Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjeQ77YfGNItJUsw-pZ-HH4z2mI.roa
File: PjeQ77YfGNItJUsw-pZ-HH4z2mI.roa (raw, json)
Hash identifier: mduSfsBv2qY0gYtQ1+SbF4ln4LSQ2NjlWSTIb+dVekg=
Subject key identifier: 3E:37:90:EF:B6:1F:18:D2:2D:25:4B:30:FA:96:7E:1C:7E:33:DA:62
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3502
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjeQ77YfGNItJUsw-pZ-HH4z2mI.roa
Signing time: Mon 10 Feb 2025 13:52:55 +0000
ROA not before: Mon 10 Feb 2025 13:52:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 211.76.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13570 (0x3502)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:55 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3E3790EFB61F18D22D254B30FA967E1C7E33DA62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:98:c0:ad:74:18:a6:33:f9:c1:42:d9:53:23:
f4:e8:18:a4:57:0f:8b:8f:e6:d9:6d:eb:2b:50:13:
9f:38:1d:09:bf:b6:fa:29:96:58:70:56:be:9f:af:
8a:2e:fb:ef:41:d8:a0:96:e3:dd:75:9c:c2:d4:70:
04:99:4c:8f:f0:28:06:21:a4:d7:2b:9a:4e:a9:be:
ca:dd:29:6e:9e:e7:c2:e4:f9:4e:68:89:71:a5:ba:
ef:ad:5b:ea:82:1c:73:1d:72:04:ed:99:20:fc:be:
41:af:21:f6:5d:60:e7:3c:59:26:74:39:df:fb:e6:
cf:b8:d0:33:06:4d:15:42:e7:bb:94:5e:51:72:ec:
f7:df:57:df:ed:d4:99:94:6c:0c:c1:17:3e:e2:42:
e3:8e:b4:d4:50:60:3b:8a:42:1a:90:9d:d8:22:2a:
b9:9f:12:b9:07:e2:10:02:bd:79:a6:80:e3:af:96:
c3:69:bc:59:02:27:14:d4:b0:62:80:22:7c:b3:02:
11:02:a4:d9:00:61:c3:5d:7c:60:d5:49:ad:64:39:
b7:63:ec:96:d6:33:41:fa:b6:ef:36:51:47:35:22:
b4:37:08:e2:c0:86:ce:93:ea:82:ca:68:42:29:ad:
bd:d5:89:22:70:7f:30:d0:b1:03:c1:a8:ab:78:6f:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:37:90:EF:B6:1F:18:D2:2D:25:4B:30:FA:96:7E:1C:7E:33:DA:62
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/PjeQ77YfGNItJUsw-pZ-HH4z2mI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.76.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:42:45:e2:bc:24:71:29:cc:d4:15:fa:be:55:72:c5:e0:18:
fe:bf:45:f1:1d:ca:84:5b:94:ca:e3:27:44:13:d7:f9:ac:00:
82:29:48:40:ed:ef:62:6d:e1:ed:19:00:8d:e1:0c:62:c5:59:
45:63:47:65:55:eb:13:4a:bd:d6:bf:f3:3a:69:68:8e:c8:cc:
53:ef:00:3f:bd:18:f6:b9:cf:e9:74:8e:3d:4f:c6:d2:93:d5:
08:bb:40:a4:d2:14:44:31:48:33:70:57:0d:cd:0c:bd:59:fd:
d8:f3:15:84:3a:62:79:bc:f2:f6:38:4d:1b:88:d3:14:eb:b2:
7f:b8:0b:70:a9:52:32:d5:1b:82:13:d1:af:6d:e0:5f:df:80:
42:0c:cb:bb:65:82:3f:28:b3:d8:a3:2c:a2:aa:5e:e5:c3:0a:
de:18:0a:0c:b2:42:dd:ba:58:98:a4:32:9c:39:dc:e6:e9:80:
c9:f6:d7:08:a9:4b:14:3f:2d:36:bd:a6:cc:b0:46:a9:e0:da:
01:17:b8:0d:6b:e3:8a:7a:39:c7:da:a7:dd:34:b4:92:e9:cf:
36:53:2f:9a:f2:52:0a:bf:cf:a7:27:42:b1:de:1c:9f:ea:8f:
e6:a1:24:39:19:38:8d:bf:87:0c:bd:29:68:1c:e5:a7:fd:a5:
d1:7c:ea:c8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyNTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNFMzc5MEVGQjYxRjE4
RDIyRDI1NEIzMEZBOTY3RTFDN0UzM0RBNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPmMCtdBimM/nBQtlTI/ToGKRXD4uP5tlt6ytQE584HQm/tvop
llhwVr6fr4ou++9B2KCW4911nMLUcASZTI/wKAYhpNcrmk6pvsrdKW6e58Lk+U5o
iXGluu+tW+qCHHMdcgTtmSD8vkGvIfZdYOc8WSZ0Od/75s+40DMGTRVC57uUXlFy
7PffV9/t1JmUbAzBFz7iQuOOtNRQYDuKQhqQndgiKrmfErkH4hACvXmmgOOvlsNp
vFkCJxTUsGKAInyzAhECpNkAYcNdfGDVSa1kObdj7JbWM0H6tu82UUc1IrQ3COLA
hs6T6oLKaEIprb3ViSJwfzDQsQPBqKt4b9iHAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUPjeQ77YfGNItJUsw+pZ+HH4z2mIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1BqZVE3N1lmR05JdEpVc3ct
cFotSEg0ejJtSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADT
THEwDQYJKoZIhvcNAQELBQADggEBAH1CReK8JHEpzNQV+r5VcsXgGP6/RfEdyoRb
lMrjJ0QT1/msAIIpSEDt72Jt4e0ZAI3hDGLFWUVjR2VV6xNKvda/8zppaI7IzFPv
AD+9GPa5z+l0jj1PxtKT1Qi7QKTSFEQxSDNwVw3NDL1Z/djzFYQ6Ynm88vY4TRuI
0xTrsn+4C3CpUjLVG4IT0a9t4F/fgEIMy7tlgj8os9ijLKKqXuXDCt4YCgyyQt26
WJikMpw53ObpgMn21wipSxQ/LTa9psywRqng2gEXuA1r44p6Ocfap900tJLpzzZT
L5ryUgq/z6cnQrHeHJ/qj+ahJDkZOI2/hwy9KWgc5af9pdF86sg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:08 2025 by rpki-client