Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vBmYCtddf6g1ZYQvPDfCNweNPec.roa
File: vBmYCtddf6g1ZYQvPDfCNweNPec.roa (raw, json)
Hash identifier: nm5kH7xW1PQPUwXdx5/Z5h4MZ61yIDIVpNwt0laRToo=
Subject key identifier: BC:19:98:0A:D7:5D:7F:A8:35:65:84:2F:3C:37:C2:37:07:8D:3D:E7
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33CC
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vBmYCtddf6g1ZYQvPDfCNweNPec.roa
Signing time: Mon 10 Feb 2025 13:51:47 +0000
ROA not before: Mon 10 Feb 2025 13:51:47 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 118.232.248.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13260 (0x33cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:47 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BC19980AD75D7FA83565842F3C37C237078D3DE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:7a:02:df:24:fb:4a:3c:21:77:59:22:9a:
df:0d:62:3b:aa:5c:b7:57:59:e7:54:0c:67:e5:91:
f3:32:f6:3b:90:41:e4:98:32:c1:67:a1:48:f1:49:
da:ee:55:15:0e:1e:96:22:ec:03:fb:b6:07:35:8d:
02:20:9f:1e:37:ea:89:d2:00:c4:77:fd:03:94:6b:
1c:a3:08:f7:b1:d9:cb:c0:bc:47:b4:5d:8f:c6:fb:
62:36:c5:2a:d7:10:35:7f:90:39:a7:30:e2:dc:7b:
81:24:f6:83:2b:2c:b3:57:ed:88:89:ab:e8:9d:68:
a5:45:17:ee:e4:a9:d4:75:8b:f9:ed:85:9a:6a:f4:
08:12:75:57:d0:1a:2f:1f:86:2d:41:20:b7:7d:9f:
9c:39:30:02:bc:4e:13:c4:03:de:a5:4c:00:ca:70:
21:66:6a:c0:8c:14:f0:1e:7e:36:20:b9:99:3f:d1:
66:40:cd:8c:10:1b:b2:da:8d:70:a2:3e:41:e3:3b:
c6:3b:61:78:a2:d7:3d:68:d5:08:b3:2d:a1:45:a0:
c9:48:5f:16:14:ed:74:11:07:0a:44:8f:73:a4:eb:
12:98:4c:d3:d3:75:4d:62:b0:0c:0f:8e:11:e2:2a:
3c:32:28:54:13:59:fe:19:06:82:10:d2:f9:5e:4e:
3c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:19:98:0A:D7:5D:7F:A8:35:65:84:2F:3C:37:C2:37:07:8D:3D:E7
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/vBmYCtddf6g1ZYQvPDfCNweNPec.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.232.248.0/22
Signature Algorithm: sha256WithRSAEncryption
30:1b:73:a9:20:c7:e0:03:3e:42:52:b5:47:e0:cb:9f:7d:bd:
75:af:1c:87:24:1b:63:38:91:dc:91:c7:89:d5:6a:30:00:6d:
14:93:8b:dd:c1:64:3f:1e:13:9c:c5:a7:56:db:02:7c:42:a4:
44:ac:41:7f:70:6d:0a:87:78:55:68:61:aa:11:77:e1:f9:69:
19:17:09:29:94:52:33:78:9b:4d:04:fb:a5:07:3e:6e:f1:2e:
77:71:8e:6d:b4:5d:97:27:e7:86:77:de:ba:16:a9:89:01:4b:
81:8e:30:97:cb:8f:6e:0f:67:1c:c0:44:ef:9c:a1:97:27:b3:
ac:48:32:19:58:54:4a:08:1b:db:00:f9:5d:af:01:4b:c4:1d:
c2:37:2e:3e:cf:08:90:0e:ce:64:e3:5c:1a:88:6e:7a:1d:11:
2a:64:51:98:41:d8:cf:ca:0a:ce:19:41:2a:56:33:24:bf:f0:
02:dc:50:de:6a:db:53:2b:98:bf:1d:72:03:72:93:f4:51:eb:
e2:b8:e7:9e:66:cb:68:31:75:e1:ac:29:0b:6a:ba:91:8d:f6:
7e:4b:ef:a8:dc:ce:cc:50:2a:d2:f0:96:4b:a3:52:4d:78:f9:
af:78:ee:62:d0:5b:c1:c7:9d:c0:13:2a:a8:ad:6f:20:2c:50:
ff:c2:1e:b8
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxNDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEJDMTk5ODBBRDc1RDdG
QTgzNTY1ODQyRjNDMzdDMjM3MDc4RDNERTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1y3oC3yT7Sjwhd1kimt8NYjuqXLdXWedUDGflkfMy9juQQeSY
MsFnoUjxSdruVRUOHpYi7AP7tgc1jQIgnx436onSAMR3/QOUaxyjCPex2cvAvEe0
XY/G+2I2xSrXEDV/kDmnMOLce4Ek9oMrLLNX7YiJq+idaKVFF+7kqdR1i/nthZpq
9AgSdVfQGi8fhi1BILd9n5w5MAK8ThPEA96lTADKcCFmasCMFPAefjYguZk/0WZA
zYwQG7LajXCiPkHjO8Y7YXii1z1o1QizLaFFoMlIXxYU7XQRBwpEj3Ok6xKYTNPT
dU1isAwPjhHiKjwyKFQTWf4ZBoIQ0vleTjx3AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUvBmYCtddf6g1ZYQvPDfCNweNPecwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3ZCbVlDdGRkZjZnMVpZUXZQ
RGZDTndlTlBlYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ2
6PgwDQYJKoZIhvcNAQELBQADggEBADAbc6kgx+ADPkJStUfgy599vXWvHIckG2M4
kdyRx4nVajAAbRSTi93BZD8eE5zFp1bbAnxCpESsQX9wbQqHeFVoYaoRd+H5aRkX
CSmUUjN4m00E+6UHPm7xLndxjm20XZcn54Z33roWqYkBS4GOMJfLj24PZxzARO+c
oZcns6xIMhlYVEoIG9sA+V2vAUvEHcI3Lj7PCJAOzmTjXBqIbnodESpkUZhB2M/K
Cs4ZQSpWMyS/8ALcUN5q21MrmL8dcgNyk/RR6+K4555my2gxdeGsKQtqupGN9n5L
76jczsxQKtLwlkujUk14+a947mLQW8HHncATKqitbyAsUP/CHrg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:12 2025 by rpki-client