Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i0idqQqOkGHYUufY_6-PGV8Vwao.roa
File: i0idqQqOkGHYUufY_6-PGV8Vwao.roa (raw, json)
Hash identifier: tc9XLOc2Tt4Qd69kFs8AAmZ01ijd38+sWgu0T+XmcIo=
Subject key identifier: 8B:48:9D:A9:0A:8E:90:61:D8:52:E7:D8:FF:AF:8F:19:5F:15:C1:AA
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3548
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i0idqQqOkGHYUufY_6-PGV8Vwao.roa
Signing time: Mon 10 Feb 2025 13:53:11 +0000
ROA not before: Mon 10 Feb 2025 13:53:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13640 (0x3548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8B489DA90A8E9061D852E7D8FFAF8F195F15C1AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:f4:93:c7:97:e1:82:cd:70:cb:4f:e3:c2:
84:c6:de:65:70:63:40:cc:db:33:c3:4b:f1:ca:2f:
aa:16:aa:6c:7b:50:a6:20:7a:77:e5:90:37:56:bf:
e2:06:b3:d0:6e:bd:2c:e0:67:39:72:b0:f8:e1:14:
4a:21:40:59:3c:30:45:e8:7c:33:7b:1b:15:12:f6:
d0:48:be:b1:d2:fa:b6:08:34:e2:f7:9d:a4:90:98:
4d:2d:d5:38:df:d7:c0:66:5b:4a:6e:29:f4:3f:79:
e5:d4:b1:1b:0a:e8:9a:af:cc:f9:8e:84:93:ae:47:
46:bb:32:26:e4:fd:f2:8b:63:ee:f4:fe:f0:30:7f:
b2:5e:48:14:87:ac:bb:10:66:53:0b:5b:46:9d:b8:
74:f4:30:4d:12:2e:5c:f7:34:d3:5a:9a:e6:8f:66:
af:8f:4f:5e:88:dc:e6:23:63:e5:29:e5:2d:b9:3b:
d9:0c:ff:ab:3c:1f:b3:b0:ad:dd:54:e0:22:e1:8c:
53:99:6b:6e:cc:b9:d0:85:03:bf:b8:f2:59:45:3b:
7d:33:c5:65:cd:4e:76:b3:e0:ff:df:9e:d4:bc:d8:
c8:a9:9f:da:42:47:37:0d:d2:6b:c3:c6:69:35:c8:
7d:2e:ab:0f:ec:a6:4c:65:fe:90:18:e4:f0:37:e2:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:48:9D:A9:0A:8E:90:61:D8:52:E7:D8:FF:AF:8F:19:5F:15:C1:AA
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/i0idqQqOkGHYUufY_6-PGV8Vwao.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:53:4a:6d:fb:7a:df:1d:74:09:71:0a:57:6d:8a:51:5e:72:
35:c4:de:77:64:57:19:01:26:df:e3:67:b6:7d:d8:7e:e9:2c:
6a:50:6a:1d:28:7e:97:a4:d5:4b:10:28:3b:34:80:e5:0a:98:
16:4a:7d:5d:cf:77:e8:ae:48:e3:f7:ff:b6:ae:65:98:3c:96:
f4:10:35:0a:dc:db:3d:1d:c0:63:7b:65:09:83:c0:19:88:f9:
ee:fe:af:a2:50:32:04:59:bd:12:05:f7:2c:69:ed:02:54:de:
4f:c6:63:37:ef:c1:f9:37:c5:12:50:0a:cb:27:ed:a5:62:01:
a8:e6:fb:05:a3:34:05:65:3a:a4:6c:c9:e9:fd:ef:3c:b6:ab:
86:c6:42:59:e1:73:66:1f:76:ad:f1:44:67:32:5b:80:dd:b5:
6d:6f:07:8a:1f:3a:7c:6f:a1:90:ed:01:26:eb:34:13:6b:6a:
2c:49:7d:5a:ac:cc:53:3e:42:5d:46:30:18:bc:0b:8b:a2:45:
3d:75:2c:0c:d2:5b:14:91:53:a5:97:c8:e8:f5:03:b7:45:36:
69:70:c9:3b:74:de:93:65:b2:de:a7:0d:ae:5e:60:ed:1c:01:
37:9e:b1:20:47:f1:2e:38:c5:c4:04:fe:29:0e:20:86:af:9e:
81:80:fb:cb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNUgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhCNDg5REE5MEE4RTkw
NjFEODUyRTdEOEZGQUY4RjE5NUYxNUMxQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHGfSTx5fhgs1wy0/jwoTG3mVwY0DM2zPDS/HKL6oWqmx7UKYg
enflkDdWv+IGs9BuvSzgZzlysPjhFEohQFk8MEXofDN7GxUS9tBIvrHS+rYINOL3
naSQmE0t1Tjf18BmW0puKfQ/eeXUsRsK6JqvzPmOhJOuR0a7Mibk/fKLY+70/vAw
f7JeSBSHrLsQZlMLW0aduHT0ME0SLlz3NNNamuaPZq+PT16I3OYjY+Up5S25O9kM
/6s8H7Owrd1U4CLhjFOZa27MudCFA7+48llFO30zxWXNTnaz4P/fntS82Mipn9pC
RzcN0mvDxmk1yH0uqw/spkxl/pAY5PA34lXrAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUi0idqQqOkGHYUufY/6+PGV8VwaowHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL2kwaWRxUXFPa0dIWVV1Zllf
Ni1QR1Y4Vndhby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wkAwDQYJKoZIhvcNAQELBQADggEBAD1TSm37et8ddAlxCldtilFecjXE3ndkVxkB
Jt/jZ7Z92H7pLGpQah0ofpek1UsQKDs0gOUKmBZKfV3Pd+iuSOP3/7auZZg8lvQQ
NQrc2z0dwGN7ZQmDwBmI+e7+r6JQMgRZvRIF9yxp7QJU3k/GYzfvwfk3xRJQCssn
7aViAajm+wWjNAVlOqRsyen97zy2q4bGQlnhc2Yfdq3xRGcyW4DdtW1vB4ofOnxv
oZDtASbrNBNraixJfVqszFM+Ql1GMBi8C4uiRT11LAzSWxSRU6WXyOj1A7dFNmlw
yTt03pNlst6nDa5eYO0cATeesSBH8S44xcQE/ikOIIavnoGA+8s=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:12 2025 by rpki-client