Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SoIzzTXcT0uPNKwgVqmnHRjDKsQ.roa
File: SoIzzTXcT0uPNKwgVqmnHRjDKsQ.roa (raw, json)
Hash identifier: dR4SrHliIT5PsY1QlGWtNEqb2wVpLnLIfLAAfY2Ox/8=
Subject key identifier: 4A:82:33:CD:35:DC:4F:4B:8F:34:AC:20:56:A9:A7:1D:18:C3:2A:C4
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 36D7
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SoIzzTXcT0uPNKwgVqmnHRjDKsQ.roa
Signing time: Mon 10 Feb 2025 13:54:44 +0000
ROA not before: Mon 10 Feb 2025 13:54:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.204.64/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14039 (0x36d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:54:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=4A8233CD35DC4F4B8F34AC2056A9A71D18C32AC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f8:6b:76:c1:e8:26:74:c2:d9:da:11:c4:58:
29:41:b6:08:6c:20:44:7e:e3:8f:c2:0b:28:a9:42:
dd:8c:4c:d0:f5:90:4a:85:94:84:44:cf:ef:20:d9:
09:49:a7:d5:7d:5d:1b:90:bf:e2:1e:0e:7d:97:d1:
34:4b:37:02:a8:e7:50:92:38:1f:ec:43:e6:a1:ad:
96:a8:13:ff:97:c2:9b:1d:d8:0c:34:15:ac:e2:bd:
14:eb:40:61:fe:72:7b:64:8b:53:1e:76:1a:6d:7a:
3a:2c:90:c2:66:57:92:6e:0e:c0:b4:89:7b:c5:cc:
69:3b:bf:5e:39:47:a3:28:91:39:b2:a4:fa:1a:67:
fe:94:22:7d:9d:f6:95:fa:7d:fe:79:5d:5b:2d:b6:
87:76:d2:26:63:3f:06:a8:e5:47:bf:74:46:13:70:
55:c6:35:c1:4f:b0:73:5c:cc:0b:37:81:22:25:ff:
c0:39:2b:cf:eb:34:6e:b4:c9:0a:a2:fd:b3:f1:34:
ed:1b:b1:bf:79:c3:46:3e:be:e3:28:f1:33:74:81:
88:bf:b0:68:60:ff:09:ba:cd:51:a6:80:a9:6e:90:
39:51:4d:be:99:80:95:27:5e:cb:df:97:c9:ea:53:
13:c1:1a:f8:3f:2f:c5:26:c9:9f:ed:06:20:2e:3d:
cf:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:82:33:CD:35:DC:4F:4B:8F:34:AC:20:56:A9:A7:1D:18:C3:2A:C4
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/SoIzzTXcT0uPNKwgVqmnHRjDKsQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.204.64/27
Signature Algorithm: sha256WithRSAEncryption
89:10:e8:76:e1:50:4e:9e:a7:de:5e:ee:c6:fe:f1:3b:6b:9c:
67:d7:5f:e0:9e:21:9b:4f:fc:71:02:41:1f:e5:40:34:f1:b1:
90:f4:26:54:c6:88:d0:99:ad:64:af:1b:e9:24:40:46:78:0e:
a6:5c:ca:1e:d7:e7:f4:cc:1a:e2:b6:41:02:6e:ab:96:85:2d:
d2:30:90:57:d4:23:d3:d0:5e:61:06:36:96:c0:bc:74:81:c4:
04:ff:b0:56:c9:64:7f:9c:96:f7:ca:21:f4:1e:70:f6:18:07:
c9:08:84:9f:71:8a:40:fb:af:d6:21:7b:ac:c9:5c:2d:d8:31:
55:ca:c8:ab:31:5e:75:f0:63:83:0d:6b:d6:0a:18:b6:0d:70:
90:71:a2:2f:76:3c:55:70:bc:f5:3d:a4:d3:37:08:b2:28:08:
78:73:86:ca:2f:cf:8d:49:58:18:94:42:90:65:bd:15:ac:4e:
86:31:23:b0:28:c3:0a:85:e3:c4:32:67:8d:45:85:72:d0:cb:
bf:66:e9:7e:81:45:a7:8a:16:14:d7:bb:33:4d:f4:e8:d5:02:
40:59:68:6b:82:8b:52:c0:26:ed:0b:22:fe:22:26:b8:3e:10:
76:14:4d:6b:42:43:ab:e7:b8:f8:03:b7:52:0d:68:8a:ca:d5:
48:2d:7e:4f
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICNtcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzU0NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDRBODIzM0NEMzVEQzRG
NEI4RjM0QUMyMDU2QTlBNzFEMThDMzJBQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDq+Gt2wegmdMLZ2hHEWClBtghsIER+44/CCyipQt2MTND1kEqF
lIREz+8g2QlJp9V9XRuQv+IeDn2X0TRLNwKo51CSOB/sQ+ahrZaoE/+Xwpsd2Aw0
FazivRTrQGH+cntki1MedhptejoskMJmV5JuDsC0iXvFzGk7v145R6MokTmypPoa
Z/6UIn2d9pX6ff55XVsttod20iZjPwao5Ue/dEYTcFXGNcFPsHNczAs3gSIl/8A5
K8/rNG60yQqi/bPxNO0bsb95w0Y+vuMo8TN0gYi/sGhg/wm6zVGmgKlukDlRTb6Z
gJUnXsvfl8nqUxPBGvg/L8UmyZ/tBiAuPc/TAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUSoIzzTXcT0uPNKwgVqmnHRjDKsQwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1NvSXp6VFhjVDB1UE5Ld2dW
cW1uSFJqREtzUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQV7
wsxAMA0GCSqGSIb3DQEBCwUAA4IBAQCJEOh24VBOnqfeXu7G/vE7a5xn11/gniGb
T/xxAkEf5UA08bGQ9CZUxojQma1krxvpJEBGeA6mXMoe1+f0zBritkECbquWhS3S
MJBX1CPT0F5hBjaWwLx0gcQE/7BWyWR/nJb3yiH0HnD2GAfJCISfcYpA+6/WIXus
yVwt2DFVysirMV518GODDWvWChi2DXCQcaIvdjxVcLz1PaTTNwiyKAh4c4bKL8+N
SVgYlEKQZb0VrE6GMSOwKMMKhePEMmeNRYVy0Mu/Zul+gUWnihYU17szTfTo1QJA
WWhrgotSwCbtCyL+Iia4PhB2FE1rQkOr57j4A7dSDWiKytVILX5P
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:24 2025 by rpki-client