Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4f-ijWMmvyBCRXf0iK1XWo4TY4o.roa
File: 4f-ijWMmvyBCRXf0iK1XWo4TY4o.roa (raw, json)
Hash identifier: Wzjrhqcx2deZly8W+P1Q5385CSIMTzmV23qKZf7bB+M=
Subject key identifier: E1:FF:A2:8D:63:26:BF:20:42:45:77:F4:88:AD:57:5A:8E:13:63:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 34B7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4f-ijWMmvyBCRXf0iK1XWo4TY4o.roa
Signing time: Mon 10 Feb 2025 13:52:38 +0000
ROA not before: Mon 10 Feb 2025 13:52:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13495 (0x34b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E1FFA28D6326BF20424577F488AD575A8E13638A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1a:9e:0e:0a:9d:6b:2e:59:8c:3f:6f:9f:e8:
36:28:8b:8c:2f:93:1b:63:eb:3f:ad:62:5b:3d:a0:
c7:f2:cf:60:82:71:0b:c2:4d:f4:6b:44:1d:d1:c9:
08:9b:98:2f:90:9d:78:11:f4:f6:83:df:7b:ec:ff:
34:f5:b8:15:1a:b8:0f:70:09:aa:d8:21:76:fd:0f:
81:ea:e9:54:98:69:62:4f:bc:9f:b0:97:b4:1e:a5:
d1:e5:62:2b:b5:dd:80:9d:90:03:bf:af:bc:af:1d:
19:67:a5:76:c4:ab:05:96:be:89:88:56:2a:1f:28:
4f:67:4e:33:ea:ec:98:d5:92:47:69:f7:88:cd:d5:
03:9a:c1:3a:f9:e1:9f:9a:54:8a:49:48:8e:93:b1:
61:ab:cb:c9:ab:06:51:d8:1b:18:c4:74:a0:40:26:
f6:69:40:96:7a:d5:3c:a2:5d:e8:fe:99:af:4d:4e:
b2:97:3d:4e:3f:11:67:77:2f:7c:b8:00:4d:23:bb:
57:54:65:f3:fe:d1:6b:dc:9f:eb:5c:c5:c0:b6:32:
19:f7:1a:34:e0:3f:7b:9e:35:22:55:45:df:49:e7:
45:81:f5:c0:f5:c8:e0:2f:c9:5c:3b:49:41:78:34:
47:99:7f:b5:77:ee:56:94:55:61:8e:2c:18:09:34:
a8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:A2:8D:63:26:BF:20:42:45:77:F4:88:AD:57:5A:8E:13:63:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/4f-ijWMmvyBCRXf0iK1XWo4TY4o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.180.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:e0:42:30:56:a5:b9:96:83:53:5d:b2:a8:7e:20:a2:2e:29:
7a:e4:c7:c9:28:41:c3:f2:8d:ed:33:3f:bd:12:94:13:3f:7f:
56:4e:43:36:09:8d:28:2d:d6:91:ef:a3:d8:2f:2d:ee:55:1b:
e8:62:76:60:89:2f:6c:7d:46:44:4a:c1:e5:bd:8c:72:6f:82:
82:51:7d:53:73:61:09:5c:49:77:07:f6:26:36:34:bf:30:d6:
eb:c8:26:e3:82:5a:bb:df:af:db:38:45:02:97:a6:0a:42:ba:
a9:a7:cb:b2:47:b2:8b:12:f1:92:75:0b:fd:5a:1c:4e:1f:62:
4f:9d:d9:1a:92:dd:e5:36:4d:7f:cf:9f:50:0b:e5:58:7e:e1:
b7:db:9a:ab:ef:f2:9e:b7:5c:b4:bb:51:98:2e:ba:38:19:01:
29:6f:f8:45:54:18:72:c8:85:29:05:46:62:7b:2f:a8:bb:ef:
54:ce:5d:c1:cc:95:6e:39:b0:52:e1:21:03:94:f0:18:16:41:
95:2f:16:10:2a:43:9d:13:e1:09:33:64:f8:80:f9:a7:6e:6e:
f9:1d:29:de:36:e4:d6:29:a0:21:9f:48:a2:5c:d2:b4:e5:d0:
58:98:85:cd:e4:9b:49:f2:97:91:21:4d:2b:3a:ef:92:fd:52:
16:15:2f:14
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNLcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEUxRkZBMjhENjMyNkJG
MjA0MjQ1NzdGNDg4QUQ1NzVBOEUxMzYzOEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYGp4OCp1rLlmMP2+f6DYoi4wvkxtj6z+tYls9oMfyz2CCcQvC
TfRrRB3RyQibmC+QnXgR9PaD33vs/zT1uBUauA9wCarYIXb9D4Hq6VSYaWJPvJ+w
l7QepdHlYiu13YCdkAO/r7yvHRlnpXbEqwWWvomIViofKE9nTjPq7JjVkkdp94jN
1QOawTr54Z+aVIpJSI6TsWGry8mrBlHYGxjEdKBAJvZpQJZ61TyiXej+ma9NTrKX
PU4/EWd3L3y4AE0ju1dUZfP+0Wvcn+tcxcC2Mhn3GjTgP3ueNSJVRd9J50WB9cD1
yOAvyVw7SUF4NEeZf7V37laUVWGOLBgJNKi3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU4f+ijWMmvyBCRXf0iK1XWo4TY4owHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzRmLWlqV01tdnlCQ1JYZjBp
SzFYV280VFk0by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6bQwDQYJKoZIhvcNAQELBQADggEBALLgQjBWpbmWg1Ndsqh+IKIuKXrkx8koQcPy
je0zP70SlBM/f1ZOQzYJjSgt1pHvo9gvLe5VG+hidmCJL2x9RkRKweW9jHJvgoJR
fVNzYQlcSXcH9iY2NL8w1uvIJuOCWrvfr9s4RQKXpgpCuqmny7JHsosS8ZJ1C/1a
HE4fYk+d2RqS3eU2TX/Pn1AL5Vh+4bfbmqvv8p63XLS7UZguujgZASlv+EVUGHLI
hSkFRmJ7L6i771TOXcHMlW45sFLhIQOU8BgWQZUvFhAqQ50T4QkzZPiA+adubvkd
Kd425NYpoCGfSKJc0rTl0FiYhc3km0nyl5EhTSs675L9UhYVLxQ=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:05 2025 by rpki-client