Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y4oRHLKpIYBHvwM-odqXbDedIRI.roa
File: Y4oRHLKpIYBHvwM-odqXbDedIRI.roa (raw, json)
Hash identifier: XjWzgYcL0YC2xdaMq4RgwTtrIdQp3tnDixYVDaUD23o=
Subject key identifier: 63:8A:11:1C:B2:A9:21:80:47:BF:03:3E:A1:DA:97:6C:37:9D:21:12
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35D4
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y4oRHLKpIYBHvwM-odqXbDedIRI.roa
Signing time: Mon 10 Feb 2025 13:53:43 +0000
ROA not before: Mon 10 Feb 2025 13:53:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.198.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13780 (0x35d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=638A111CB2A9218047BF033EA1DA976C379D2112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:54:8d:4d:30:c6:63:67:42:dd:c9:bc:cb:
e4:e5:51:fd:a3:9d:6a:5a:35:d9:b5:35:b4:9d:81:
42:83:cb:63:0f:1d:89:a2:8a:e3:49:8e:50:7c:2f:
cf:18:ed:16:ea:7c:42:8c:11:75:f5:a1:a0:d8:16:
cf:4b:05:29:be:e3:18:71:63:c9:4e:a5:42:eb:1f:
1c:54:36:6b:7c:28:58:26:31:a4:f8:76:1e:7a:45:
1b:62:05:19:43:16:fd:80:9a:f6:0f:b3:49:10:70:
d9:12:b8:57:9f:28:55:c1:7c:8e:12:c9:d0:1b:ec:
81:15:a9:6b:6c:a4:28:65:32:ad:a1:98:de:00:f7:
75:b5:f0:e0:10:a2:99:d5:dd:bf:61:d7:00:57:cc:
43:4f:bc:a2:ff:4e:44:f0:d8:e7:79:d8:0a:5e:01:
da:45:ce:a2:a7:ce:4f:67:8e:ec:35:77:7e:9f:51:
19:f6:8c:85:d5:c0:52:4c:21:44:9a:3e:dc:48:34:
d4:d4:61:e1:2e:4c:12:ab:fa:72:11:00:11:ef:dc:
9a:a9:db:4c:d5:0a:8a:34:e8:a2:c6:4b:97:71:ba:
15:fb:f8:19:34:55:e1:05:55:79:9c:f3:9d:42:1e:
e9:e0:6d:5e:11:ac:e2:d9:2a:38:b9:6e:d2:13:3d:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8A:11:1C:B2:A9:21:80:47:BF:03:3E:A1:DA:97:6C:37:9D:21:12
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/Y4oRHLKpIYBHvwM-odqXbDedIRI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.198.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:de:d7:26:54:d2:23:d8:4f:90:b7:f9:e6:c2:2b:2d:68:8a:
f3:83:d5:d3:75:6b:f0:a4:d6:39:bd:af:23:60:5e:02:11:e8:
cb:26:59:ad:5a:35:d9:3d:0b:89:20:67:5f:89:74:59:0d:20:
bb:be:97:b8:17:da:39:a6:9b:e9:f2:12:04:29:a0:55:f1:1a:
9a:5e:0c:5d:2b:a8:18:55:8d:ec:87:44:d6:71:e2:74:b7:74:
1e:99:f9:25:10:cd:c4:ea:8c:02:7b:93:02:93:48:b6:96:6b:
51:eb:46:22:f3:03:fb:c5:c6:7c:eb:70:fd:0a:d6:9e:da:de:
ee:46:9d:0e:d3:01:bf:62:37:03:74:ab:f3:3a:71:f8:e7:cb:
4c:3d:91:21:d8:97:45:72:1b:22:58:b8:0d:af:de:9d:3e:2f:
19:fb:4d:74:59:9d:f8:71:61:e3:07:ac:c3:ec:61:1e:be:b7:
8b:59:3d:84:a7:44:79:d9:18:23:6e:25:62:3f:d3:78:dd:76:
65:48:c6:a5:24:9e:0a:81:8b:80:90:be:25:e5:79:e7:53:5b:
52:be:93:ad:e9:45:02:6d:49:6b:5e:6f:8f:4c:89:04:33:1f:
0c:3f:48:31:7a:a1:00:83:f1:f6:e1:fc:c4:24:cd:9a:26:89:
28:f6:30:3b
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzNDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYzOEExMTFDQjJBOTIx
ODA0N0JGMDMzRUExREE5NzZDMzc5RDIxMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvTFSNTTDGY2dC3cm8y+TlUf2jnWpaNdm1NbSdgUKDy2MPHYmi
iuNJjlB8L88Y7RbqfEKMEXX1oaDYFs9LBSm+4xhxY8lOpULrHxxUNmt8KFgmMaT4
dh56RRtiBRlDFv2AmvYPs0kQcNkSuFefKFXBfI4SydAb7IEVqWtspChlMq2hmN4A
93W18OAQopnV3b9h1wBXzENPvKL/TkTw2Od52ApeAdpFzqKnzk9njuw1d36fURn2
jIXVwFJMIUSaPtxINNTUYeEuTBKr+nIRABHv3Jqp20zVCoo06KLGS5dxuhX7+Bk0
VeEFVXmc851CHungbV4RrOLZKji5btITPf1RAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUY4oRHLKpIYBHvwM+odqXbDedIRIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1k0b1JITEtwSVlCSHZ3TS1v
ZHFYYkRlZElSSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAF7
wcYwDQYJKoZIhvcNAQELBQADggEBAC7e1yZU0iPYT5C3+ebCKy1oivOD1dN1a/Ck
1jm9ryNgXgIR6MsmWa1aNdk9C4kgZ1+JdFkNILu+l7gX2jmmm+nyEgQpoFXxGppe
DF0rqBhVjeyHRNZx4nS3dB6Z+SUQzcTqjAJ7kwKTSLaWa1HrRiLzA/vFxnzrcP0K
1p7a3u5GnQ7TAb9iNwN0q/M6cfjny0w9kSHYl0VyGyJYuA2v3p0+Lxn7TXRZnfhx
YeMHrMPsYR6+t4tZPYSnRHnZGCNuJWI/03jddmVIxqUkngqBi4CQviXleedTW1K+
k63pRQJtSWteb49MiQQzHww/SDF6oQCD8fbh/MQkzZomiSj2MDs=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:49 2025 by rpki-client