K5AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUlmQszfT0Jp0yQrt3TBtl3R3RXIUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2xtUXN6ZlQwSnAweVFydDNU
QnRsM1IzUlhJVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFq
ATIwDQYJKoZIhvcNAQELBQADggEBABFscqc3lfuVJmecnabdtu5Nw9d6LewvCGcf
qMgG+N30TUPkMDiYXri0T9TjOVBGVU3vwyGdBe8eQPjBklQIhyPcQfaJ+kbtA1+a
vsvb3ApXjOFNriqBXLBXkZXySwTWt8gBBaO2clI0Ie+RODWRMTLfg7IE2xo3rgS1
sgGKyFG+d/DxU/gfBANEmXNWxadXjbT6rR4CbTb8OEh4XqZDM7lF6+yWfXpwQZDH
/4bETdDnCypzPOjCohSLBFLasaA21yBEHKJqj4mMuZRi5pMRXdyA27ZCyFz4QQVo
7LzYnBcK+TIUNDE8woixFX62W0yLIzPoYQ+v0NIvfY9WOCvk3O8=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:27 2025 by rpki-client