Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J-LOZgCiAkXW1MPpH68_9fil9H8.roa
File: J-LOZgCiAkXW1MPpH68_9fil9H8.roa (raw, json)
Hash identifier: BmNn+zf3F0GhuMJoEhEtsqn124qslxoLE53RIG6G3FM=
Subject key identifier: 27:E2:CE:66:00:A2:02:45:D6:D4:C3:E9:1F:AF:3F:F5:F8:A5:F4:7F
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33B9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J-LOZgCiAkXW1MPpH68_9fil9H8.roa
Signing time: Mon 10 Feb 2025 13:51:42 +0000
ROA not before: Mon 10 Feb 2025 13:51:42 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.160.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13241 (0x33b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:42 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=27E2CE6600A20245D6D4C3E91FAF3FF5F8A5F47F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:8d:00:92:71:0d:c7:6d:f9:ce:6d:5a:48:
6e:3a:d7:3c:96:0e:ed:2c:e3:8c:d1:74:94:9a:ad:
5d:43:9b:47:4d:4e:a6:20:0e:8d:88:7e:7d:64:fb:
44:13:21:bd:ff:53:e2:fe:95:a2:54:e2:81:54:b5:
82:5f:36:b2:60:62:47:18:69:02:1f:6a:93:98:17:
73:a2:78:7d:e9:b9:f4:e3:ef:9a:03:4b:69:b5:76:
04:e8:0d:78:90:2b:61:56:42:96:ee:4f:64:bc:a4:
0f:cc:1a:1e:8b:bf:61:94:94:77:12:3f:e9:7d:d4:
43:f6:69:df:83:db:6c:35:8f:45:07:d5:00:15:54:
b7:ca:9d:98:a0:8f:52:3c:ca:2d:0f:6a:e2:05:6b:
3e:54:cb:2c:21:71:75:d5:9d:b2:41:f1:ab:75:a0:
ad:21:f0:48:7c:c5:a0:0a:c5:b2:82:75:66:8b:41:
10:55:a5:4b:e2:82:16:eb:fc:4a:1e:ea:fe:8d:ec:
c2:a1:65:f3:cd:c3:fd:ea:e3:07:c5:7e:60:98:fa:
91:a2:7e:9a:73:b1:27:36:88:af:90:50:1e:84:f9:
4d:69:8a:7a:32:49:eb:46:43:d5:df:02:93:ba:d9:
4c:62:d1:f5:d5:47:d5:62:11:67:e7:cb:82:cf:6d:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E2:CE:66:00:A2:02:45:D6:D4:C3:E9:1F:AF:3F:F5:F8:A5:F4:7F
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/J-LOZgCiAkXW1MPpH68_9fil9H8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.160.0/20
Signature Algorithm: sha256WithRSAEncryption
78:5d:86:01:73:15:14:42:6c:3f:65:2f:85:b3:3f:12:90:77:
87:b2:27:a4:88:cc:ac:70:59:9b:f4:a3:d2:11:30:68:93:4d:
0e:7e:49:0b:c9:19:ba:a6:22:8b:33:cd:83:02:c6:61:f5:6f:
9a:ab:e4:40:ce:23:6d:a8:13:38:92:b6:f7:a0:8c:19:25:83:
de:db:5a:23:80:2b:29:b3:32:3a:66:87:ed:89:34:9a:82:dd:
5c:36:d0:58:bc:a1:75:f8:66:bb:85:df:dd:97:70:c3:37:fb:
05:57:9a:88:06:7a:21:1e:8a:30:84:26:af:b2:b3:b1:20:7f:
e7:fc:bf:9c:f1:5e:22:75:bf:27:1e:f8:8b:f0:62:89:11:7a:
9f:4c:91:9b:88:4e:51:dc:ad:77:84:e9:1c:d4:47:e3:f1:a5:
47:4e:64:6b:02:48:ca:2d:d9:ab:ae:29:7d:fc:aa:c0:ef:9b:
e6:62:6c:60:43:39:2b:42:c5:04:8d:85:04:88:f6:93:e4:f4:
5f:5f:8c:fa:f5:94:89:f4:7e:58:70:97:3d:d5:0b:2d:08:43:
30:f8:14:72:69:e2:9d:d6:e6:f1:19:68:9d:29:92:db:5d:2b:
7c:2f:2e:81:0a:86:31:2b:8c:af:d1:4c:fb:ee:84:bb:97:5a:
d4:f6:3c:cd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM7kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxNDJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI3RTJDRTY2MDBBMjAy
NDVENkQ0QzNFOTFGQUYzRkY1RjhBNUY0N0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC3I0AknENx235zm1aSG461zyWDu0s44zRdJSarV1Dm0dNTqYg
Do2Ifn1k+0QTIb3/U+L+laJU4oFUtYJfNrJgYkcYaQIfapOYF3OieH3pufTj75oD
S2m1dgToDXiQK2FWQpbuT2S8pA/MGh6Lv2GUlHcSP+l91EP2ad+D22w1j0UH1QAV
VLfKnZigj1I8yi0PauIFaz5UyywhcXXVnbJB8at1oK0h8Eh8xaAKxbKCdWaLQRBV
pUvighbr/Eoe6v6N7MKhZfPNw/3q4wfFfmCY+pGifppzsSc2iK+QUB6E+U1pinoy
SetGQ9XfApO62Uxi0fXVR9ViEWfny4LPbRnFAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJ+LOZgCiAkXW1MPpH68/9fil9H8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0otTE9aZ0NpQWtYVzFNUHBI
NjhfOWZpbDlIOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
waAwDQYJKoZIhvcNAQELBQADggEBAHhdhgFzFRRCbD9lL4WzPxKQd4eyJ6SIzKxw
WZv0o9IRMGiTTQ5+SQvJGbqmIoszzYMCxmH1b5qr5EDOI22oEziStvegjBklg97b
WiOAKymzMjpmh+2JNJqC3Vw20Fi8oXX4ZruF392XcMM3+wVXmogGeiEeijCEJq+y
s7Egf+f8v5zxXiJ1vyce+IvwYokRep9MkZuITlHcrXeE6RzUR+PxpUdOZGsCSMot
2auuKX38qsDvm+ZibGBDOStCxQSNhQSI9pPk9F9fjPr1lIn0flhwlz3VCy0IQzD4
FHJp4p3W5vEZaJ0pkttdK3wvLoEKhjErjK/RTPvuhLuXWtT2PM0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:11 2025 by rpki-client