Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5tI2t_SKH_jQYROlNTvFV_xXAPU.roa
File: 5tI2t_SKH_jQYROlNTvFV_xXAPU.roa (raw, json)
Hash identifier: K9HVZqxVzT1JVB0U7RplISUs54itshTyjFdMztIs8P4=
Subject key identifier: E6:D2:36:B7:F4:8A:1F:F8:D0:61:13:A5:35:3B:C5:57:FC:57:00:F5
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3569
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5tI2t_SKH_jQYROlNTvFV_xXAPU.roa
Signing time: Mon 10 Feb 2025 13:53:19 +0000
ROA not before: Mon 10 Feb 2025 13:53:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13673 (0x3569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E6D236B7F48A1FF8D06113A5353BC557FC5700F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:7b:a5:75:4a:41:eb:17:d1:4e:e8:b1:6e:
35:18:11:b9:dc:70:85:11:7c:ab:6d:b7:92:fe:49:
dc:57:cb:3b:60:fd:58:ab:66:47:6b:92:23:b7:dd:
5a:09:f0:c7:5f:d9:25:70:1d:6d:42:a6:35:0a:56:
9e:c2:a4:b6:cd:3d:2b:12:37:93:bf:93:c4:bc:66:
ee:8f:95:c6:6e:d4:8d:31:90:d2:02:31:ef:b0:03:
67:cb:ca:ad:e3:90:45:96:4f:8d:9e:84:94:a4:fe:
18:53:e7:14:10:b5:52:45:96:48:d0:0b:40:23:5f:
9c:08:15:20:e5:bc:7e:a8:13:1c:bc:f6:7a:20:aa:
07:49:2f:5d:9e:4a:d0:9e:96:a1:ab:9d:f8:56:f6:
fc:43:b8:d2:25:67:63:84:34:15:68:08:dc:77:e5:
e9:f3:29:04:ee:8d:88:1b:af:b3:f2:ca:34:bb:5f:
08:36:d6:bf:2d:38:9e:f3:88:cf:22:e0:d0:e0:d3:
22:b5:00:e9:d3:96:c3:d3:ff:c8:e9:51:fa:e3:91:
3f:ed:be:80:30:b7:44:67:49:3a:f4:9e:cf:31:2b:
55:4a:d6:3e:68:63:4d:b1:2a:0b:8e:d2:47:7b:23:
6a:76:99:42:72:21:ac:71:ac:19:a6:c8:23:23:1d:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D2:36:B7:F4:8A:1F:F8:D0:61:13:A5:35:3B:C5:57:FC:57:00:F5
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/5tI2t_SKH_jQYROlNTvFV_xXAPU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.237.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f0:b3:2e:f9:23:b1:56:17:43:74:cf:2a:c6:9b:2c:a2:62:
4f:b4:7f:78:29:45:11:30:25:97:aa:10:0b:88:c3:37:8d:ff:
88:c0:d7:76:fc:4e:00:de:f5:72:a6:17:fc:2a:03:20:fe:b9:
70:4b:c0:f0:55:71:57:a0:ce:91:75:5f:dc:dc:99:c4:74:ca:
3e:57:84:f3:5b:88:c6:f2:4a:ad:ba:0d:8c:fb:18:bf:3e:28:
bd:a1:ec:2b:c9:b9:ca:6b:76:59:91:8a:35:52:0c:9a:9e:7c:
b9:78:33:99:33:25:70:fd:da:c7:97:f2:02:d2:d0:1b:90:3a:
80:70:b3:b9:c1:42:b3:80:3a:2d:fe:d0:1d:e0:82:03:ba:9e:
05:7d:46:44:b7:73:0b:ad:fd:31:86:6e:d4:bf:7d:c3:72:9c:
4f:3c:3d:19:3d:53:52:74:f9:eb:02:85:47:d6:d0:f4:de:76:
bd:34:37:f0:9a:de:16:b9:ae:06:cc:8f:60:3e:1a:e2:0c:61:
f0:f9:02:04:d8:34:f6:6e:1d:91:e3:24:db:70:54:55:5d:b6:
00:2d:7b:52:30:bb:f4:45:bb:a2:9e:84:10:dd:22:28:5a:08:
00:d0:10:1c:76:54:78:91:57:92:a8:db:81:70:f9:68:26:f4:
cb:51:3d:3d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU2RDIzNkI3RjQ4QTFG
RjhEMDYxMTNBNTM1M0JDNTU3RkM1NzAwRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtZHuldUpB6xfRTuixbjUYEbnccIURfKttt5L+SdxXyztg/Vir
ZkdrkiO33VoJ8Mdf2SVwHW1CpjUKVp7CpLbNPSsSN5O/k8S8Zu6PlcZu1I0xkNIC
Me+wA2fLyq3jkEWWT42ehJSk/hhT5xQQtVJFlkjQC0AjX5wIFSDlvH6oExy89nog
qgdJL12eStCelqGrnfhW9vxDuNIlZ2OENBVoCNx35enzKQTujYgbr7PyyjS7Xwg2
1r8tOJ7ziM8i4NDg0yK1AOnTlsPT/8jpUfrjkT/tvoAwt0RnSTr0ns8xK1VK1j5o
Y02xKguO0kd7I2p2mUJyIaxxrBmmyCMjHe2VAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU5tI2t/SKH/jQYROlNTvFV/xXAPUwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzV0STJ0X1NLSF9qUVlST2xO
VHZGVl94WEFQVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
Ae0wDQYJKoZIhvcNAQELBQADggEBAE/wsy75I7FWF0N0zyrGmyyiYk+0f3gpRREw
JZeqEAuIwzeN/4jA13b8TgDe9XKmF/wqAyD+uXBLwPBVcVegzpF1X9zcmcR0yj5X
hPNbiMbySq26DYz7GL8+KL2h7CvJucprdlmRijVSDJqefLl4M5kzJXD92seX8gLS
0BuQOoBws7nBQrOAOi3+0B3gggO6ngV9RkS3cwut/TGGbtS/fcNynE88PRk9U1J0
+esChUfW0PTedr00N/Ca3ha5rgbMj2A+GuIMYfD5AgTYNPZuHZHjJNtwVFVdtgAt
e1Iwu/RFu6KehBDdIihaCADQEBx2VHiRV5Ko24Fw+Wgm9MtRPT0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:13 2025 by rpki-client