Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m4lK89Dt4blLelFpV_AtNis4mKs.roa
File: m4lK89Dt4blLelFpV_AtNis4mKs.roa (raw, json)
Hash identifier: KgTzl3CAelG4ea85QGvk6ZOcBCT0nWGpo4cC8+H5OoQ=
Subject key identifier: 9B:89:4A:F3:D0:ED:E1:B9:4B:7A:51:69:57:F0:2D:36:2B:38:98:AB
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33AF
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m4lK89Dt4blLelFpV_AtNis4mKs.roa
Signing time: Mon 10 Feb 2025 13:51:40 +0000
ROA not before: Mon 10 Feb 2025 13:51:40 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.193.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13231 (0x33af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:40 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9B894AF3D0EDE1B94B7A516957F02D362B3898AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:c9:9e:48:7e:da:5c:b8:49:98:6c:3a:c3:
74:5c:f1:c9:53:09:85:e3:d6:61:8d:d4:6c:b8:b1:
09:c5:8c:76:a0:be:45:06:a9:f6:90:0e:4a:21:da:
80:e9:e2:66:58:3b:46:2d:f7:e7:82:5c:7d:0f:29:
da:7c:36:d9:05:b5:60:0a:24:58:b0:cf:57:6b:85:
42:53:55:1b:b6:8e:f1:cf:98:76:57:59:eb:b8:c2:
04:41:e3:1c:7b:94:da:d2:eb:b5:3f:bb:c0:22:f4:
8a:5b:27:c4:4b:4a:bd:6c:a2:c5:99:d0:89:84:b1:
33:46:0b:e0:52:36:f3:42:6d:d9:11:67:cc:53:d0:
e0:d9:98:f6:7f:74:84:a3:30:84:b3:88:b8:01:dd:
32:8d:be:8b:68:e9:3f:5c:a0:10:37:a4:07:b2:75:
f8:fc:89:e3:34:27:79:95:9d:ad:30:81:69:74:bc:
be:26:e3:e1:b4:b0:37:27:cd:3a:57:0e:61:2e:47:
a0:3e:7b:17:3c:7e:c1:12:fd:0e:bb:c1:c2:13:5d:
b8:f8:53:f0:ee:8a:96:5e:ba:9b:1f:be:7c:4d:35:
2c:b1:9a:7b:29:5b:fa:1d:69:57:9d:90:a9:93:6b:
54:a2:7b:e9:8c:7a:29:a2:28:ba:4d:ad:72:66:74:
f3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:89:4A:F3:D0:ED:E1:B9:4B:7A:51:69:57:F0:2D:36:2B:38:98:AB
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/m4lK89Dt4blLelFpV_AtNis4mKs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.192.0/19
Signature Algorithm: sha256WithRSAEncryption
07:a5:d1:86:cb:81:29:9a:cb:5a:a6:9d:d0:18:1e:81:dc:d9:
08:70:c9:ab:68:ed:f7:ea:02:6e:d2:d0:a0:d4:21:ee:50:4f:
7f:4d:f6:70:7b:ce:a1:72:87:62:97:89:fc:7d:f6:e6:28:bf:
6f:4d:48:31:bb:ed:cf:31:55:d2:96:1c:81:e8:3b:89:16:a4:
c6:52:ce:1b:2b:b3:b0:c8:5f:7c:c2:ea:b2:30:e1:2d:18:48:
8a:4b:42:21:eb:27:8c:23:90:6b:84:7f:5b:b8:08:9c:2d:fb:
ed:71:50:cc:af:30:73:22:0e:6b:e7:be:8b:e4:76:ed:09:0b:
4d:85:ba:64:1b:f9:d9:5d:a1:8f:2b:0c:1d:ca:b6:82:1a:f0:
bb:89:bb:f9:2c:7d:d5:c6:35:70:88:7b:09:fd:f3:e0:d0:a2:
3d:5d:a9:3e:56:fe:b9:35:67:ca:e6:6e:7f:ac:d5:10:9c:97:
d9:4a:fc:9e:b5:c2:a0:f2:0f:d7:fc:9c:f3:3e:58:25:f4:01:
86:37:27:57:13:fb:a3:f0:de:81:bb:49:28:24:86:5c:68:fb:
ee:78:f3:ff:8a:19:7e:e0:32:85:eb:97:b2:1a:02:e5:e6:41:
74:46:e9:dc:6d:67:13:eb:a1:87:69:f0:90:a5:5a:58:a6:81:
49:cd:51:0a
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM68wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxNDBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDlCODk0QUYzRDBFREUx
Qjk0QjdBNTE2OTU3RjAyRDM2MkIzODk4QUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp4MmeSH7aXLhJmGw6w3Rc8clTCYXj1mGN1Gy4sQnFjHagvkUG
qfaQDkoh2oDp4mZYO0Yt9+eCXH0PKdp8NtkFtWAKJFiwz1drhUJTVRu2jvHPmHZX
Weu4wgRB4xx7lNrS67U/u8Ai9IpbJ8RLSr1sosWZ0ImEsTNGC+BSNvNCbdkRZ8xT
0ODZmPZ/dISjMISziLgB3TKNvoto6T9coBA3pAeydfj8ieM0J3mVna0wgWl0vL4m
4+G0sDcnzTpXDmEuR6A+exc8fsES/Q67wcITXbj4U/DuipZeupsfvnxNNSyxmnsp
W/odaVedkKmTa1Sie+mMeimiKLpNrXJmdPOtAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUm4lK89Dt4blLelFpV/AtNis4mKswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL200bEs4OUR0NGJsTGVsRnBW
X0F0TmlzNG1Lcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
wcAwDQYJKoZIhvcNAQELBQADggEBAAel0YbLgSmay1qmndAYHoHc2Qhwyato7ffq
Am7S0KDUIe5QT39N9nB7zqFyh2KXifx99uYov29NSDG77c8xVdKWHIHoO4kWpMZS
zhsrs7DIX3zC6rIw4S0YSIpLQiHrJ4wjkGuEf1u4CJwt++1xUMyvMHMiDmvnvovk
du0JC02FumQb+dldoY8rDB3KtoIa8LuJu/ksfdXGNXCIewn98+DQoj1dqT5W/rk1
Z8rmbn+s1RCcl9lK/J61wqDyD9f8nPM+WCX0AYY3J1cT+6Pw3oG7SSgkhlxo++54
8/+KGX7gMoXrl7IaAuXmQXRG6dxtZxProYdp8JClWlimgUnNUQo=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:04:58 2025 by rpki-client