Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qSzz_Ca_U_F_YqSSah08lHTPAj4.roa
File: qSzz_Ca_U_F_YqSSah08lHTPAj4.roa (raw, json)
Hash identifier: oARrIDTGZcARK0sViM3S3DGongBac7b2Ayh8hZdCtJw=
Subject key identifier: A9:2C:F3:FC:26:BF:53:F1:7F:62:A4:92:6A:1D:3C:94:74:CF:02:3E
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3392
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qSzz_Ca_U_F_YqSSah08lHTPAj4.roa
Signing time: Mon 10 Feb 2025 13:51:33 +0000
ROA not before: Mon 10 Feb 2025 13:51:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.8.192/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13202 (0x3392)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A92CF3FC26BF53F17F62A4926A1D3C9474CF023E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:e6:71:3c:59:d1:35:d1:a8:54:92:49:e8:
94:85:9c:fc:cb:7a:d0:f3:1a:80:4f:f5:54:c1:93:
78:4b:b3:36:b1:bb:9a:b6:9e:4f:7b:b4:cb:c4:fe:
11:75:bd:36:d9:ed:a3:ca:37:b3:3a:cb:be:f8:02:
92:40:98:4b:0c:b3:11:a0:84:20:5f:c3:d0:67:60:
de:54:ee:7a:9e:ad:68:f9:96:98:ba:9a:d2:d9:bd:
71:e3:c8:94:8d:46:c7:96:44:9b:8c:6b:dc:ca:b5:
e6:f5:2c:ae:23:65:6e:70:4c:ce:8c:ef:af:46:92:
79:6a:7d:57:45:d6:fc:32:c8:9c:85:87:3d:53:ea:
95:85:ca:d2:c6:95:1f:ae:69:00:7d:0d:e9:90:8d:
13:4b:06:db:b4:4f:32:15:07:0b:56:93:ee:fa:2c:
a9:3f:f2:2f:13:4d:29:fc:0f:da:fa:1b:8c:a4:65:
b2:28:14:24:f3:17:a2:b3:f0:2a:3f:09:fb:77:d1:
92:67:86:07:fa:5b:d1:74:aa:be:77:6d:a6:e6:6c:
32:f9:14:e4:7c:a9:a5:e8:46:36:6b:8e:4e:f5:d2:
42:ee:7f:17:85:37:54:5d:5a:de:67:f3:ba:eb:c3:
7a:f5:7c:07:c7:ab:4c:55:1d:4c:7e:7e:4e:ff:03:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:F3:FC:26:BF:53:F1:7F:62:A4:92:6A:1D:3C:94:74:CF:02:3E
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/qSzz_Ca_U_F_YqSSah08lHTPAj4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.8.192/26
Signature Algorithm: sha256WithRSAEncryption
a7:81:10:87:bb:b9:99:c8:51:19:71:65:43:a4:e4:31:d3:65:
29:42:74:14:a2:6c:73:51:ec:49:39:df:e8:3f:06:0a:4c:3e:
82:28:be:09:e7:be:d6:53:4b:0e:12:27:62:33:b6:f0:96:e2:
a6:1d:4a:f3:28:68:22:6c:c5:d9:9d:fa:9d:02:80:2d:43:37:
73:ef:19:11:c3:bd:40:6b:e6:d7:9d:da:4d:e3:bf:d3:69:00:
21:5c:98:44:29:f4:81:2a:83:d4:68:fc:91:c8:ca:32:4c:c8:
8a:2e:e3:77:c1:c3:df:69:6f:ce:6a:c6:e3:5a:cd:48:40:b2:
fe:ef:ef:95:eb:a2:bb:76:34:3e:e2:57:d7:ec:47:30:ea:c1:
39:cd:a8:dd:21:eb:bd:f0:af:54:c2:96:d8:cf:77:ee:cf:d7:
b7:9f:65:11:3a:c9:7f:1c:cd:53:79:1d:38:ca:3f:85:3c:d4:
ad:4a:94:08:6c:9a:f4:4e:c7:2e:bd:d1:6d:a6:6d:26:6e:78:
3b:62:ee:bf:cd:53:e0:7a:04:93:e7:a8:4b:0b:7b:a4:3d:75:
5c:19:e9:d5:ef:fa:5d:6f:41:1c:72:46:8f:79:dd:95:67:8b:
23:36:e8:a9:39:90:1e:07:ed:9d:cc:ea:ba:b4:5b:b8:f5:14:
47:89:b4:67
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICM5IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE5MkNGM0ZDMjZCRjUz
RjE3RjYyQTQ5MjZBMUQzQzk0NzRDRjAyM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoPeZxPFnRNdGoVJJJ6JSFnPzLetDzGoBP9VTBk3hLszaxu5q2
nk97tMvE/hF1vTbZ7aPKN7M6y774ApJAmEsMsxGghCBfw9BnYN5U7nqerWj5lpi6
mtLZvXHjyJSNRseWRJuMa9zKteb1LK4jZW5wTM6M769GknlqfVdF1vwyyJyFhz1T
6pWFytLGlR+uaQB9DemQjRNLBtu0TzIVBwtWk+76LKk/8i8TTSn8D9r6G4ykZbIo
FCTzF6Kz8Co/Cft30ZJnhgf6W9F0qr53babmbDL5FOR8qaXoRjZrjk710kLufxeF
N1RdWt5n87rrw3r1fAfHq0xVHUx+fk7/Ax8fAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUqSzz/Ca/U/F/YqSSah08lHTPAj4wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3FTenpfQ2FfVV9GX1lxU1Nh
aDA4bEhUUEFqNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQZ7
wwjAMA0GCSqGSIb3DQEBCwUAA4IBAQCngRCHu7mZyFEZcWVDpOQx02UpQnQUomxz
UexJOd/oPwYKTD6CKL4J577WU0sOEidiM7bwluKmHUrzKGgibMXZnfqdAoAtQzdz
7xkRw71Aa+bXndpN47/TaQAhXJhEKfSBKoPUaPyRyMoyTMiKLuN3wcPfaW/Oasbj
Ws1IQLL+7++V66K7djQ+4lfX7Ecw6sE5zajdIeu98K9UwpbYz3fuz9e3n2UROsl/
HM1TeR04yj+FPNStSpQIbJr0TscuvdFtpm0mbng7Yu6/zVPgegST56hLC3ukPXVc
GenV7/pdb0EcckaPed2VZ4sjNuipOZAeB+2dzOq6tFu49RRHibRn
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:24 2025 by rpki-client