Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VDTW-sASkLmin69k0UseBegn22Q.roa
File: VDTW-sASkLmin69k0UseBegn22Q.roa (raw, json)
Hash identifier: VxsFPWFEk+rGKucRdNoqhKnMYj0QhZaBml5LBCWWB28=
Subject key identifier: 54:34:D6:FA:C0:12:90:B9:A2:9F:AF:64:D1:4B:1E:05:E8:27:DB:64
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 341F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VDTW-sASkLmin69k0UseBegn22Q.roa
Signing time: Mon 10 Feb 2025 13:52:06 +0000
ROA not before: Mon 10 Feb 2025 13:52:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13343 (0x341f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5434D6FAC01290B9A29FAF64D14B1E05E827DB64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:29:aa:b4:c9:6b:73:d9:42:91:b4:63:ef:ef:
be:fe:12:31:fc:30:6a:dd:95:6e:9d:28:ac:f3:ad:
02:8b:c2:20:b5:55:41:a5:d1:39:bd:96:92:c0:e1:
12:99:e7:de:bd:91:12:bb:c8:9f:11:06:4f:a4:0b:
c8:54:b8:5a:0d:b3:d8:54:ea:27:5c:4c:58:cd:ca:
ba:53:df:98:f9:3e:45:33:3b:6a:ef:39:1f:4e:8e:
e8:45:7e:36:02:c4:58:1f:57:49:01:d3:ad:a9:d1:
0a:05:e3:19:14:4d:9d:e0:ac:06:69:08:23:7c:3d:
54:f3:e1:d5:6b:8d:70:f6:d6:97:57:8b:44:ee:f0:
a5:f8:79:e7:0a:46:ad:26:01:64:06:36:e7:9d:2f:
d4:9e:e5:6d:0c:ab:99:a0:19:1e:17:dc:d5:13:5a:
c2:f8:98:52:be:74:88:3b:33:2e:1f:8a:49:d8:7e:
f0:7e:2b:1b:6c:cd:b4:e4:33:46:7f:a3:a6:42:d6:
bb:42:3c:f2:29:43:e9:97:5f:f3:68:79:a4:a4:b9:
4d:58:4c:d4:ff:c1:c0:62:45:3f:12:4f:91:7b:4b:
80:b2:52:7f:a1:a1:ea:77:21:f8:b6:59:60:74:97:
65:a3:b1:f0:73:81:17:20:db:c2:81:57:4b:2b:fe:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:34:D6:FA:C0:12:90:B9:A2:9F:AF:64:D1:4B:1E:05:E8:27:DB:64
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/VDTW-sASkLmin69k0UseBegn22Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.245.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1d:1d:08:16:0a:87:bf:76:36:ec:ad:39:c5:c3:ef:81:31:
b5:96:c3:01:4e:3e:03:12:5c:7e:1c:0c:c0:2f:3e:c2:40:e2:
1c:3a:7b:68:ae:db:ec:11:a4:75:46:d0:3b:46:c5:32:e1:76:
98:54:d6:48:68:3b:eb:cd:04:53:3f:6c:6d:be:63:20:53:fa:
85:29:a2:4f:24:95:3e:26:59:48:d7:59:d9:0e:d0:09:5d:29:
51:cc:ca:50:80:1d:e2:ee:8c:1e:9b:3f:bb:23:12:6a:8a:c9:
cc:42:08:e8:54:f6:9c:e6:b2:c0:1c:78:12:ba:95:0b:92:1d:
ce:a9:8c:2b:09:82:5a:01:28:f9:f2:f8:51:56:19:3a:e7:58:
4c:05:20:58:97:9e:72:5f:13:ef:3d:82:75:2e:fe:9d:7e:c6:
d1:a0:a1:a7:12:ae:ec:92:b8:f5:fe:55:2d:0f:35:09:75:a4:
53:65:94:08:06:8d:7c:82:0d:53:8b:5a:52:01:27:89:c1:76:
73:b7:43:d7:31:bc:9d:92:de:b8:38:44:af:07:a0:14:29:83:
9a:7b:ab:21:7c:73:a4:34:fe:18:44:57:ee:03:6f:ae:97:08:
0a:4b:5e:49:7f:25:6a:1d:32:17:59:9b:b4:2d:26:54:c5:58:
94:f9:16:6c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNB8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDU0MzRENkZBQzAxMjkw
QjlBMjlGQUY2NEQxNEIxRTA1RTgyN0RCNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9Kaq0yWtz2UKRtGPv777+EjH8MGrdlW6dKKzzrQKLwiC1VUGl
0Tm9lpLA4RKZ5969kRK7yJ8RBk+kC8hUuFoNs9hU6idcTFjNyrpT35j5PkUzO2rv
OR9OjuhFfjYCxFgfV0kB062p0QoF4xkUTZ3grAZpCCN8PVTz4dVrjXD21pdXi0Tu
8KX4eecKRq0mAWQGNuedL9Se5W0Mq5mgGR4X3NUTWsL4mFK+dIg7My4fiknYfvB+
KxtszbTkM0Z/o6ZC1rtCPPIpQ+mXX/NoeaSkuU1YTNT/wcBiRT8ST5F7S4CyUn+h
oep3Ifi2WWB0l2WjsfBzgRcg28KBV0sr/tp9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUVDTW+sASkLmin69k0UseBegn22QwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1ZEVFctc0FTa0xtaW42OWsw
VXNlQmVnbjIyUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2
6fUwDQYJKoZIhvcNAQELBQADggEBAEMdHQgWCoe/djbsrTnFw++BMbWWwwFOPgMS
XH4cDMAvPsJA4hw6e2iu2+wRpHVG0DtGxTLhdphU1khoO+vNBFM/bG2+YyBT+oUp
ok8klT4mWUjXWdkO0AldKVHMylCAHeLujB6bP7sjEmqKycxCCOhU9pzmssAceBK6
lQuSHc6pjCsJgloBKPny+FFWGTrnWEwFIFiXnnJfE+89gnUu/p1+xtGgoacSruyS
uPX+VS0PNQl1pFNllAgGjXyCDVOLWlIBJ4nBdnO3Q9cxvJ2S3rg4RK8HoBQpg5p7
qyF8c6Q0/hhEV+4Db66XCApLXkl/JWodMhdZm7QtJlTFWJT5Fmw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:12 2025 by rpki-client