Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2JV_IGDAndJIjsz5MNOtugFEgu0.roa
File: 2JV_IGDAndJIjsz5MNOtugFEgu0.roa (raw, json)
Hash identifier: wIBkDOuB4XlGhHLcGV2kbPy818ktGOXoAptomLkVkOY=
Subject key identifier: D8:95:7F:20:60:C0:9D:D2:48:8E:CC:F9:30:D3:AD:BA:01:44:82:ED
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36C3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2JV_IGDAndJIjsz5MNOtugFEgu0.roa
Signing time: Mon 10 Feb 2025 13:54:39 +0000
ROA not before: Mon 10 Feb 2025 13:54:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14019 (0x36c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=D8957F2060C09DD2488ECCF930D3ADBA014482ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:31:36:e2:99:34:69:bd:5f:98:33:84:05:fd:
3c:dd:fc:10:c6:82:99:db:98:02:09:29:cb:a0:58:
37:57:71:48:b6:a8:14:ef:b7:25:78:7f:20:ec:3d:
25:51:69:33:7a:5d:19:ad:48:96:50:bc:73:03:c2:
9a:a4:b1:86:9d:4a:42:87:13:4a:bf:30:22:16:05:
61:b2:c2:21:35:d2:1c:3f:ad:e6:bc:e3:a0:e8:e5:
19:29:0b:b0:b3:9b:43:71:f7:1d:89:5e:e1:87:a4:
05:7a:34:d7:bc:d7:c5:72:a7:e0:83:7a:37:b0:54:
d0:c6:ab:fe:41:d9:7c:25:f3:6b:ee:04:23:aa:6b:
6a:a2:45:48:f8:cb:75:68:9f:87:18:b3:1c:a2:29:
b5:cf:b9:5b:61:76:6c:80:d9:eb:bb:e1:26:12:38:
59:b8:99:0b:4f:03:a0:54:9d:97:c2:06:c4:86:d4:
ed:d6:fb:da:10:92:06:cb:b2:8f:9e:64:e1:05:51:
ed:97:04:98:0d:7e:f9:cb:51:29:b4:21:d1:83:45:
fe:d0:9f:42:f7:7b:60:cf:79:25:12:61:a2:7d:1b:
8b:2a:67:cf:aa:f1:8e:c9:3d:b1:e2:88:ea:58:36:
20:c4:73:af:73:ab:d5:63:4e:76:10:e2:51:61:a0:
68:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:95:7F:20:60:C0:9D:D2:48:8E:CC:F9:30:D3:AD:BA:01:44:82:ED
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/2JV_IGDAndJIjsz5MNOtugFEgu0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.192.0/21
Signature Algorithm: sha256WithRSAEncryption
04:25:e4:27:5a:b6:c0:7d:cd:1a:fb:06:93:a2:43:4f:86:2d:
03:ae:ec:05:10:22:21:b8:5d:81:32:aa:b9:03:e5:67:94:f3:
54:72:a8:bf:7e:08:08:72:4e:b0:e3:36:a2:0a:ff:89:40:9a:
56:44:83:af:ed:d1:50:ad:4f:08:c9:56:4b:66:5e:f4:8d:d6:
7d:eb:e2:f2:23:d2:28:e8:84:ae:cb:1d:4f:44:5e:e9:9b:99:
48:16:72:c8:9d:3e:4b:eb:26:a2:33:db:08:2a:f5:2c:b3:91:
02:dc:b7:41:26:a1:a2:5f:13:4a:a8:1e:70:9c:8f:ff:60:5a:
0d:40:a5:65:5e:72:19:8b:31:fe:2e:7b:92:4a:a5:1d:04:8c:
87:00:6c:a5:68:77:2e:fc:1f:01:72:9e:af:17:0f:dc:0e:5f:
34:7d:3c:d3:b5:07:c8:b8:0a:32:0c:e3:b0:1c:24:8d:9d:b1:
39:99:d9:bf:69:a9:43:29:20:57:e8:1e:39:6f:c1:0d:21:8f:
a3:30:36:57:9a:e5:d5:87:fa:d8:2f:e4:a5:3c:b1:a1:f0:3b:
71:9a:c5:6e:22:49:21:b4:a8:6c:bc:ea:72:53:e1:5c:27:9d:
0e:db:a0:58:1a:2e:57:51:d5:ef:3b:94:e1:3c:5d:a1:4d:e7:
94:9b:10:7a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNsMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEQ4OTU3RjIwNjBDMDlE
RDI0ODhFQ0NGOTMwRDNBREJBMDE0NDgyRUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqMTbimTRpvV+YM4QF/Tzd/BDGgpnbmAIJKcugWDdXcUi2qBTv
tyV4fyDsPSVRaTN6XRmtSJZQvHMDwpqksYadSkKHE0q/MCIWBWGywiE10hw/rea8
46Do5RkpC7Czm0Nx9x2JXuGHpAV6NNe818Vyp+CDejewVNDGq/5B2Xwl82vuBCOq
a2qiRUj4y3Von4cYsxyiKbXPuVthdmyA2eu74SYSOFm4mQtPA6BUnZfCBsSG1O3W
+9oQkgbLso+eZOEFUe2XBJgNfvnLUSm0IdGDRf7Qn0L3e2DPeSUSYaJ9G4sqZ8+q
8Y7JPbHiiOpYNiDEc69zq9VjTnYQ4lFhoGihAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU2JV/IGDAndJIjsz5MNOtugFEgu0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzJKVl9JR0RBbmRKSWpzejVN
Tk90dWdGRWd1MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wMAwDQYJKoZIhvcNAQELBQADggEBAAQl5CdatsB9zRr7BpOiQ0+GLQOu7AUQIiG4
XYEyqrkD5WeU81RyqL9+CAhyTrDjNqIK/4lAmlZEg6/t0VCtTwjJVktmXvSN1n3r
4vIj0ijohK7LHU9EXumbmUgWcsidPkvrJqIz2wgq9SyzkQLct0EmoaJfE0qoHnCc
j/9gWg1ApWVechmLMf4ue5JKpR0EjIcAbKVody78HwFynq8XD9wOXzR9PNO1B8i4
CjIM47AcJI2dsTmZ2b9pqUMpIFfoHjlvwQ0hj6MwNlea5dWH+tgv5KU8saHwO3Ga
xW4iSSG0qGy86nJT4VwnnQ7boFgaLldR1e87lOE8XaFN55SbEHo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:35 2025 by rpki-client