Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/31-wXhNPgCRdr8vX2TgAJztcSpg.roa
File: 31-wXhNPgCRdr8vX2TgAJztcSpg.roa (raw, json)
Hash identifier: UUjuXiwLNuM27EEvgMF0Pe54w23HyuBfu/9lhCuGTfY=
Subject key identifier: DF:5F:B0:5E:13:4F:80:24:5D:AF:CB:D7:D9:38:00:27:3B:5C:4A:98
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35AC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/31-wXhNPgCRdr8vX2TgAJztcSpg.roa
Signing time: Mon 10 Feb 2025 13:53:35 +0000
ROA not before: Mon 10 Feb 2025 13:53:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13740 (0x35ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=DF5FB05E134F80245DAFCBD7D93800273B5C4A98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fe:33:7a:e0:27:e6:3b:1b:4c:7c:01:c9:48:
b6:b3:cc:3c:8e:61:b7:27:12:fd:56:da:87:20:60:
4b:fe:be:7c:4f:ac:91:04:a0:21:fd:bc:c1:6c:71:
dc:4f:85:7d:e9:8d:26:3a:6b:74:43:b4:e2:12:cb:
72:04:1c:a6:03:83:eb:2d:d5:67:9b:72:1a:ac:57:
03:a6:82:6e:db:3c:15:66:39:8f:06:aa:dc:c2:3b:
5d:ab:76:b8:e2:31:00:0c:55:03:c6:31:b7:76:1d:
3e:6c:e2:81:d6:3e:6d:88:ea:49:50:9c:0e:54:ea:
46:4d:24:43:c8:b9:2c:46:3d:f7:64:1e:d7:be:35:
7b:9a:1c:3d:c4:fc:f4:a3:74:86:15:32:68:52:4c:
86:12:1c:08:c3:45:22:f5:f1:c3:31:89:40:83:30:
3e:4c:36:f5:83:bd:aa:b8:b6:80:1c:a0:88:d3:fd:
5d:5c:e4:38:f3:3f:08:bf:ed:23:ec:b6:ed:fe:f0:
59:c6:80:0a:45:3a:ec:34:a7:40:82:83:fe:51:c6:
7d:ac:c9:a4:3c:02:db:83:64:68:f8:b8:82:5d:26:
c7:30:4d:b0:fd:88:e2:a9:62:b3:8a:67:fa:60:d2:
c4:14:58:68:96:2f:1e:a2:6a:29:8b:70:f9:e3:ff:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5F:B0:5E:13:4F:80:24:5D:AF:CB:D7:D9:38:00:27:3B:5C:4A:98
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/31-wXhNPgCRdr8vX2TgAJztcSpg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.232.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:23:21:d7:c4:85:29:00:09:0b:f3:04:98:d7:8e:ba:d4:c7:
2e:36:3d:9c:ac:46:69:33:d7:03:61:fa:4a:8e:86:2a:78:73:
df:21:cf:e2:35:22:4d:09:24:ac:78:37:ab:94:92:37:24:d0:
82:60:a6:2d:aa:c3:d6:f3:44:d0:6f:d0:09:60:4b:5e:0a:e3:
6e:89:94:b6:35:92:f0:85:2d:80:ed:1d:8d:ea:d6:79:d5:5f:
99:a1:f0:49:29:65:f2:90:44:b7:bb:e7:ea:4a:cb:f8:e3:b8:
3e:bb:96:de:1c:0f:0b:da:c5:04:0a:b7:c3:01:6c:04:5b:9b:
4e:b7:9e:79:90:18:8a:1d:86:a3:0f:75:1c:c7:dc:2a:95:c6:
1e:75:e6:02:0c:85:12:78:b8:23:db:fb:30:1f:ad:7c:69:a3:
95:1d:26:58:9e:e5:9b:3e:00:74:eb:c2:39:b8:76:8a:8f:dc:
a6:8b:d5:92:0f:cd:f8:7b:ea:f5:c9:4e:80:bd:01:d4:61:7f:
f4:bf:4c:b0:94:03:4c:af:d3:c9:56:34:e1:4c:0f:3c:b1:b8:
65:43:65:d3:64:df:4b:07:9d:ba:7d:51:05:5e:ac:7e:ed:f1:
5a:b5:be:16:04:ec:73:e1:c9:c3:bb:68:f5:34:74:37:6c:ef:
31:49:ee:fc
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKERGNUZCMDVFMTM0Rjgw
MjQ1REFGQ0JEN0Q5MzgwMDI3M0I1QzRBOTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDl/jN64CfmOxtMfAHJSLazzDyOYbcnEv1W2ocgYEv+vnxPrJEE
oCH9vMFscdxPhX3pjSY6a3RDtOISy3IEHKYDg+st1WebchqsVwOmgm7bPBVmOY8G
qtzCO12rdrjiMQAMVQPGMbd2HT5s4oHWPm2I6klQnA5U6kZNJEPIuSxGPfdkHte+
NXuaHD3E/PSjdIYVMmhSTIYSHAjDRSL18cMxiUCDMD5MNvWDvaq4toAcoIjT/V1c
5DjzPwi/7SPstu3+8FnGgApFOuw0p0CCg/5Rxn2syaQ8AtuDZGj4uIJdJscwTbD9
iOKpYrOKZ/pg0sQUWGiWLx6iaimLcPnj/6n9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU31+wXhNPgCRdr8vX2TgAJztcSpgwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzMxLXdYaE5QZ0NSZHI4dlgy
VGdBSnp0Y1NwZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wugwDQYJKoZIhvcNAQELBQADggEBAE4jIdfEhSkACQvzBJjXjrrUxy42PZysRmkz
1wNh+kqOhip4c98hz+I1Ik0JJKx4N6uUkjck0IJgpi2qw9bzRNBv0AlgS14K426J
lLY1kvCFLYDtHY3q1nnVX5mh8EkpZfKQRLe75+pKy/jjuD67lt4cDwvaxQQKt8MB
bARbm063nnmQGIodhqMPdRzH3CqVxh515gIMhRJ4uCPb+zAfrXxpo5UdJlie5Zs+
AHTrwjm4doqP3KaL1ZIPzfh76vXJToC9AdRhf/S/TLCUA0yv08lWNOFMDzyxuGVD
ZdNk30sHnbp9UQVerH7t8Vq1vhYE7HPhycO7aPU0dDds7zFJ7vw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:36 2025 by rpki-client