Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HJW5wI-LMM7bxnCN8s1aJgTK6Yo.roa
File: HJW5wI-LMM7bxnCN8s1aJgTK6Yo.roa (raw, json)
Hash identifier: cv9bq1xTqCoUzbMSwAHYzOwJOOR7CeMXTL5SXxZ0R9Y=
Subject key identifier: 1C:95:B9:C0:8F:8B:30:CE:DB:C6:70:8D:F2:CD:5A:26:04:CA:E9:8A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2AA3
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HJW5wI-LMM7bxnCN8s1aJgTK6Yo.roa
Signing time: Fri 01 Sep 2023 10:08:07 +0000
ROA not before: Fri 01 Sep 2023 10:08:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9924
IP address blocks: 118.232.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10915 (0x2aa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:08:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1C95B9C08F8B30CEDBC6708DF2CD5A2604CAE98A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:ab:68:0d:4a:ca:5d:a1:07:b3:d4:73:33:
3f:bb:cd:1f:14:cd:da:8f:72:f0:95:95:22:00:c9:
6e:6a:07:01:10:31:5a:ce:b5:d4:21:8f:e6:86:2b:
de:db:58:b3:06:6d:50:de:5a:75:d3:a7:95:e6:13:
09:89:64:08:78:0b:e2:62:42:b6:87:0a:9a:70:5d:
5c:82:fb:59:b5:30:fb:65:a2:2a:0e:d7:fb:e0:df:
05:1e:f4:b5:b9:fb:ee:da:51:fd:bd:f4:ed:f8:5b:
4d:7f:28:46:06:03:9a:bb:54:16:18:9b:d8:98:65:
95:82:5a:4a:fc:42:9d:89:af:d1:16:c4:c1:67:28:
98:6e:3c:1b:3d:d0:75:8e:ca:b8:b4:b4:6d:3e:82:
a8:28:1e:37:42:05:6a:14:e2:00:68:3d:5c:04:26:
0f:1e:cd:61:d7:d2:9c:1b:44:ca:68:d4:70:52:db:
c8:c4:48:ae:ef:de:71:0a:98:e8:1d:18:a3:d2:16:
6c:c6:6d:45:81:4a:f5:68:d5:64:e6:9a:16:2e:21:
e0:26:71:91:7a:b2:2d:47:eb:d7:ff:22:38:22:ac:
91:aa:d3:08:7a:85:9b:ee:c5:5a:12:de:0f:e1:d0:
b3:92:22:ac:85:5b:b6:fe:87:0f:7f:81:bf:34:b6:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:95:B9:C0:8F:8B:30:CE:DB:C6:70:8D:F2:CD:5A:26:04:CA:E9:8A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/HJW5wI-LMM7bxnCN8s1aJgTK6Yo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4d:c5:0d:37:80:c2:03:80:05:3a:9b:14:5a:74:27:3e:7a:6a:
27:d1:fa:30:7e:d8:b2:14:c0:82:d1:80:7c:ca:c7:6c:c4:47:
f1:f6:f2:c2:b2:ca:85:e7:b6:8e:5f:b1:36:69:2a:45:54:85:
0c:e4:ad:b4:5e:6c:30:7d:f3:ad:d3:92:fd:29:00:c2:ca:d7:
59:2f:0e:3a:c5:59:6c:a6:fa:56:eb:61:55:05:03:c8:5b:38:
6e:13:3e:c7:a5:34:b3:29:cb:3b:80:75:e3:25:d5:6c:26:66:
30:83:f3:ae:1f:0e:74:52:5d:03:37:15:31:8c:e2:69:ab:b1:
ec:51:0a:4c:5f:f5:79:37:04:6f:a4:82:30:79:69:e3:8c:62:
43:71:68:82:6a:ab:fe:88:35:5e:3b:43:be:b8:fa:b6:6c:be:
cc:dc:49:7a:2d:53:49:94:83:07:74:b8:ce:c5:c5:e9:0c:22:
56:c2:b8:c8:87:52:d3:2d:9e:52:0a:30:a8:1d:29:38:e9:99:
07:cf:2b:b7:a2:f8:4b:81:23:40:4b:60:f8:84:94:f4:aa:75:
56:6f:98:d9:91:bd:3f:0c:62:9a:11:27:f0:a6:b0:3d:49:50:
e6:eb:72:16:ce:c3:76:9e:fc:72:f9:00:b8:e3:83:66:38:3e:
11:cd:ff:ed
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKqMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA4MDdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFDOTVCOUMwOEY4QjMw
Q0VEQkM2NzA4REYyQ0Q1QTI2MDRDQUU5OEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChEatoDUrKXaEHs9RzMz+7zR8UzdqPcvCVlSIAyW5qBwEQMVrO
tdQhj+aGK97bWLMGbVDeWnXTp5XmEwmJZAh4C+JiQraHCppwXVyC+1m1MPtloioO
1/vg3wUe9LW5++7aUf299O34W01/KEYGA5q7VBYYm9iYZZWCWkr8Qp2Jr9EWxMFn
KJhuPBs90HWOyri0tG0+gqgoHjdCBWoU4gBoPVwEJg8ezWHX0pwbRMpo1HBS28jE
SK7v3nEKmOgdGKPSFmzGbUWBSvVo1WTmmhYuIeAmcZF6si1H69f/IjgirJGq0wh6
hZvuxVoS3g/h0LOSIqyFW7b+hw9/gb80tmTdAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUHJW5wI+LMM7bxnCN8s1aJgTK6YowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0hKVzV3SS1MTU03YnhuQ044
czFhSmdUSzZZby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV2
6OAwDQYJKoZIhvcNAQELBQADggEBAE3FDTeAwgOABTqbFFp0Jz56aifR+jB+2LIU
wILRgHzKx2zER/H28sKyyoXnto5fsTZpKkVUhQzkrbRebDB9863Tkv0pAMLK11kv
DjrFWWym+lbrYVUFA8hbOG4TPselNLMpyzuAdeMl1WwmZjCD864fDnRSXQM3FTGM
4mmrsexRCkxf9Xk3BG+kgjB5aeOMYkNxaIJqq/6INV47Q764+rZsvszcSXotU0mU
gwd0uM7FxekMIlbCuMiHUtMtnlIKMKgdKTjpmQfPK7ei+EuBI0BLYPiElPSqdVZv
mNmRvT8MYpoRJ/CmsD1JUObrchbOw3ae/HL5ALjjg2Y4PhHN/+0=
-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:24 2024 by rpki-client on console-fra.rpki-client.org