Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Gk9o0iHoWTDA2S1FrHINovSWnk.roa
File: 1Gk9o0iHoWTDA2S1FrHINovSWnk.roa (raw, json)
Hash identifier: 58WuwamK60zg7RqJAcJXaWY27B+nxNY94KcPOZK/eV8=
Subject key identifier: D4:69:3D:A3:48:87:A1:64:C3:03:64:B5:16:B1:C8:36:8B:D2:5A:79
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 349A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Gk9o0iHoWTDA2S1FrHINovSWnk.roa
Signing time: Mon 10 Feb 2025 13:52:32 +0000
ROA not before: Mon 10 Feb 2025 13:52:32 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.72.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13466 (0x349a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:32 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D4693DA34887A164C30364B516B1C8368BD25A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:e4:db:00:fd:bc:e1:78:e8:4c:80:f8:7e:
a0:eb:c4:b2:cb:34:2d:ea:32:d4:ef:9f:67:0a:79:
22:9b:4d:37:66:ad:3a:63:8f:a7:e5:1f:5d:91:de:
2a:b9:8f:78:07:80:21:f0:09:b7:2f:a9:56:8e:88:
c9:cd:a5:51:c5:ed:5c:ed:eb:00:5f:f4:3b:fb:84:
4b:cc:84:dd:83:2c:e5:5e:81:ff:36:0c:00:93:8d:
99:d7:4f:e9:e2:a3:58:bf:fe:a5:6f:da:7d:70:70:
56:80:93:85:fe:6c:75:46:31:cf:c9:d5:fa:e4:6b:
0f:28:a5:ee:f0:1c:ab:2e:e7:d5:1e:8d:ba:9f:72:
50:40:fb:74:f4:98:37:6b:5b:e6:b5:c3:e6:93:99:
3a:b2:e9:db:b1:14:27:cf:bc:29:20:f0:ae:f3:4c:
ac:e4:75:dc:9d:e4:51:87:5e:29:0d:3f:da:53:a8:
f5:f1:ce:16:85:66:52:16:9c:e9:22:39:b3:f7:23:
6c:e2:fa:d1:96:56:7e:e5:47:cc:cc:70:f5:1e:eb:
77:7c:78:b5:fd:ca:03:d4:c2:98:eb:c5:34:11:ad:
cf:27:c8:ec:7e:40:b8:e9:d9:29:9c:ee:ed:c0:07:
a9:9b:5a:5c:54:59:a7:73:a3:67:da:3f:08:8e:de:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:69:3D:A3:48:87:A1:64:C3:03:64:B5:16:B1:C8:36:8B:D2:5A:79
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1Gk9o0iHoWTDA2S1FrHINovSWnk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.72.0/22
Signature Algorithm: sha256WithRSAEncryption
11:b4:67:02:98:1f:1d:6e:af:93:a5:20:77:0a:b9:a0:ac:23:
17:08:89:f3:4e:5f:3f:25:dd:5b:aa:77:39:85:a8:cf:b3:60:
61:fe:65:bf:0e:99:79:85:07:99:5d:1c:15:51:61:8f:e2:7d:
b4:50:b0:a5:d2:4d:42:bd:44:95:bf:87:f7:b4:45:dc:42:24:
b7:a5:ad:d9:44:ec:14:2a:09:34:66:b4:db:5c:79:55:07:ab:
11:ef:14:d3:d1:d1:1f:73:40:4b:ef:3a:61:f2:03:26:7a:42:
3b:67:7d:fc:81:5d:55:35:1d:3a:12:cb:6f:c7:32:d7:4e:9e:
89:5b:f4:1d:2c:55:3c:a0:7b:b4:e0:02:ae:60:0a:da:d8:20:
3f:82:53:66:7b:3c:e8:40:45:44:c2:5c:e5:34:c5:64:38:f4:
0d:53:cb:44:9e:78:5a:84:95:cd:0f:99:8a:31:3b:d7:17:c5:
ef:60:c4:b1:c8:a7:f5:11:f9:e2:16:d9:96:c2:3c:cf:92:51:
2e:d7:42:2c:40:f1:7c:79:72:df:20:ce:60:84:ba:a3:1d:8c:
14:21:ba:a1:00:0e:b6:6b:ae:80:e7:cf:28:15:1e:1f:4c:dd:
91:4c:cf:2c:4d:e7:ba:b1:e4:da:07:c9:af:2b:61:14:89:4f:
87:bb:f2:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMzJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ0NjkzREEzNDg4N0Ex
NjRDMzAzNjRCNTE2QjFDODM2OEJEMjVBNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1yOTbAP284XjoTID4fqDrxLLLNC3qMtTvn2cKeSKbTTdmrTpj
j6flH12R3iq5j3gHgCHwCbcvqVaOiMnNpVHF7Vzt6wBf9Dv7hEvMhN2DLOVegf82
DACTjZnXT+nio1i//qVv2n1wcFaAk4X+bHVGMc/J1frkaw8ope7wHKsu59Uejbqf
clBA+3T0mDdrW+a1w+aTmTqy6duxFCfPvCkg8K7zTKzkddyd5FGHXikNP9pTqPXx
zhaFZlIWnOkiObP3I2zi+tGWVn7lR8zMcPUe63d8eLX9ygPUwpjrxTQRrc8nyOx+
QLjp2Smc7u3AB6mbWlxUWadzo2faPwiO3u4rAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU1Gk9o0iHoWTDA2S1FrHINovSWnkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzFHazlvMGlIb1dUREEyUzFG
ckhJTm92U1duay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wkgwDQYJKoZIhvcNAQELBQADggEBABG0ZwKYHx1ur5OlIHcKuaCsIxcIifNOXz8l
3VuqdzmFqM+zYGH+Zb8OmXmFB5ldHBVRYY/ifbRQsKXSTUK9RJW/h/e0RdxCJLel
rdlE7BQqCTRmtNtceVUHqxHvFNPR0R9zQEvvOmHyAyZ6QjtnffyBXVU1HToSy2/H
MtdOnolb9B0sVTyge7TgAq5gCtrYID+CU2Z7POhARUTCXOU0xWQ49A1Ty0SeeFqE
lc0PmYoxO9cXxe9gxLHIp/UR+eIW2ZbCPM+SUS7XQixA8Xx5ct8gzmCEuqMdjBQh
uqEADrZrroDnzygVHh9M3ZFMzyxN57qx5NoHya8rYRSJT4e78ss=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:52 2025 by rpki-client