Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Cgk8dyFqWiQJ5UObp9kg_mVVUA.roa
File: 7Cgk8dyFqWiQJ5UObp9kg_mVVUA.roa (raw, json)
Hash identifier: qcVNVyLpi2NM7z1X+ArKgOl4O2bAlp6m2u4JuRXG2bU=
Subject key identifier: EC:28:24:F1:DC:85:A9:68:90:27:95:0E:6E:9F:64:83:F9:95:55:40
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3461
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Cgk8dyFqWiQJ5UObp9kg_mVVUA.roa
Signing time: Mon 10 Feb 2025 13:52:19 +0000
ROA not before: Mon 10 Feb 2025 13:52:19 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.128.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13409 (0x3461)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:19 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EC2824F1DC85A9689027950E6E9F6483F9955540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:09:8e:60:aa:ac:4f:0d:79:65:3e:d1:e2:
46:c0:b6:f2:10:f2:7a:00:30:43:bd:24:0f:3c:22:
29:eb:3a:11:cc:aa:74:21:58:a9:8f:4f:45:73:cf:
f2:cb:60:ed:3f:00:f0:ea:e3:70:7f:ac:b9:16:ee:
9d:63:7d:59:ed:54:4f:60:46:9a:50:a2:b2:b9:cc:
32:a3:77:d3:18:69:12:ef:32:f6:8d:c0:53:69:9a:
2c:64:26:24:7f:60:eb:ea:68:c1:76:0c:f0:19:f8:
3f:d3:04:64:c6:4f:06:ba:61:bf:3f:09:3e:40:3c:
50:9e:a5:d4:d6:85:53:0c:7a:3f:e7:ab:4b:5f:99:
ec:4c:ae:b9:6d:74:bf:9c:89:64:3f:11:8c:fb:28:
b2:5e:95:c4:99:0d:d5:08:e4:77:c5:c1:b6:9a:24:
87:a4:6e:b1:e1:4f:a2:82:f2:31:f4:f4:b2:e1:d6:
9a:17:99:4f:0f:fc:31:fd:a3:30:09:5a:e1:60:48:
6c:70:b2:2b:9c:50:f0:c6:d8:f6:d6:27:6b:d9:da:
58:79:54:30:9c:1b:57:14:6b:68:b5:1a:cb:2a:75:
d4:f2:2f:5e:39:f2:3a:60:8d:28:cc:bc:30:d3:da:
c5:f6:a6:34:37:dc:35:5b:95:eb:8f:0d:1c:86:4f:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:28:24:F1:DC:85:A9:68:90:27:95:0E:6E:9F:64:83:F9:95:55:40
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/7Cgk8dyFqWiQJ5UObp9kg_mVVUA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.128.0/21
Signature Algorithm: sha256WithRSAEncryption
39:5c:78:93:cb:76:48:c5:1b:6d:34:61:55:3b:c8:ab:94:31:
62:44:ee:0e:2d:49:b1:f1:60:7c:c7:f3:4f:7f:a0:c6:67:2f:
8a:99:30:ce:ac:fd:24:13:f7:28:e9:dd:80:18:4b:7c:2e:2f:
1b:14:d9:a4:4c:d0:27:a4:eb:a6:79:97:20:19:c8:aa:89:82:
28:0b:d8:7e:25:18:94:af:b8:e7:41:4c:a5:34:91:f6:f8:45:
df:b1:51:2d:34:05:2b:b5:4f:1b:08:2b:9a:7e:e4:df:ed:88:
4e:30:1d:a5:8f:48:3d:a7:fa:60:99:1b:28:40:71:bb:b3:23:
55:42:f7:e3:6d:b1:eb:e4:17:8a:7f:78:14:cf:60:e4:2e:87:
1e:d6:80:8a:80:f0:93:03:1f:3d:d8:dc:2a:86:12:23:bd:5e:
ef:2e:d5:0a:92:cc:fd:26:79:dc:50:3e:1d:14:66:8b:22:05:
dd:de:a5:b6:7c:62:10:41:39:a8:fb:1a:c5:50:d7:d1:b9:fb:
c5:f6:c9:41:e7:21:d5:8a:21:be:d1:a6:73:4f:f4:77:9f:63:
35:e2:fe:59:a7:a8:ee:1e:08:7a:b9:1f:2e:b8:59:ec:8c:c0:
13:51:d9:b4:df:0d:62:3e:3b:aa:f9:a6:cc:67:c3:fc:79:d1:
20:ea:d8:61
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNGEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMTlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVDMjgyNEYxREM4NUE5
Njg5MDI3OTUwRTZFOUY2NDgzRjk5NTU1NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXBgmOYKqsTw15ZT7R4kbAtvIQ8noAMEO9JA88IinrOhHMqnQh
WKmPT0Vzz/LLYO0/APDq43B/rLkW7p1jfVntVE9gRppQorK5zDKjd9MYaRLvMvaN
wFNpmixkJiR/YOvqaMF2DPAZ+D/TBGTGTwa6Yb8/CT5APFCepdTWhVMMej/nq0tf
mexMrrltdL+ciWQ/EYz7KLJelcSZDdUI5HfFwbaaJIekbrHhT6KC8jH09LLh1poX
mU8P/DH9ozAJWuFgSGxwsiucUPDG2PbWJ2vZ2lh5VDCcG1cUa2i1GssqddTyL145
8jpgjSjMvDDT2sX2pjQ33DVbleuPDRyGT9YlAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU7Cgk8dyFqWiQJ5UObp9kg/mVVUAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzdDZ2s4ZHlGcVdpUUo1VU9i
cDlrZ19tVlZVQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
AYAwDQYJKoZIhvcNAQELBQADggEBADlceJPLdkjFG200YVU7yKuUMWJE7g4tSbHx
YHzH809/oMZnL4qZMM6s/SQT9yjp3YAYS3wuLxsU2aRM0Cek66Z5lyAZyKqJgigL
2H4lGJSvuOdBTKU0kfb4Rd+xUS00BSu1TxsIK5p+5N/tiE4wHaWPSD2n+mCZGyhA
cbuzI1VC9+NtsevkF4p/eBTPYOQuhx7WgIqA8JMDHz3Y3CqGEiO9Xu8u1QqSzP0m
edxQPh0UZosiBd3epbZ8YhBBOaj7GsVQ19G5+8X2yUHnIdWKIb7RpnNP9HefYzXi
/lmnqO4eCHq5Hy64WeyMwBNR2bTfDWI+O6r5psxnw/x50SDq2GE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:46 2025 by rpki-client