Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qA2hcgxjf07Fb8LrHzBUkHX0l6g.roa
File: qA2hcgxjf07Fb8LrHzBUkHX0l6g.roa (raw, json)
Hash identifier: OQLSERjxN6itVWiUHdpJP5Pugghnsj9EbeNOJkoFNYE=
Subject key identifier: A8:0D:A1:72:0C:63:7F:4E:C5:6F:C2:EB:1F:30:54:90:75:F4:97:A8
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3449
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qA2hcgxjf07Fb8LrHzBUkHX0l6g.roa
Signing time: Mon 10 Feb 2025 13:52:14 +0000
ROA not before: Mon 10 Feb 2025 13:52:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 118.233.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13385 (0x3449)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A80DA1720C637F4EC56FC2EB1F30549075F497A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5d:3b:3e:ab:d1:05:e2:99:a0:37:6c:09:26:
58:1c:2e:f6:07:8f:39:c5:6b:a8:b5:49:98:1f:ed:
df:74:1b:87:43:b2:08:7f:ef:43:c5:6e:f5:3d:24:
60:76:50:c1:99:dc:a3:b2:82:56:11:16:d5:68:59:
21:87:76:64:8e:80:ac:f1:8b:65:5b:ce:85:12:ef:
cc:f5:01:df:ab:80:4b:42:51:a2:1d:9c:2b:d0:cc:
21:0a:04:a7:03:2e:19:97:b6:b6:d2:70:8b:cf:a6:
2c:49:88:39:25:05:eb:34:3d:a1:ce:a0:3d:3b:bb:
cb:ae:88:b8:12:f9:d0:fd:91:37:b4:8b:69:48:ed:
6c:5d:53:21:c4:e7:1c:e2:72:7d:ca:fa:31:b5:cf:
5a:2a:94:e1:15:96:82:e7:b4:07:31:54:77:25:35:
be:9f:b4:b6:63:97:e4:d4:4f:29:8a:29:b8:88:14:
2a:3d:a2:6d:dd:09:8c:b0:6f:cb:32:27:c1:75:86:
7b:d8:52:a6:23:4a:55:cf:30:26:bd:fa:aa:70:ac:
a4:cb:86:5e:86:49:56:ac:f7:97:d8:49:5f:0f:bb:
f6:bb:6e:63:00:10:ac:47:ea:33:c6:34:2c:b8:d8:
31:18:e5:51:63:29:b0:c8:47:a8:57:db:ba:cf:79:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0D:A1:72:0C:63:7F:4E:C5:6F:C2:EB:1F:30:54:90:75:F4:97:A8
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qA2hcgxjf07Fb8LrHzBUkHX0l6g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.28.0/22
Signature Algorithm: sha256WithRSAEncryption
88:88:bc:87:d9:53:0e:d9:99:ec:f0:29:3b:23:7a:d9:ee:6b:
37:8d:fa:0a:36:64:d3:f2:18:51:b1:85:00:9f:26:44:41:6c:
b7:07:dd:40:fd:cf:0e:56:95:e9:c7:6a:7f:7d:8b:1d:c9:11:
24:a7:9a:43:e7:c6:1c:6d:d6:98:62:97:7a:26:52:57:d8:8a:
f9:89:f4:75:6f:c0:06:be:87:9f:b6:b4:fb:02:c4:ad:92:9e:
60:85:8e:e4:82:5e:7b:cb:df:95:99:6d:ef:99:bd:1e:d4:82:
bf:de:de:e0:92:04:38:11:39:ae:b9:6c:d0:58:b7:40:56:75:
2b:50:6f:59:19:2c:7b:41:b6:08:86:c7:50:92:7e:55:4a:65:
ed:fa:75:6d:5f:ba:89:34:2a:5c:fa:08:9b:87:6b:39:4e:38:
05:2d:f5:e7:f2:ea:a0:79:a5:38:b9:8d:50:41:4b:69:f6:49:
7c:47:20:0b:36:32:16:11:4c:33:66:fe:dc:4a:e1:f2:c3:bb:
a5:ac:53:e7:2d:36:83:12:93:1b:ce:50:ee:9d:a8:f3:ec:e9:
75:66:7d:db:cd:9a:43:e5:29:a8:fb:e4:70:d1:4c:77:14:34:
51:9d:7f:01:83:20:23:99:0a:04:99:84:13:d8:2e:55:96:1c:
34:ac:27:fd
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNEkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMTRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE4MERBMTcyMEM2MzdG
NEVDNTZGQzJFQjFGMzA1NDkwNzVGNDk3QTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXXTs+q9EF4pmgN2wJJlgcLvYHjznFa6i1SZgf7d90G4dDsgh/
70PFbvU9JGB2UMGZ3KOyglYRFtVoWSGHdmSOgKzxi2VbzoUS78z1Ad+rgEtCUaId
nCvQzCEKBKcDLhmXtrbScIvPpixJiDklBes0PaHOoD07u8uuiLgS+dD9kTe0i2lI
7WxdUyHE5xzicn3K+jG1z1oqlOEVloLntAcxVHclNb6ftLZjl+TUTymKKbiIFCo9
om3dCYywb8syJ8F1hnvYUqYjSlXPMCa9+qpwrKTLhl6GSVas95fYSV8Pu/a7bmMA
EKxH6jPGNCy42DEY5VFjKbDIR6hX27rPefttAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUqA2hcgxjf07Fb8LrHzBUkHX0l6gwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FBMmhjZ3hqZjA3RmI4THJI
ekJVa0hYMGw2Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6RwwDQYJKoZIhvcNAQELBQADggEBAIiIvIfZUw7ZmezwKTsjetnuazeN+go2ZNPy
GFGxhQCfJkRBbLcH3UD9zw5WlenHan99ix3JESSnmkPnxhxt1phil3omUlfYivmJ
9HVvwAa+h5+2tPsCxK2SnmCFjuSCXnvL35WZbe+ZvR7Ugr/e3uCSBDgROa65bNBY
t0BWdStQb1kZLHtBtgiGx1CSflVKZe36dW1fuok0Klz6CJuHazlOOAUt9efy6qB5
pTi5jVBBS2n2SXxHIAs2MhYRTDNm/txK4fLDu6WsU+ctNoMSkxvOUO6dqPPs6XVm
fdvNmkPlKaj75HDRTHcUNFGdfwGDICOZCgSZhBPYLlWWHDSsJ/0=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:06 2025 by rpki-client