Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MgJPzCyRZsf7HtSpyjBvH2yvEME.roa
File: MgJPzCyRZsf7HtSpyjBvH2yvEME.roa (raw, json)
Hash identifier: 3Qj4CsoYJmMQS6j+jGQ4eHSLARv715hNb0z9SnHFR9Y=
Subject key identifier: 32:02:4F:CC:2C:91:66:C7:FB:1E:D4:A9:CA:30:6F:1F:6C:AF:10:C1
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 352B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MgJPzCyRZsf7HtSpyjBvH2yvEME.roa
Signing time: Mon 10 Feb 2025 13:53:05 +0000
ROA not before: Mon 10 Feb 2025 13:53:05 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.195.160.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13611 (0x352b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:05 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=32024FCC2C9166C7FB1ED4A9CA306F1F6CAF10C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:07:1b:16:0d:81:d6:d2:9f:85:75:6d:6e:
6b:5e:2b:55:0e:e6:5c:fa:83:bf:99:34:d7:e1:ae:
dc:12:3b:da:b4:0e:e8:17:29:f1:98:4b:f9:95:ba:
7a:f7:b4:13:0e:e4:df:16:a7:cd:6a:4d:76:6f:53:
b7:94:c6:f4:ec:fa:a6:4e:b9:b6:6f:b3:ac:75:1b:
0c:90:b4:ab:86:65:ff:0b:ca:fb:1c:3d:02:12:c1:
d2:d8:18:da:63:8f:1b:30:7d:64:9b:af:40:e8:c5:
e8:cc:22:45:d0:82:1e:bd:70:bd:d3:cc:8f:98:79:
49:d7:9d:a3:d3:bb:93:1a:5a:20:49:e0:b8:42:f1:
66:5f:94:7f:ba:3b:eb:88:56:ae:cb:87:27:3b:c7:
94:66:0a:2a:a4:f4:27:93:36:dc:90:f3:10:0f:3c:
17:80:b7:17:e1:58:3c:75:ef:9f:68:95:38:ba:d9:
a5:11:79:3a:8b:79:d7:46:bd:a2:b1:f6:cc:6b:f5:
fb:3e:0c:6a:91:ae:82:e2:8e:8e:3f:44:e5:2e:11:
ba:12:1a:e3:7b:da:bd:4a:df:bc:a1:85:f6:c7:ec:
78:4a:e4:2c:5e:39:b3:8d:be:e4:40:03:35:05:ad:
9b:9a:87:98:25:f8:3f:dc:26:fc:58:74:63:cb:22:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:02:4F:CC:2C:91:66:C7:FB:1E:D4:A9:CA:30:6F:1F:6C:AF:10:C1
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/MgJPzCyRZsf7HtSpyjBvH2yvEME.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:4f:2d:54:f9:00:09:60:4e:56:b8:1b:0d:e1:81:1e:73:af:
93:81:16:fa:08:f2:09:2a:05:1b:05:c7:7b:8b:b5:09:89:7d:
ed:57:ad:17:46:28:58:17:1c:70:2b:de:9d:cc:9d:ad:f7:38:
7a:3e:3e:0e:a9:b4:5a:e6:08:5b:e5:77:3c:b5:05:b0:77:52:
71:3d:b8:b8:a2:49:55:02:3f:e0:d3:0b:5c:e5:c3:b8:5c:46:
f3:da:b4:d9:fa:dd:8e:73:6d:01:25:6f:d5:63:ab:91:3b:8f:
6e:79:0c:d3:d7:98:57:cc:49:46:8a:4b:ef:ee:35:8a:97:b4:
04:42:f7:28:e8:63:7a:b1:8e:80:4f:ff:98:bd:87:3d:ef:55:
b7:ec:56:ed:79:0d:b4:c9:e0:a4:6a:34:b2:a1:63:23:64:af:
87:08:a5:de:6b:de:08:11:4d:5a:db:1d:7a:b8:f8:84:fc:37:
30:78:77:40:70:cf:c0:4f:b3:6c:b0:d9:fe:cf:b9:2e:86:d4:
ae:bb:99:2d:fd:f7:f5:b7:45:71:d4:77:a4:4c:91:b1:ad:51:
8d:15:77:1a:35:78:60:4a:d3:a1:fb:df:70:93:0d:ba:44:49:
66:28:d7:c5:01:b0:8f:39:87:1d:93:f2:27:26:79:f6:00:87:
47:41:52:5f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNSswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMDVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDMyMDI0RkNDMkM5MTY2
QzdGQjFFRDRBOUNBMzA2RjFGNkNBRjEwQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcaQcbFg2B1tKfhXVtbmteK1UO5lz6g7+ZNNfhrtwSO9q0DugX
KfGYS/mVunr3tBMO5N8Wp81qTXZvU7eUxvTs+qZOubZvs6x1GwyQtKuGZf8Lyvsc
PQISwdLYGNpjjxswfWSbr0DoxejMIkXQgh69cL3TzI+YeUnXnaPTu5MaWiBJ4LhC
8WZflH+6O+uIVq7Lhyc7x5RmCiqk9CeTNtyQ8xAPPBeAtxfhWDx1759olTi62aUR
eTqLeddGvaKx9sxr9fs+DGqRroLijo4/ROUuEboSGuN72r1K37yhhfbH7HhK5Cxe
ObONvuRAAzUFrZuah5gl+D/cJvxYdGPLIuTrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUMgJPzCyRZsf7HtSpyjBvH2yvEMEwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL01nSlB6Q3lSWnNmN0h0U3B5
akJ2SDJ5dkVNRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
w6AwDQYJKoZIhvcNAQELBQADggEBAC9PLVT5AAlgTla4Gw3hgR5zr5OBFvoI8gkq
BRsFx3uLtQmJfe1XrRdGKFgXHHAr3p3Mna33OHo+Pg6ptFrmCFvldzy1BbB3UnE9
uLiiSVUCP+DTC1zlw7hcRvPatNn63Y5zbQElb9Vjq5E7j255DNPXmFfMSUaKS+/u
NYqXtARC9yjoY3qxjoBP/5i9hz3vVbfsVu15DbTJ4KRqNLKhYyNkr4cIpd5r3ggR
TVrbHXq4+IT8NzB4d0Bwz8BPs2yw2f7PuS6G1K67mS399/W3RXHUd6RMkbGtUY0V
dxo1eGBK06H733CTDbpESWYo18UBsI85hx2T8icmefYAh0dBUl8=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:08 2025 by rpki-client