Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JnBL28QXSEoFBxaZ3zzlnPOrFcs.roa
File: JnBL28QXSEoFBxaZ3zzlnPOrFcs.roa (raw, json)
Hash identifier: cmcCo8cge0XPhvZFCoxdAaOWgNRYu43J+qTo41Oa7M0=
Subject key identifier: 26:70:4B:DB:C4:17:48:4A:05:07:16:99:DF:3C:E5:9C:F3:AB:15:CB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36DB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JnBL28QXSEoFBxaZ3zzlnPOrFcs.roa
Signing time: Mon 10 Feb 2025 13:54:45 +0000
ROA not before: Mon 10 Feb 2025 13:54:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14043 (0x36db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=26704BDBC417484A05071699DF3CE59CF3AB15CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:57:38:83:9d:78:45:3a:fc:85:9e:80:cf:
83:dc:a4:ca:e3:de:23:c1:46:c8:03:26:6c:02:35:
4e:29:d0:f6:59:62:b1:55:71:c0:e2:d4:9f:5a:f7:
80:b7:f4:15:7d:a7:86:11:a2:6c:b4:1f:92:75:0d:
b9:52:4a:b0:35:d6:29:99:d4:f9:7a:b0:71:23:c2:
27:d0:76:b8:46:5e:41:0f:5d:b2:8c:42:b5:a2:3c:
b7:a7:79:a1:79:a4:ec:94:ca:47:c4:08:c8:7c:b1:
97:0d:f8:6d:36:97:c9:61:fc:9a:72:8c:41:d3:c7:
49:55:11:d2:52:28:2c:b2:fd:00:28:7a:71:1d:ef:
fd:f8:00:7d:89:9b:58:e3:07:a8:56:f5:4b:4f:fe:
b9:2d:24:3f:2e:3a:ff:42:7d:0b:13:e6:c4:fe:3e:
88:3c:15:59:59:3f:24:3d:ea:e9:29:26:75:b6:e5:
a5:85:9d:72:55:1d:eb:8a:b2:ea:49:ad:42:c8:08:
77:4e:45:17:d0:64:fa:e3:f2:1e:5a:89:f4:c8:f4:
70:56:76:64:14:88:25:10:3c:f9:cd:cf:d6:bd:d3:
15:6f:2e:6e:60:17:65:a7:25:a3:bf:ec:09:d8:3f:
b7:39:50:76:8e:04:80:f5:1f:a2:c8:cc:85:a0:f1:
63:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:4B:DB:C4:17:48:4A:05:07:16:99:DF:3C:E5:9C:F3:AB:15:CB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/JnBL28QXSEoFBxaZ3zzlnPOrFcs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:05:74:42:e1:6e:2b:c2:b4:ea:f1:26:f8:a0:a4:6f:e9:5c:
57:0d:20:3c:65:63:e7:92:7b:19:83:b2:02:52:7a:b0:fe:da:
62:41:82:19:4d:80:71:69:79:66:cd:e3:80:7c:7f:48:46:87:
db:b2:8a:1a:b6:ac:f4:5d:bb:35:a0:aa:52:ba:f1:22:0c:8a:
f0:7b:9e:94:96:28:96:bb:79:ef:cc:e9:fe:3a:1c:34:56:ca:
9d:00:b2:b7:c1:72:9f:a8:63:9d:c0:bf:ff:48:31:af:a9:20:
4e:55:b7:35:de:63:46:84:18:5a:dc:aa:7c:ab:fa:cc:35:9b:
74:e9:5a:c0:43:1a:43:aa:57:11:e0:16:2a:ed:91:e3:29:9f:
b8:ce:43:a4:45:1a:96:e4:58:9e:32:5c:a5:98:21:75:cb:2d:
52:94:a4:b5:b9:09:ab:23:04:2c:f9:af:3b:cc:82:22:a2:68:
18:1f:55:c3:18:7f:28:c0:19:46:9c:d0:7c:50:37:44:60:47:
c2:50:41:1e:8f:0b:c5:95:c7:b3:0e:df:bd:76:c5:b3:f7:4e:
45:0e:19:89:41:4b:6b:d6:24:da:dd:98:1b:f5:31:8a:62:c5:
e6:ca:9b:e2:09:bc:ac:b8:3e:36:29:20:49:5b:a0:9e:b5:ef:
b0:5a:98:0c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNtswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0NDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDI2NzA0QkRCQzQxNzQ4
NEEwNTA3MTY5OURGM0NFNTlDRjNBQjE1Q0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvclc4g514RTr8hZ6Az4PcpMrj3iPBRsgDJmwCNU4p0PZZYrFV
ccDi1J9a94C39BV9p4YRomy0H5J1DblSSrA11imZ1Pl6sHEjwifQdrhGXkEPXbKM
QrWiPLeneaF5pOyUykfECMh8sZcN+G02l8lh/JpyjEHTx0lVEdJSKCyy/QAoenEd
7/34AH2Jm1jjB6hW9UtP/rktJD8uOv9CfQsT5sT+Pog8FVlZPyQ96ukpJnW25aWF
nXJVHeuKsupJrULICHdORRfQZPrj8h5aifTI9HBWdmQUiCUQPPnNz9a90xVvLm5g
F2WnJaO/7AnYP7c5UHaOBID1H6LIzIWg8WPDAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUJnBL28QXSEoFBxaZ3zzlnPOrFcswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0puQkwyOFFYU0VvRkJ4YVoz
enpsblBPckZjcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wxwwDQYJKoZIhvcNAQELBQADggEBAG4FdELhbivCtOrxJvigpG/pXFcNIDxlY+eS
exmDsgJSerD+2mJBghlNgHFpeWbN44B8f0hGh9uyihq2rPRduzWgqlK68SIMivB7
npSWKJa7ee/M6f46HDRWyp0AsrfBcp+oY53Av/9IMa+pIE5VtzXeY0aEGFrcqnyr
+sw1m3TpWsBDGkOqVxHgFirtkeMpn7jOQ6RFGpbkWJ4yXKWYIXXLLVKUpLW5Casj
BCz5rzvMgiKiaBgfVcMYfyjAGUac0HxQN0RgR8JQQR6PC8WVx7MO3712xbP3TkUO
GYlBS2vWJNrdmBv1MYpixebKm+IJvKy4PjYpIElboJ6177BamAw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:12 2025 by rpki-client