Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E8qtkw_OArCbDYxblLca5NTnWP8.roa
File: E8qtkw_OArCbDYxblLca5NTnWP8.roa (raw, json)
Hash identifier: K4FfBCZS4HtIqzUJZwtzqjm0NzWuLQyVgytqrrwKOsY=
Subject key identifier: 13:CA:AD:93:0F:CE:02:B0:9B:0D:8C:5B:94:B7:1A:E4:D4:E7:58:FF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3629
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E8qtkw_OArCbDYxblLca5NTnWP8.roa
Signing time: Mon 10 Feb 2025 13:54:03 +0000
ROA not before: Mon 10 Feb 2025 13:54:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13865 (0x3629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=13CAAD930FCE02B09B0D8C5B94B71AE4D4E758FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:77:8e:26:36:3a:cc:85:58:59:1b:98:96:
91:aa:bb:cc:bf:5f:19:7d:60:a9:ec:c2:c9:b6:b9:
f9:02:ca:3f:73:6a:33:59:88:04:c2:15:60:4c:68:
7a:4d:15:a0:ec:f7:f3:3f:0a:fe:e4:2d:6f:d9:c7:
06:71:63:e9:50:75:af:b4:d8:d1:02:0c:48:30:62:
4d:40:f8:be:c4:a9:5a:5f:99:06:e7:7c:00:f9:2c:
e1:58:2b:0a:3a:5c:22:15:be:35:7c:57:c3:aa:17:
a7:bf:4f:0b:24:1a:d0:41:e5:2b:04:71:d4:76:6d:
09:7e:dd:2f:b3:be:1c:9c:df:82:45:0a:60:a8:02:
9b:01:3a:b7:ab:e4:0e:59:19:89:1c:08:80:a4:7d:
6c:11:f4:da:11:e3:a9:db:c3:4c:85:52:96:f0:27:
5c:43:6d:0f:9f:bf:c9:dd:64:32:52:64:6d:d1:9f:
c3:d9:c5:0e:e3:27:45:fc:c9:4c:ce:12:37:5f:02:
8c:ea:6a:18:5b:94:3e:c3:d7:9c:27:bd:38:0d:67:
c6:fd:55:70:b4:28:f8:81:31:2e:a3:a8:4d:c2:27:
59:bb:05:42:80:18:4d:a1:ec:ba:63:65:92:03:bc:
fa:53:67:dd:a4:0f:28:14:ee:0f:14:24:50:73:e9:
0d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:AD:93:0F:CE:02:B0:9B:0D:8C:5B:94:B7:1A:E4:D4:E7:58:FF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/E8qtkw_OArCbDYxblLca5NTnWP8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.20.0/22
Signature Algorithm: sha256WithRSAEncryption
07:80:f9:62:43:4a:8d:1e:e9:35:ef:3b:04:6e:49:03:3f:00:
dc:94:d0:62:28:63:c5:d3:cd:36:87:33:84:98:da:a8:7a:43:
c4:95:fc:ed:14:a2:83:60:f9:a8:55:aa:d5:2b:ec:a4:d7:e2:
6c:62:60:65:7c:78:fa:ee:8e:48:5c:d9:90:b1:81:70:64:50:
46:a2:43:99:d6:b3:80:9c:42:f1:35:2d:34:46:44:2f:af:08:
01:ea:c7:65:88:d4:06:71:ac:36:ac:57:73:14:bc:c3:24:2f:
9b:4a:4f:80:98:81:9e:75:71:87:fc:62:26:d5:26:be:8b:83:
84:84:72:fa:04:6d:eb:46:67:c8:2d:b9:e2:bd:b8:08:d9:de:
34:8a:f3:52:e7:68:a7:72:7e:3e:f8:d6:f8:4e:ee:e3:1e:3e:
37:37:ce:a0:65:fe:1b:57:97:fd:0f:be:cb:ee:90:8c:ef:23:
1b:73:a3:57:a3:59:1e:20:e0:8c:11:38:d8:9a:cc:e3:59:0d:
0d:e6:db:59:06:24:4e:25:5a:10:68:03:99:ce:58:6f:6c:25:
2e:ca:0b:f5:bc:95:03:14:07:13:09:cc:2b:cf:50:26:50:52:
29:58:2a:10:f5:0c:46:6d:b3:be:fb:ed:70:b0:82:a3:1e:ef:
97:10:48:5a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNikwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDEzQ0FBRDkzMEZDRTAy
QjA5QjBEOEM1Qjk0QjcxQUU0RDRFNzU4RkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCaXeOJjY6zIVYWRuYlpGqu8y/Xxl9YKnswsm2ufkCyj9zajNZ
iATCFWBMaHpNFaDs9/M/Cv7kLW/ZxwZxY+lQda+02NECDEgwYk1A+L7EqVpfmQbn
fAD5LOFYKwo6XCIVvjV8V8OqF6e/TwskGtBB5SsEcdR2bQl+3S+zvhyc34JFCmCo
ApsBOrer5A5ZGYkcCICkfWwR9NoR46nbw0yFUpbwJ1xDbQ+fv8ndZDJSZG3Rn8PZ
xQ7jJ0X8yUzOEjdfAozqahhblD7D15wnvTgNZ8b9VXC0KPiBMS6jqE3CJ1m7BUKA
GE2h7LpjZZIDvPpTZ92kDygU7g8UJFBz6Q3tAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUE8qtkw/OArCbDYxblLca5NTnWP8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0U4cXRrd19PQXJDYkRZeGJs
TGNhNU5UbldQOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
ARQwDQYJKoZIhvcNAQELBQADggEBAAeA+WJDSo0e6TXvOwRuSQM/ANyU0GIoY8XT
zTaHM4SY2qh6Q8SV/O0UooNg+ahVqtUr7KTX4mxiYGV8ePrujkhc2ZCxgXBkUEai
Q5nWs4CcQvE1LTRGRC+vCAHqx2WI1AZxrDasV3MUvMMkL5tKT4CYgZ51cYf8YibV
Jr6Lg4SEcvoEbetGZ8gtueK9uAjZ3jSK81LnaKdyfj741vhO7uMePjc3zqBl/htX
l/0PvsvukIzvIxtzo1ejWR4g4IwRONiazONZDQ3m21kGJE4lWhBoA5nOWG9sJS7K
C/W8lQMUBxMJzCvPUCZQUilYKhD1DEZts7777XCwgqMe75cQSFo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:01 2025 by rpki-client