Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZvrRjTaTr0zveRYJ5_0Z-ViEJc.roa
File: IZvrRjTaTr0zveRYJ5_0Z-ViEJc.roa (raw, json)
Hash identifier: YMqO5IH7pVwj2clnvsLRrh+hI7sp4f0jKWvYu7Dh694=
Subject key identifier: 21:9B:EB:46:34:DA:4E:BD:33:BD:E4:58:27:9F:F4:67:E5:62:10:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3398
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZvrRjTaTr0zveRYJ5_0Z-ViEJc.roa
Signing time: Mon 10 Feb 2025 13:51:35 +0000
ROA not before: Mon 10 Feb 2025 13:51:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13208 (0x3398)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=219BEB4634DA4EBD33BDE458279FF467E5621097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:40:b9:48:8e:20:1f:cf:74:9d:29:3f:75:80:
37:37:71:42:47:14:8d:bc:50:0e:59:a9:44:c0:b8:
b9:50:8e:ee:ac:61:3a:56:a3:a3:6d:64:f0:dd:04:
b0:c0:42:50:a4:1d:a1:76:cc:50:cd:98:a2:20:52:
63:15:90:4b:fa:8a:5d:4d:81:1c:d9:89:d7:96:36:
09:a4:59:4e:72:8c:89:97:3c:b2:59:a1:94:7a:18:
65:94:9d:32:47:ac:b7:03:7b:7e:61:c0:4c:b6:51:
e4:f4:58:23:0d:39:07:ef:ab:4d:47:fb:9c:45:82:
69:75:12:9a:8d:68:c6:08:69:77:6f:a8:26:5d:5a:
e2:9e:79:25:e3:88:e6:49:d5:2c:05:dc:6e:02:77:
38:1e:93:eb:70:5c:f7:a5:31:79:bb:45:4d:8e:56:
88:b3:55:04:e4:47:e0:03:99:c0:b2:31:8b:2c:b5:
d0:1a:9f:90:53:ce:40:5c:d0:9c:04:9e:5c:7f:0b:
2f:c0:75:7c:e3:9d:b5:65:5c:db:75:5c:48:82:b2:
21:63:15:32:90:7e:19:74:20:9a:3d:18:36:cb:05:
ad:30:ca:8d:74:10:89:8a:38:b3:ca:19:48:30:56:
ed:7e:35:bd:ea:58:c7:74:28:89:d8:37:d1:8e:dc:
e6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9B:EB:46:34:DA:4E:BD:33:BD:E4:58:27:9F:F4:67:E5:62:10:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/IZvrRjTaTr0zveRYJ5_0Z-ViEJc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.223.0/24
Signature Algorithm: sha256WithRSAEncryption
38:68:63:93:d4:c3:9b:54:24:4d:ac:ad:48:b9:fd:62:46:1e:
5b:1d:0f:95:0f:c0:b7:62:23:98:4c:3a:f1:9f:d1:94:a0:c5:
f5:33:c3:52:99:dd:c6:52:90:00:97:1e:d0:48:57:88:fb:bf:
2f:4c:1a:56:3f:ee:a9:90:0c:a2:16:b8:0c:30:92:04:92:84:
57:6b:ae:20:de:65:d4:5a:b7:18:e4:a4:fe:e1:28:5f:36:53:
65:29:86:1f:c5:b8:a6:aa:64:a0:b9:07:47:4a:4e:d4:e8:ed:
cc:14:19:5a:2d:17:a8:60:f7:05:fc:92:b3:21:65:7d:7b:4f:
3e:45:81:17:1b:9d:b7:da:17:73:52:72:7c:df:af:bd:25:70:
69:c5:0d:f2:d0:ac:4b:29:58:f5:a6:53:e0:8e:86:86:2a:84:
3d:30:78:0c:64:22:25:c0:33:bd:bb:85:d5:80:bb:c3:5e:90:
b4:8e:73:df:f7:fd:68:bb:a1:57:2a:63:3b:78:8f:c5:ee:55:
2b:07:2d:65:b1:dd:e1:48:09:61:1a:87:ca:0b:47:f8:4b:18:
f4:92:11:94:7b:72:2e:94:6d:e0:4c:1b:03:e5:41:56:58:72:
b7:2c:48:a4:cd:58:69:56:67:86:37:a4:18:c9:90:5c:bd:d1:
b8:00:7b:66
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxMzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDIxOUJFQjQ2MzREQTRF
QkQzM0JERTQ1ODI3OUZGNDY3RTU2MjEwOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUQLlIjiAfz3SdKT91gDc3cUJHFI28UA5ZqUTAuLlQju6sYTpW
o6NtZPDdBLDAQlCkHaF2zFDNmKIgUmMVkEv6il1NgRzZideWNgmkWU5yjImXPLJZ
oZR6GGWUnTJHrLcDe35hwEy2UeT0WCMNOQfvq01H+5xFgml1EpqNaMYIaXdvqCZd
WuKeeSXjiOZJ1SwF3G4Cdzgek+twXPelMXm7RU2OVoizVQTkR+ADmcCyMYsstdAa
n5BTzkBc0JwEnlx/Cy/AdXzjnbVlXNt1XEiCsiFjFTKQfhl0IJo9GDbLBa0wyo10
EImKOLPKGUgwVu1+Nb3qWMd0KInYN9GO3ObBAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUIZvrRjTaTr0zveRYJ5/0Z+ViEJcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0ladnJSalRhVHIwenZlUllK
NV8wWi1WaUVKYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
wd8wDQYJKoZIhvcNAQELBQADggEBADhoY5PUw5tUJE2srUi5/WJGHlsdD5UPwLdi
I5hMOvGf0ZSgxfUzw1KZ3cZSkACXHtBIV4j7vy9MGlY/7qmQDKIWuAwwkgSShFdr
riDeZdRatxjkpP7hKF82U2Uphh/FuKaqZKC5B0dKTtTo7cwUGVotF6hg9wX8krMh
ZX17Tz5FgRcbnbfaF3NScnzfr70lcGnFDfLQrEspWPWmU+COhoYqhD0weAxkIiXA
M727hdWAu8NekLSOc9/3/Wi7oVcqYzt4j8XuVSsHLWWx3eFICWEah8oLR/hLGPSS
EZR7ci6UbeBMGwPlQVZYcrcsSKTNWGlWZ4Y3pBjJkFy90bgAe2Y=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:06 2025 by rpki-client