Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/80X9HQ0e2P6v7uw9b4UupyDbz1k.roa
File: 80X9HQ0e2P6v7uw9b4UupyDbz1k.roa (raw, json)
Hash identifier: o7CEb1uf7quke764CrGQP3rY2Cj/O1f6L5VbmYzwV2w=
Subject key identifier: F3:45:FD:1D:0D:1E:D8:FE:AF:EE:EC:3D:6F:85:2E:A7:20:DB:CF:59
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3639
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/80X9HQ0e2P6v7uw9b4UupyDbz1k.roa
Signing time: Mon 10 Feb 2025 13:54:07 +0000
ROA not before: Mon 10 Feb 2025 13:54:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.195.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13881 (0x3639)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F345FD1D0D1ED8FEAFEEEC3D6F852EA720DBCF59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:ae:42:1a:43:c5:80:4d:8a:77:47:e8:58:
99:3a:25:11:84:34:65:85:db:1f:56:e3:1e:59:9b:
18:98:97:e4:72:1c:ba:3f:f9:df:9b:ce:c0:97:81:
8f:1b:de:bc:14:8d:d5:11:01:aa:64:0d:f4:3a:94:
48:cb:b6:c7:36:9d:75:93:1b:c7:46:08:02:54:80:
a6:46:7e:85:c3:5b:d9:3c:d7:9c:f4:9f:35:5b:01:
e1:59:63:17:14:2a:8d:c3:15:98:1a:34:e9:ac:c9:
78:46:a6:8c:8d:19:3b:1f:9c:90:8b:8e:b5:ae:5e:
9b:3c:77:b3:8c:1c:ae:df:53:2a:45:d6:66:4b:01:
71:88:d0:ea:00:6f:f3:5b:ff:9a:81:67:92:c6:d2:
f3:d6:09:b3:df:ec:08:85:20:0c:53:59:6b:c1:bd:
2d:c1:a4:b3:1c:63:8b:2a:c6:7e:77:16:e0:e8:63:
ca:6d:0c:6b:10:47:f6:c5:01:dd:f7:42:8d:b8:17:
e2:7c:e0:a9:6c:a6:0e:27:48:ea:9b:1e:27:54:14:
de:46:d1:0c:5d:61:97:8e:ab:27:8a:02:79:01:53:
d9:2a:1d:a3:f0:8e:55:19:bf:64:9c:4a:38:64:27:
76:ba:61:f6:9b:b2:96:ba:69:0c:a7:48:96:8e:e6:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:45:FD:1D:0D:1E:D8:FE:AF:EE:EC:3D:6F:85:2E:A7:20:DB:CF:59
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/80X9HQ0e2P6v7uw9b4UupyDbz1k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:46:12:19:71:df:06:11:1a:2c:17:ed:f3:5d:2f:f8:7f:cd:
08:da:95:ba:f9:f8:4c:05:72:54:b0:d4:fe:8f:15:9d:53:60:
4d:b4:b9:26:96:99:9c:6a:c8:0f:f6:e1:f6:47:93:b6:c9:6c:
cb:68:5a:fc:3d:4f:f9:f2:8c:6d:c3:13:11:8f:16:ac:22:0c:
8d:88:33:e8:5d:60:38:9c:ad:58:f9:62:8a:76:8f:84:04:e8:
cb:d0:22:79:0a:33:f5:17:aa:79:13:b3:26:7e:c6:91:22:03:
53:21:cd:e4:b5:fd:15:8a:5c:45:f0:76:75:89:c6:80:1b:8b:
a1:95:bd:40:22:a5:22:5b:8b:f9:5c:19:80:54:e2:eb:bc:fb:
35:80:6c:36:56:8b:b2:89:85:d2:eb:29:d2:35:40:e7:28:cb:
bb:20:b7:e8:cb:c9:69:0d:29:5e:8f:36:7d:62:f4:6c:e4:79:
4b:a6:58:85:7f:86:ef:b0:9a:9c:88:1a:05:67:50:09:c8:d8:
c9:1e:63:4a:5d:e6:19:1f:59:e2:fe:1f:1c:1c:fc:f9:97:09:
e2:60:14:2b:2a:31:b9:3f:75:a1:82:86:9c:f4:8b:b1:06:c1:
b8:dc:83:a2:7e:b5:73:94:6f:17:4d:df:d3:41:63:b9:e5:e3:
89:8d:3a:8e
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYzNDVGRDFEMEQxRUQ4
RkVBRkVFRUMzRDZGODUyRUE3MjBEQkNGNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0Da5CGkPFgE2Kd0foWJk6JRGENGWF2x9W4x5ZmxiYl+RyHLo/
+d+bzsCXgY8b3rwUjdURAapkDfQ6lEjLtsc2nXWTG8dGCAJUgKZGfoXDW9k815z0
nzVbAeFZYxcUKo3DFZgaNOmsyXhGpoyNGTsfnJCLjrWuXps8d7OMHK7fUypF1mZL
AXGI0OoAb/Nb/5qBZ5LG0vPWCbPf7AiFIAxTWWvBvS3BpLMcY4sqxn53FuDoY8pt
DGsQR/bFAd33Qo24F+J84Klspg4nSOqbHidUFN5G0QxdYZeOqyeKAnkBU9kqHaPw
jlUZv2ScSjhkJ3a6Yfabspa6aQynSJaO5nORAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQU80X9HQ0e2P6v7uw9b4UupyDbz1kwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPLzgwWDlIUTBlMlA2djd1dzli
NFV1cHlEYnoxay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wzQwDQYJKoZIhvcNAQELBQADggEBALhGEhlx3wYRGiwX7fNdL/h/zQjalbr5+EwF
clSw1P6PFZ1TYE20uSaWmZxqyA/24fZHk7bJbMtoWvw9T/nyjG3DExGPFqwiDI2I
M+hdYDicrVj5Yop2j4QE6MvQInkKM/UXqnkTsyZ+xpEiA1MhzeS1/RWKXEXwdnWJ
xoAbi6GVvUAipSJbi/lcGYBU4uu8+zWAbDZWi7KJhdLrKdI1QOcoy7sgt+jLyWkN
KV6PNn1i9GzkeUumWIV/hu+wmpyIGgVnUAnI2MkeY0pd5hkfWeL+Hxwc/PmXCeJg
FCsqMbk/daGChpz0i7EGwbjcg6J+tXOUbxdN39NBY7nl44mNOo4=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:47 2025 by rpki-client