Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DX_r25fnaSCSRAC2A8YRijriotA.roa
File: DX_r25fnaSCSRAC2A8YRijriotA.roa (raw, json)
Hash identifier: A14DJE0yyPckKXHSDhPl9QpwbCtYwYYGtzDZVNpiFbo=
Subject key identifier: 0D:7F:EB:DB:97:E7:69:20:92:44:00:B6:03:C6:11:8A:3A:E2:A2:D0
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 363A
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DX_r25fnaSCSRAC2A8YRijriotA.roa
Signing time: Mon 10 Feb 2025 13:54:07 +0000
ROA not before: Mon 10 Feb 2025 13:54:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.160.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13882 (0x363a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:07 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0D7FEBDB97E76920924400B603C6118A3AE2A2D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:df:f8:9d:42:f9:aa:ce:b7:74:db:7f:98:42:
67:77:76:13:f2:43:d1:4e:11:92:a5:37:75:cb:2d:
ee:46:23:b9:f4:a7:ff:f6:88:56:9d:e6:c2:92:d1:
b4:2a:b4:2c:b2:f4:c7:e8:26:fa:ab:16:d7:6e:79:
d9:10:60:fa:67:20:fc:15:e8:1e:68:54:03:f0:64:
74:34:6b:92:5e:19:74:85:a3:11:f2:c7:2f:1c:05:
b9:51:3c:11:73:d0:97:63:f2:66:a1:0e:7c:a1:9d:
ff:8e:79:fe:77:ba:5f:ab:b3:d4:04:d2:2f:75:01:
67:d8:25:d7:28:61:24:67:0b:19:30:ac:68:36:07:
1a:f0:3f:69:94:8b:ca:a7:f9:ed:95:07:e4:01:e2:
5f:e1:cd:31:69:a6:54:a6:6a:7c:4c:98:a4:43:7d:
0a:f7:a8:af:a1:7a:4f:72:da:27:35:85:b3:26:b2:
dc:b4:20:32:8b:5d:1c:9d:ef:ee:46:19:de:2c:ff:
92:53:8d:47:2f:6c:7a:82:0d:c5:7e:f0:f5:69:10:
49:a4:05:c3:4d:30:88:e1:06:e9:14:67:8d:5e:28:
b2:6a:3a:97:29:4d:0f:fa:8e:f8:e2:2b:c0:44:f8:
99:a5:47:4c:eb:75:76:45:bf:61:9c:ac:86:21:72:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:7F:EB:DB:97:E7:69:20:92:44:00:B6:03:C6:11:8A:3A:E2:A2:D0
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/DX_r25fnaSCSRAC2A8YRijriotA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:0c:18:a6:1e:04:ce:75:16:e6:be:7f:85:52:fd:10:1b:10:
d4:6d:29:e1:b7:90:28:d4:19:08:da:aa:05:97:d6:25:eb:f2:
fd:d2:92:30:05:24:17:0c:61:ef:23:11:2c:9e:b5:06:df:bd:
3c:36:cb:81:c4:fd:d3:64:39:d4:26:3f:21:5a:d8:8b:ab:82:
d5:34:34:70:fa:46:f4:ab:e8:0c:b3:9a:a0:19:44:34:98:da:
ce:19:4a:a0:7a:29:b8:6c:e7:5b:6f:d3:af:33:67:ff:91:7c:
a8:93:c5:6e:e5:e1:e8:3b:19:d9:7a:b3:24:b4:06:cf:f5:df:
58:1b:64:89:6a:1f:c3:aa:7d:ae:6e:be:03:67:4f:0a:c0:de:
3d:a0:0c:3b:e3:b8:bb:a3:ee:24:8b:a1:b9:66:93:72:d6:cd:
67:c4:f4:74:83:34:73:f7:56:f5:35:c2:4a:5d:4a:c2:55:d3:
d8:ce:76:e7:53:0a:21:59:0e:7f:cd:60:e0:73:35:c3:17:51:
c0:9e:5f:1a:93:ea:52:de:a9:63:43:bc:35:1e:99:39:d1:52:
e5:08:e2:81:ae:83:5b:b3:ae:1e:f1:bb:66:fa:3a:9b:71:18:
ee:7f:df:80:5e:3c:ca:c3:62:72:59:0c:50:1a:7d:32:82:c3:
ec:8d:ff:a7
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNjowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0MDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBEN0ZFQkRCOTdFNzY5
MjA5MjQ0MDBCNjAzQzYxMThBM0FFMkEyRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY3/idQvmqzrd023+YQmd3dhPyQ9FOEZKlN3XLLe5GI7n0p//2
iFad5sKS0bQqtCyy9MfoJvqrFtduedkQYPpnIPwV6B5oVAPwZHQ0a5JeGXSFoxHy
xy8cBblRPBFz0Jdj8mahDnyhnf+Oef53ul+rs9QE0i91AWfYJdcoYSRnCxkwrGg2
BxrwP2mUi8qn+e2VB+QB4l/hzTFpplSmanxMmKRDfQr3qK+hek9y2ic1hbMmsty0
IDKLXRyd7+5GGd4s/5JTjUcvbHqCDcV+8PVpEEmkBcNNMIjhBukUZ41eKLJqOpcp
TQ/6jvjiK8BE+JmlR0zrdXZFv2GcrIYhcsrXAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUDX/r25fnaSCSRAC2A8YRijriotAwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0RYX3IyNWZuYVNDU1JBQzJB
OFlSaWpyaW90QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wKAwDQYJKoZIhvcNAQELBQADggEBAEoMGKYeBM51Fua+f4VS/RAbENRtKeG3kCjU
GQjaqgWX1iXr8v3SkjAFJBcMYe8jESyetQbfvTw2y4HE/dNkOdQmPyFa2IurgtU0
NHD6RvSr6AyzmqAZRDSY2s4ZSqB6Kbhs51tv068zZ/+RfKiTxW7l4eg7Gdl6syS0
Bs/131gbZIlqH8Oqfa5uvgNnTwrA3j2gDDvjuLuj7iSLoblmk3LWzWfE9HSDNHP3
VvU1wkpdSsJV09jOdudTCiFZDn/NYOBzNcMXUcCeXxqT6lLeqWNDvDUemTnRUuUI
4oGug1uzrh7xu2b6OptxGO5/34BePMrDYnJZDFAafTKCw+yN/6c=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:18 2025 by rpki-client