Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/otbxqpnh9lCtKQKS7ia3nCM2g50.roa
File: otbxqpnh9lCtKQKS7ia3nCM2g50.roa (raw, json)
Hash identifier: Aor1fVow1v/GR+IWoYjnXmvykeBggXIbYnSq9KuRkK0=
Subject key identifier: A2:D6:F1:AA:99:E1:F6:50:AD:29:02:92:EE:26:B7:9C:23:36:83:9D
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 352E
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/otbxqpnh9lCtKQKS7ia3nCM2g50.roa
Signing time: Mon 10 Feb 2025 13:53:06 +0000
ROA not before: Mon 10 Feb 2025 13:53:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.192.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13614 (0x352e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A2D6F1AA99E1F650AD290292EE26B79C2336839D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:eb:e2:27:c7:b3:bf:bc:82:97:71:9e:1a:57:
d9:b1:36:32:b7:e1:a4:d4:00:1e:c1:e8:86:fc:5e:
35:07:98:a0:d2:48:bd:6a:a4:07:0d:81:dc:40:05:
71:d2:25:b9:d7:8b:59:b3:28:58:28:1c:b7:1c:ea:
5f:e3:28:96:90:35:12:73:90:ed:a9:74:bf:14:27:
44:52:9e:ce:08:df:81:25:04:25:72:00:77:cf:77:
5e:88:bd:7b:e7:7c:dc:48:b4:2d:cb:ef:0d:15:36:
20:1c:60:7c:9b:27:f6:df:40:89:33:99:66:a8:44:
2b:99:01:f8:48:96:69:af:4a:c3:80:6a:89:e9:28:
c0:5f:41:ec:73:35:81:2e:d7:54:76:68:b1:5b:de:
69:2f:93:58:5f:42:6a:d8:95:17:cc:df:a8:7b:b7:
06:20:69:17:63:9d:53:90:75:ce:43:c6:d5:bb:e7:
20:12:26:d0:23:da:45:1f:df:a8:c6:18:51:51:b7:
46:af:d3:08:00:da:3b:59:fa:4b:82:43:5d:46:8b:
57:a2:fa:f3:6f:ff:15:45:f6:97:8a:47:1d:3f:5c:
7a:44:10:08:6f:87:7e:a7:84:9d:6c:c1:91:cf:af:
f4:b3:1b:e6:a3:f1:c4:ff:f2:9a:a6:c3:45:c6:3f:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D6:F1:AA:99:E1:F6:50:AD:29:02:92:EE:26:B7:9C:23:36:83:9D
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/otbxqpnh9lCtKQKS7ia3nCM2g50.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.192.144.0/21
Signature Algorithm: sha256WithRSAEncryption
39:1f:db:c0:55:dc:60:8f:e1:c7:60:16:f5:d1:4c:b3:d7:20:
8d:ff:82:79:a8:4d:59:8d:b2:43:37:c5:d1:a1:58:72:fc:7b:
59:a7:eb:ed:2a:85:6b:7b:e3:e2:d5:37:0d:5c:dc:f2:74:19:
61:40:b3:cf:82:12:07:6c:ee:53:4c:ec:4d:ea:4b:f8:d8:38:
13:d5:3e:f8:49:c2:40:07:b1:84:a5:9e:f0:85:e4:81:0a:c5:
1b:f5:42:f8:5b:5c:01:48:b8:4e:66:dd:78:18:e1:62:d8:78:
56:b5:eb:d0:50:5e:1d:7c:35:4d:59:39:53:00:36:66:13:fd:
77:ea:ee:29:89:96:f4:78:f3:fb:df:a4:1b:18:25:d4:af:9b:
6a:35:9b:c4:0a:4b:47:fd:0c:02:d6:c0:42:fe:1a:0b:16:70:
ec:33:59:e6:c3:0f:8f:69:62:56:ea:1e:e7:d5:c1:78:5e:74:
ea:2e:a3:f1:d1:38:00:f0:a3:e9:78:7c:e5:eb:4b:29:93:e4:
7a:f6:86:f4:70:da:41:2b:79:8d:47:18:cd:3c:fc:44:27:80:
f3:f2:ee:39:0f:c4:5d:d5:19:46:17:54:6d:af:ed:13:12:02:
da:c4:ef:35:90:66:12:7d:72:6e:b5:10:28:6e:24:5d:ff:3b:
55:f7:82:22
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMDZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEEyRDZGMUFBOTlFMUY2
NTBBRDI5MDI5MkVFMjZCNzlDMjMzNjgzOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF6+Inx7O/vIKXcZ4aV9mxNjK34aTUAB7B6Ib8XjUHmKDSSL1q
pAcNgdxABXHSJbnXi1mzKFgoHLcc6l/jKJaQNRJzkO2pdL8UJ0RSns4I34ElBCVy
AHfPd16IvXvnfNxItC3L7w0VNiAcYHybJ/bfQIkzmWaoRCuZAfhIlmmvSsOAaonp
KMBfQexzNYEu11R2aLFb3mkvk1hfQmrYlRfM36h7twYgaRdjnVOQdc5DxtW75yAS
JtAj2kUf36jGGFFRt0av0wgA2jtZ+kuCQ11Gi1ei+vNv/xVF9peKRx0/XHpEEAhv
h36nhJ1swZHPr/SzG+aj8cT/8pqmw0XGP2g3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUotbxqpnh9lCtKQKS7ia3nCM2g50wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL290YnhxcG5oOWxDdEtRS1M3
aWEzbkNNMmc1MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAN7
wJAwDQYJKoZIhvcNAQELBQADggEBADkf28BV3GCP4cdgFvXRTLPXII3/gnmoTVmN
skM3xdGhWHL8e1mn6+0qhWt74+LVNw1c3PJ0GWFAs8+CEgds7lNM7E3qS/jYOBPV
PvhJwkAHsYSlnvCF5IEKxRv1QvhbXAFIuE5m3XgY4WLYeFa169BQXh18NU1ZOVMA
NmYT/Xfq7imJlvR48/vfpBsYJdSvm2o1m8QKS0f9DALWwEL+GgsWcOwzWebDD49p
YlbqHufVwXhedOouo/HROADwo+l4fOXrSymT5Hr2hvRw2kEreY1HGM08/EQngPPy
7jkPxF3VGUYXVG2v7RMSAtrE7zWQZhJ9cm61EChuJF3/O1X3giI=
-----END CERTIFICATE-----
Generated at Wed Jun 4 04:08:34 2025 by rpki-client