Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H3PtHQD4n5YvCin3DrKhdjsQOzc.roa
File: H3PtHQD4n5YvCin3DrKhdjsQOzc.roa (raw, json)
Hash identifier: fM5qzAGPutNKLVNrGrldueSFUDY1DeSbD5HyO7E//Mw=
Subject key identifier: 1F:73:ED:1D:00:F8:9F:96:2F:0A:29:F7:0E:B2:A1:76:3B:10:3B:37
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35B8
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H3PtHQD4n5YvCin3DrKhdjsQOzc.roa
Signing time: Mon 10 Feb 2025 13:53:38 +0000
ROA not before: Mon 10 Feb 2025 13:53:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13752 (0x35b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1F73ED1D00F89F962F0A29F70EB2A1763B103B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:43:51:ee:23:f2:ca:b7:c9:f6:3b:02:6e:67:
56:06:ce:50:57:aa:0f:dd:c3:ad:fb:12:84:c1:ed:
1b:07:4f:51:8a:40:c8:b7:1f:86:16:e0:b2:d0:b4:
a8:48:e9:0e:13:7d:4f:17:ce:0e:4f:b5:9f:ba:5b:
1b:0d:d4:bf:b0:2f:75:80:65:d2:03:fe:2b:18:85:
ff:e5:1c:ea:dd:fd:5f:ab:19:06:39:5f:11:01:f9:
dd:95:25:15:b2:dc:b6:f9:ff:66:4a:67:f8:89:86:
60:d0:ef:a2:d0:ff:1d:8c:b5:f6:8f:a8:2a:96:b2:
6f:b9:8f:c0:52:0a:a6:65:e3:4d:1b:18:31:7e:4d:
b4:56:5f:31:7a:08:62:b9:91:d6:24:6c:0d:85:68:
d5:71:6f:8d:d3:32:2e:60:b7:2f:87:1d:35:64:eb:
41:a4:6c:bd:cb:58:4a:2c:2e:fa:aa:1e:0e:d3:d9:
b1:7c:b4:7a:36:9a:da:fc:29:04:a4:0a:ff:26:e9:
15:58:61:5c:c2:84:4f:dc:39:01:f3:87:a0:06:e0:
bc:42:b5:45:a0:92:24:1c:b3:75:09:82:4c:01:06:
38:27:75:6b:4b:20:08:8d:44:54:21:1a:a5:91:8e:
cf:c9:b0:11:8b:10:27:99:88:5d:ab:6b:21:97:fc:
e5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:73:ED:1D:00:F8:9F:96:2F:0A:29:F7:0E:B2:A1:76:3B:10:3B:37
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/H3PtHQD4n5YvCin3DrKhdjsQOzc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.118.0/24
Signature Algorithm: sha256WithRSAEncryption
82:83:5b:d8:27:10:2e:7d:d6:02:11:5a:b4:53:28:92:a0:40:
c4:38:4e:24:dd:70:51:5e:da:78:5b:5d:e7:49:2f:e9:bd:61:
0f:05:6f:ef:41:45:e1:c7:71:66:b6:eb:00:ac:de:17:45:d4:
b7:79:b3:31:e7:c0:53:ef:97:d8:49:bd:42:2b:ac:15:49:d1:
ac:3b:e0:b1:cc:50:83:ea:80:be:d4:b3:3d:64:01:f3:d0:58:
2f:d4:7d:0b:3a:21:13:38:be:28:c2:78:6c:1e:0f:99:50:11:
3c:61:61:71:82:46:4b:87:7f:d9:b4:5f:e8:0a:4e:3f:88:a5:
6b:48:25:54:99:79:bf:62:9f:7d:5c:10:f4:c6:6d:ea:eb:1e:
91:21:94:16:55:46:35:dd:ca:5a:b6:fe:52:60:c4:cf:5c:89:
d6:85:b3:e9:24:4e:d4:ae:3c:be:07:77:cb:ad:7d:19:71:d0:
23:ae:b3:77:b9:eb:f0:c3:b0:8c:78:94:f9:4f:0c:5c:59:7b:
b7:bf:b1:c3:68:3c:5b:cb:5d:86:54:ab:eb:da:d2:18:7e:97:
12:d8:bf:57:b3:0a:7a:d8:3f:4b:a6:b8:8e:a7:99:45:a7:07:
b7:57:9a:2a:64:ca:1b:54:27:70:8b:61:bd:40:ac:d2:76:eb:
01:0a:a6:03
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDFGNzNFRDFEMDBGODlG
OTYyRjBBMjlGNzBFQjJBMTc2M0IxMDNCMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMQ1HuI/LKt8n2OwJuZ1YGzlBXqg/dw637EoTB7RsHT1GKQMi3
H4YW4LLQtKhI6Q4TfU8Xzg5PtZ+6WxsN1L+wL3WAZdID/isYhf/lHOrd/V+rGQY5
XxEB+d2VJRWy3Lb5/2ZKZ/iJhmDQ76LQ/x2MtfaPqCqWsm+5j8BSCqZl400bGDF+
TbRWXzF6CGK5kdYkbA2FaNVxb43TMi5gty+HHTVk60GkbL3LWEosLvqqHg7T2bF8
tHo2mtr8KQSkCv8m6RVYYVzChE/cOQHzh6AG4LxCtUWgkiQcs3UJgkwBBjgndWtL
IAiNRFQhGqWRjs/JsBGLECeZiF2rayGX/OWpAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUH3PtHQD4n5YvCin3DrKhdjsQOzcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0gzUHRIUUQ0bjVZdkNpbjNE
cktoZGpzUU96Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6XYwDQYJKoZIhvcNAQELBQADggEBAIKDW9gnEC591gIRWrRTKJKgQMQ4TiTdcFFe
2nhbXedJL+m9YQ8Fb+9BReHHcWa26wCs3hdF1Ld5szHnwFPvl9hJvUIrrBVJ0aw7
4LHMUIPqgL7Usz1kAfPQWC/UfQs6IRM4vijCeGweD5lQETxhYXGCRkuHf9m0X+gK
Tj+IpWtIJVSZeb9in31cEPTGberrHpEhlBZVRjXdylq2/lJgxM9cidaFs+kkTtSu
PL4Hd8utfRlx0COus3e56/DDsIx4lPlPDFxZe7e/scNoPFvLXYZUq+va0hh+lxLY
v1ezCnrYP0umuI6nmUWnB7dXmipkyhtUJ3CLYb1ArNJ26wEKpgM=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:01:02 2025 by rpki-client