Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YSsFHClOJVvqVELqY9Vp6EEyEO8.roa
File: YSsFHClOJVvqVELqY9Vp6EEyEO8.roa (raw, json)
Hash identifier: wzOorxGu6ETcJYvKXAb77emTrqv5rHiW35Tb7V/vUt4=
Subject key identifier: 61:2B:05:1C:29:4E:25:5B:EA:54:42:EA:63:D5:69:E8:41:32:10:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 346F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YSsFHClOJVvqVELqY9Vp6EEyEO8.roa
Signing time: Mon 10 Feb 2025 13:52:22 +0000
ROA not before: Mon 10 Feb 2025 13:52:22 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.168.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13423 (0x346f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:22 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=612B051C294E255BEA5442EA63D569E8413210EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:be:e8:11:e6:12:6a:a2:1d:ce:b8:87:e6:
3f:bf:3e:6a:88:fe:66:cf:1d:d5:7a:d2:e6:67:7a:
e2:57:01:2a:4f:28:f4:c4:56:91:bb:c3:bf:76:63:
55:49:d7:8a:2c:9d:df:e1:2d:d3:f1:21:0c:1f:dc:
7e:03:c4:b2:d0:38:4d:ec:10:b0:92:9e:f5:5f:4d:
70:20:ba:70:08:dc:cf:c0:5b:4c:88:07:95:07:3d:
19:a5:a6:35:7c:cb:b7:ce:10:0a:af:8f:bb:29:4d:
7b:da:02:64:c3:8a:70:39:37:36:bf:b0:00:11:58:
3e:b1:37:83:e6:44:83:e8:f1:60:ef:0e:6a:ff:a3:
d2:fd:45:c7:6a:9d:37:8c:49:d4:eb:c5:23:5f:9b:
b9:f6:14:98:8a:3f:92:2b:1c:78:92:a5:14:68:a7:
4b:90:48:df:2c:81:22:88:55:6e:5d:43:89:29:e2:
8e:10:8c:44:35:88:81:75:f3:71:91:b2:37:e1:09:
eb:64:51:35:25:c6:99:3b:0f:40:15:bd:9a:cf:9c:
d5:07:4c:8d:90:ae:90:28:4e:ff:07:07:40:8a:83:
9b:23:1a:24:17:43:c0:a5:b6:79:3f:55:79:68:62:
1d:78:de:69:85:9c:f5:b6:42:2a:22:1c:8b:34:04:
5d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:05:1C:29:4E:25:5B:EA:54:42:EA:63:D5:69:E8:41:32:10:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/YSsFHClOJVvqVELqY9Vp6EEyEO8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.168.0/22
Signature Algorithm: sha256WithRSAEncryption
35:ac:75:fb:12:c8:d5:e8:49:6a:70:4d:d0:4b:7f:4c:30:56:
2a:dc:b9:b6:3e:38:44:20:6f:2e:da:68:47:f5:f8:bb:d9:cf:
f4:17:6f:ea:5c:b6:66:25:e4:0f:7e:97:cf:37:af:37:23:8c:
9b:b1:3a:ca:86:90:c4:0c:97:5e:16:3d:0d:82:8d:35:01:1a:
5d:cd:0e:e1:92:ba:37:52:bc:27:20:5e:b2:59:b3:3a:78:be:
81:22:51:9a:63:1f:d2:d6:8b:e5:8f:f4:4d:52:03:0c:d9:04:
05:c3:d5:7f:55:90:ad:f8:29:a5:31:80:8e:3a:27:e9:dc:75:
75:6d:0e:f1:29:b9:e3:64:c6:36:5d:93:66:19:40:be:7a:ac:
30:1a:07:52:25:8a:ac:fa:4c:eb:6e:52:5e:26:c7:89:8d:06:
2b:12:5b:9b:8b:d2:e4:4c:56:86:4c:41:e2:37:aa:91:84:ba:
75:43:a7:4c:1e:05:63:68:ac:a5:96:ff:4f:94:c8:82:f3:97:
b6:e3:ed:a3:26:9d:cf:c0:00:5e:27:d2:86:8e:46:c6:9c:b3:
fb:e9:94:ed:ea:6b:db:52:fc:e7:97:8f:6a:27:16:fe:cb:af:
4b:cd:84:44:fe:b7:57:de:7d:8f:ab:1a:34:4c:92:3d:f8:1c:
32:4b:54:18
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNG8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMjJaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDYxMkIwNTFDMjk0RTI1
NUJFQTU0NDJFQTYzRDU2OUU4NDEzMjEwRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQl77oEeYSaqIdzriH5j+/PmqI/mbPHdV60uZneuJXASpPKPTE
VpG7w792Y1VJ14osnd/hLdPxIQwf3H4DxLLQOE3sELCSnvVfTXAgunAI3M/AW0yI
B5UHPRmlpjV8y7fOEAqvj7spTXvaAmTDinA5Nza/sAARWD6xN4PmRIPo8WDvDmr/
o9L9RcdqnTeMSdTrxSNfm7n2FJiKP5IrHHiSpRRop0uQSN8sgSKIVW5dQ4kp4o4Q
jEQ1iIF183GRsjfhCetkUTUlxpk7D0AVvZrPnNUHTI2QrpAoTv8HB0CKg5sjGiQX
Q8Cltnk/VXloYh143mmFnPW2QioiHIs0BF3VAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUYSsFHClOJVvqVELqY9Vp6EEyEO8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL1lTc0ZIQ2xPSlZ2cVZFTHFZ
OVZwNkVFeUVPOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
w6gwDQYJKoZIhvcNAQELBQADggEBADWsdfsSyNXoSWpwTdBLf0wwVircubY+OEQg
by7aaEf1+LvZz/QXb+pctmYl5A9+l883rzcjjJuxOsqGkMQMl14WPQ2CjTUBGl3N
DuGSujdSvCcgXrJZszp4voEiUZpjH9LWi+WP9E1SAwzZBAXD1X9VkK34KaUxgI46
J+ncdXVtDvEpueNkxjZdk2YZQL56rDAaB1Iliqz6TOtuUl4mx4mNBisSW5uL0uRM
VoZMQeI3qpGEunVDp0weBWNorKWW/0+UyILzl7bj7aMmnc/AAF4n0oaORsacs/vp
lO3qa9tS/OeXj2onFv7Lr0vNhET+t1fefY+rGjRMkj34HDJLVBg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:43 2025 by rpki-client