Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yCDossabrgskHluEMyAY-wRev5c.roa
File: yCDossabrgskHluEMyAY-wRev5c.roa (raw, json)
Hash identifier: 3kYd/DLLULM2b4eaWvcs0NcQZQGzvKVtJyofTviNIzo=
Subject key identifier: C8:20:E8:B2:C6:9B:AE:0B:24:1E:5B:84:33:20:18:FB:04:5E:BF:97
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 356F
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yCDossabrgskHluEMyAY-wRev5c.roa
Signing time: Mon 10 Feb 2025 13:53:20 +0000
ROA not before: Mon 10 Feb 2025 13:53:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13679 (0x356f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C820E8B2C69BAE0B241E5B84332018FB045EBF97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:32:c2:b2:56:d7:c0:8c:9d:f3:8b:9c:98:9c:
48:47:62:f6:a2:e1:c2:52:1f:d6:2f:38:86:8b:8b:
4b:a5:6e:ac:e9:f4:ff:0a:91:7b:61:91:2c:02:34:
39:ae:1d:b6:cf:c1:6f:23:fc:64:04:43:1f:4a:9b:
33:de:e7:28:80:fe:1c:be:f1:cc:b0:f8:b7:82:10:
ff:be:5b:c4:8c:84:48:a9:f3:31:ec:b4:49:a0:15:
d7:29:18:07:87:77:97:02:18:c3:9c:ba:47:e2:18:
11:ed:fd:ec:08:af:e4:82:c0:c7:2a:30:56:ea:d8:
fc:f1:25:36:8b:92:ce:cb:72:f7:b7:b8:cd:55:21:
9d:e7:3d:e1:ae:cc:e0:01:f3:cd:bb:e4:f2:bd:45:
28:ac:b1:99:c1:aa:0c:38:5f:f6:e6:22:5a:ce:2c:
a5:38:8a:ab:c9:22:21:b1:a2:51:a8:71:98:c0:68:
b7:40:a1:75:c5:28:e2:42:72:fe:d6:c4:17:45:a7:
8a:a9:99:a7:5c:b1:16:69:4c:ae:1f:d7:96:9c:73:
08:9e:d8:9e:a4:97:d2:78:e5:6a:ac:b9:11:62:08:
20:ca:af:d5:aa:24:8f:32:9f:e2:6f:fa:97:fa:31:
ac:84:b0:69:17:98:7f:ce:64:9f:03:cd:e5:85:04:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:20:E8:B2:C6:9B:AE:0B:24:1E:5B:84:33:20:18:FB:04:5E:BF:97
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/yCDossabrgskHluEMyAY-wRev5c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.178.0/24
Signature Algorithm: sha256WithRSAEncryption
76:bc:63:f7:35:40:79:8c:5b:0f:85:a9:83:9c:38:ab:84:5e:
a6:a7:28:36:06:28:45:d0:de:16:a0:57:45:fb:ba:31:d9:9d:
2d:e1:4e:68:e7:5c:f4:33:81:a5:eb:e7:49:4a:16:6b:c4:6c:
ff:e5:39:99:8d:5c:92:5b:e3:77:e0:a0:11:64:6f:b4:14:f3:
7e:b1:d7:70:a7:35:c9:d0:44:65:7c:63:f8:8f:f9:89:97:d5:
8a:1f:98:ae:3a:f1:0e:8f:bf:1f:24:9a:3e:76:d8:a2:4c:45:
f4:66:b3:22:91:cc:d4:8d:f5:72:32:e3:f3:72:46:9d:49:46:
25:95:29:5a:15:a2:1a:e1:c5:f3:77:8a:da:58:f8:11:51:ab:
37:58:be:90:c5:5c:8a:4c:2e:4f:82:02:76:6c:4f:5f:a3:7e:
ba:ff:c6:66:d6:a7:c7:fb:69:b0:8b:2f:aa:e3:ca:39:7a:57:
28:d2:1f:70:8a:02:8f:44:1f:c0:87:1d:72:a4:f9:ed:e2:8b:
d1:47:e8:5e:d3:2b:37:1a:26:c1:ef:27:74:f1:3c:a8:51:02:
1e:9f:8f:e8:4b:17:ff:cc:4d:a6:f7:7f:fd:a2:c4:2c:49:0c:
14:c2:a4:f1:25:ec:03:65:b0:e4:79:98:7b:3c:c3:68:30:ac:
ae:2d:e2:2c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNW8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM4MjBFOEIyQzY5QkFF
MEIyNDFFNUI4NDMzMjAxOEZCMDQ1RUJGOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDwMsKyVtfAjJ3zi5yYnEhHYvai4cJSH9YvOIaLi0ulbqzp9P8K
kXthkSwCNDmuHbbPwW8j/GQEQx9KmzPe5yiA/hy+8cyw+LeCEP++W8SMhEip8zHs
tEmgFdcpGAeHd5cCGMOcukfiGBHt/ewIr+SCwMcqMFbq2PzxJTaLks7Lcve3uM1V
IZ3nPeGuzOAB88275PK9RSissZnBqgw4X/bmIlrOLKU4iqvJIiGxolGocZjAaLdA
oXXFKOJCcv7WxBdFp4qpmadcsRZpTK4f15accwie2J6kl9J45WqsuRFiCCDKr9Wq
JI8yn+Jv+pf6MayEsGkXmH/OZJ8DzeWFBG+xAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUyCDossabrgskHluEMyAY+wRev5cwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3lDRG9zc2Ficmdza0hsdUVN
eUFZLXdSZXY1Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB7
w7IwDQYJKoZIhvcNAQELBQADggEBAHa8Y/c1QHmMWw+FqYOcOKuEXqanKDYGKEXQ
3hagV0X7ujHZnS3hTmjnXPQzgaXr50lKFmvEbP/lOZmNXJJb43fgoBFkb7QU836x
13CnNcnQRGV8Y/iP+YmX1YofmK468Q6Pvx8kmj522KJMRfRmsyKRzNSN9XIy4/Ny
Rp1JRiWVKVoVohrhxfN3itpY+BFRqzdYvpDFXIpMLk+CAnZsT1+jfrr/xmbWp8f7
abCLL6rjyjl6VyjSH3CKAo9EH8CHHXKk+e3ii9FH6F7TKzcaJsHvJ3TxPKhRAh6f
j+hLF//MTab3f/2ixCxJDBTCpPEl7ANlsOR5mHs8w2gwrK4t4iw=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:50 2025 by rpki-client