Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t0SIam9d94bUV5MPMCHM-Yb0qio.roa
File: t0SIam9d94bUV5MPMCHM-Yb0qio.roa (raw, json)
Hash identifier: lO4TGUwts9iz0jwVqSXPztfIQCbiPcEZNH91Oyvv9QE=
Subject key identifier: B7:44:88:6A:6F:5D:F7:86:D4:57:93:0F:30:21:CC:F9:86:F4:AA:2A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33ED
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t0SIam9d94bUV5MPMCHM-Yb0qio.roa
Signing time: Mon 10 Feb 2025 13:51:54 +0000
ROA not before: Mon 10 Feb 2025 13:51:54 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.232.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13293 (0x33ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:54 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B744886A6F5DF786D457930F3021CCF986F4AA2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b3:35:f9:86:ac:c5:ce:4d:e1:44:b0:3c:ca:
ab:51:a6:cb:96:bc:ef:f7:57:3e:63:4e:7b:65:ab:
34:e1:83:5f:ab:f6:a6:96:fb:bd:14:d8:87:ff:65:
60:7d:b4:c6:ac:42:85:9b:0d:3f:7d:2d:5f:6a:c4:
d1:93:9a:6a:e5:b7:57:69:0c:b6:9d:b4:d3:25:a7:
a9:ee:f8:e0:e5:2e:53:dd:2f:39:7e:ce:6d:9d:ef:
17:0e:32:aa:a9:78:48:97:ea:8f:11:79:ec:47:1b:
82:b7:07:a8:2b:24:42:b5:4e:2d:9a:ca:ec:87:c5:
12:b4:20:5c:ce:82:8d:3b:dd:87:7e:e2:e2:26:19:
61:f3:be:5e:a3:32:b9:74:98:51:e0:60:da:ad:e2:
79:bb:51:7b:42:f1:f6:6b:cf:07:05:0b:34:44:2a:
18:d4:f7:42:45:d0:f7:85:39:f0:42:3b:be:a6:e6:
57:96:3b:3b:86:c1:a5:58:28:81:93:d5:d6:8e:fb:
a4:d5:46:35:c9:99:ef:59:72:59:cd:84:07:6b:89:
fe:8d:58:07:69:da:46:76:10:10:3f:de:ea:52:f2:
4e:c5:bf:c7:e2:72:e9:4d:39:af:cb:23:31:21:32:
9b:55:13:15:ec:53:a4:35:1d:99:f0:e1:45:7b:10:
0c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:44:88:6A:6F:5D:F7:86:D4:57:93:0F:30:21:CC:F9:86:F4:AA:2A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/t0SIam9d94bUV5MPMCHM-Yb0qio.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.36.0/22
Signature Algorithm: sha256WithRSAEncryption
17:2a:18:fb:eb:e8:0b:5d:51:31:75:10:49:47:bb:ed:03:f1:
0e:bd:6e:f2:b9:4d:4c:98:bf:83:b8:47:23:0c:a7:00:96:b2:
37:da:51:d1:33:f9:dd:62:40:be:e3:9a:19:fb:fb:ec:47:d7:
6f:42:21:f9:34:49:7b:ec:5b:81:c4:49:b8:88:66:18:28:f6:
97:3a:28:68:1a:4c:d6:48:49:7e:b9:39:d6:c2:56:de:90:f0:
04:66:ad:61:00:75:0b:30:64:4b:57:62:3f:1d:bf:55:f0:c2:
6c:0b:58:54:5a:f2:3b:b3:f9:e8:99:86:0f:75:04:eb:db:2e:
af:7f:11:03:5d:a1:44:2f:a4:88:72:5a:2a:1b:0f:6b:73:ec:
75:6f:d3:03:89:49:cc:68:83:ea:68:22:bb:24:dc:ca:c0:7d:
fc:78:36:55:da:a1:27:1e:72:c7:4f:d4:a6:7b:35:4e:32:05:
e1:fe:bc:b3:a5:2e:51:ee:3c:4a:dd:a7:b1:d6:91:db:65:68:
4a:86:62:83:73:63:6c:06:f7:64:d6:42:3f:fe:46:7b:71:a4:
8a:48:e2:ae:92:17:b0:11:bb:11:30:d5:1f:52:c3:e0:69:16:
61:48:fa:10:bc:1e:b1:52:be:08:f5:ba:8e:cd:ed:30:a3:56:
07:09:de:30
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxNTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3NDQ4ODZBNkY1REY3
ODZENDU3OTMwRjMwMjFDQ0Y5ODZGNEFBMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeszX5hqzFzk3hRLA8yqtRpsuWvO/3Vz5jTntlqzThg1+r9qaW
+70U2If/ZWB9tMasQoWbDT99LV9qxNGTmmrlt1dpDLadtNMlp6nu+ODlLlPdLzl+
zm2d7xcOMqqpeEiX6o8ReexHG4K3B6grJEK1Ti2ayuyHxRK0IFzOgo073Yd+4uIm
GWHzvl6jMrl0mFHgYNqt4nm7UXtC8fZrzwcFCzREKhjU90JF0PeFOfBCO76m5leW
OzuGwaVYKIGT1daO+6TVRjXJme9ZclnNhAdrif6NWAdp2kZ2EBA/3upS8k7Fv8fi
culNOa/LIzEhMptVExXsU6Q1HZnw4UV7EAypAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUt0SIam9d94bUV5MPMCHM+Yb0qiowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3QwU0lhbTlkOTRiVVY1TVBN
Q0hNLVliMHFpby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6CQwDQYJKoZIhvcNAQELBQADggEBABcqGPvr6AtdUTF1EElHu+0D8Q69bvK5TUyY
v4O4RyMMpwCWsjfaUdEz+d1iQL7jmhn7++xH129CIfk0SXvsW4HESbiIZhgo9pc6
KGgaTNZISX65OdbCVt6Q8ARmrWEAdQswZEtXYj8dv1XwwmwLWFRa8juz+eiZhg91
BOvbLq9/EQNdoUQvpIhyWiobD2tz7HVv0wOJScxog+poIrsk3MrAffx4NlXaoSce
csdP1KZ7NU4yBeH+vLOlLlHuPErdp7HWkdtlaEqGYoNzY2wG92TWQj/+RntxpIpI
4q6SF7ARuxEw1R9Sw+BpFmFI+hC8HrFSvgj1uo7N7TCjVgcJ3jA=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:47:53 2025 by rpki-client