Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JMu6-yRJArQvq8ME5wWxXca7Zgc.roa
File: JMu6-yRJArQvq8ME5wWxXca7Zgc.roa (raw, json)
Hash identifier: xqKFjw+0h9MCwGd3NSvcEqNCi3uF6Zqm8I2ZvXLT2tI=
Subject key identifier: 24:CB:BA:FB:24:49:02:B4:2F:AB:C3:04:E7:05:B1:5D:C6:BB:66:07
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 337E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JMu6-yRJArQvq8ME5wWxXca7Zgc.roa
Signing time: Mon 10 Feb 2025 13:51:29 +0000
ROA not before: Mon 10 Feb 2025 13:51:29 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.16.0/20 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13182 (0x337e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:29 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=24CBBAFB244902B42FABC304E705B15DC6BB6607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:4e:ba:65:09:14:61:eb:60:81:0f:19:39:
5f:0d:6f:65:da:c7:10:06:cc:20:22:f3:6a:ba:3c:
36:2a:e0:a1:ff:79:42:7f:26:60:11:22:8b:e1:dc:
51:7d:81:44:fe:c9:04:fd:1b:ae:26:3a:d3:4b:b0:
61:b6:c4:ac:03:9d:e5:63:c2:06:76:4d:ab:76:3b:
d9:fa:01:eb:d6:d9:55:1f:1f:49:46:59:e8:d7:a0:
84:e4:00:0a:71:bf:6b:08:73:6a:e9:fa:56:fd:2a:
db:54:c5:c2:fd:02:72:f8:85:c9:6f:bb:e2:0e:5c:
61:5c:55:24:e4:db:e2:b4:07:16:5a:eb:77:d6:8e:
a7:f7:b1:e0:70:06:ce:7d:e6:83:51:4b:cc:cc:5d:
f9:aa:ec:0c:ff:ba:05:24:d7:21:db:92:d2:64:4f:
43:63:82:a5:3d:64:19:f8:f4:43:07:84:6d:4f:e8:
98:42:96:5b:e7:e3:f8:1e:20:b9:57:89:37:ca:d8:
0d:37:0e:7d:a0:61:86:f9:58:8d:fe:d1:8f:ab:09:
8e:46:2d:23:a9:15:aa:25:d5:78:0d:a0:d6:59:87:
f1:fb:9a:83:4c:12:3e:99:95:1d:eb:92:9e:34:ba:
17:ba:a0:f4:31:7b:4b:08:48:3e:ab:23:af:d4:cd:
6a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:CB:BA:FB:24:49:02:B4:2F:AB:C3:04:E7:05:B1:5D:C6:BB:66:07
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JMu6-yRJArQvq8ME5wWxXca7Zgc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.16.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:92:08:7b:3e:cf:f7:15:4a:33:4e:6a:e1:cd:85:4f:76:42:
00:41:de:66:a2:5c:32:c9:41:b8:db:a0:0f:9d:c2:45:13:23:
9e:e1:9f:b7:4b:20:57:64:7b:8f:b4:78:c9:d4:a1:91:e4:a8:
5e:46:ad:47:a4:48:19:54:7b:37:6e:ac:01:ea:17:e8:66:f1:
08:d8:3a:87:a1:f5:ec:a8:28:fd:bb:95:64:08:82:6e:c8:fd:
ff:ec:90:5e:38:ef:45:dc:82:58:ff:e1:ac:7e:a2:ef:e5:9a:
40:7a:97:2d:07:9f:67:60:68:55:1f:f7:9b:58:b4:f8:60:61:
da:bd:1e:90:44:a0:ac:50:a0:c1:96:7d:ad:60:ab:ea:0b:b0:
f7:1c:92:81:0c:7a:2e:4d:da:f3:f6:c0:ae:44:26:fa:36:ed:
7c:e6:d0:ad:fa:bd:02:e1:7a:1b:e5:28:c1:03:3f:71:bd:ad:
e2:cd:3d:1c:9c:3e:44:b6:99:28:81:fc:77:ec:b0:f0:7b:eb:
0d:86:19:e4:6a:5d:e4:c7:7b:08:d9:4c:47:df:77:43:58:bb:
d5:af:c7:e0:22:38:51:82:fe:91:9b:39:59:79:08:d2:5a:c5:
01:7c:61:07:90:80:3e:e9:83:a6:17:aa:b1:b3:a6:0e:02:6f:
55:82:30:35
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM34wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxMjlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI0Q0JCQUZCMjQ0OTAy
QjQyRkFCQzMwNEU3MDVCMTVEQzZCQjY2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBqU66ZQkUYetggQ8ZOV8Nb2XaxxAGzCAi82q6PDYq4KH/eUJ/
JmARIovh3FF9gUT+yQT9G64mOtNLsGG2xKwDneVjwgZ2Tat2O9n6AevW2VUfH0lG
WejXoITkAApxv2sIc2rp+lb9KttUxcL9AnL4hclvu+IOXGFcVSTk2+K0BxZa63fW
jqf3seBwBs595oNRS8zMXfmq7Az/ugUk1yHbktJkT0NjgqU9ZBn49EMHhG1P6JhC
llvn4/geILlXiTfK2A03Dn2gYYb5WI3+0Y+rCY5GLSOpFaol1XgNoNZZh/H7moNM
Ej6ZlR3rkp40uhe6oPQxe0sISD6rI6/UzWq/AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJMu6+yRJArQvq8ME5wWxXca7ZgcwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0pNdTYteVJKQXJRdnE4TUU1
d1d4WGNhN1pnYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAR7
whAwDQYJKoZIhvcNAQELBQADggEBAKOSCHs+z/cVSjNOauHNhU92QgBB3maiXDLJ
QbjboA+dwkUTI57hn7dLIFdke4+0eMnUoZHkqF5GrUekSBlUezdurAHqF+hm8QjY
Ooeh9eyoKP27lWQIgm7I/f/skF4470Xcglj/4ax+ou/lmkB6ly0Hn2dgaFUf95tY
tPhgYdq9HpBEoKxQoMGWfa1gq+oLsPcckoEMei5N2vP2wK5EJvo27Xzm0K36vQLh
ehvlKMEDP3G9reLNPRycPkS2mSiB/HfssPB76w2GGeRqXeTHewjZTEffd0NYu9Wv
x+AiOFGC/pGbOVl5CNJaxQF8YQeQgD7pg6YXqrGzpg4Cb1WCMDU=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:13 2025 by rpki-client