Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zAOYe5eHNgsvtfOLVn0O0RNd_e8.roa
File: zAOYe5eHNgsvtfOLVn0O0RNd_e8.roa (raw, json)
Hash identifier: gVHZhgjXUR3E013sWyROeKtV+277cA2OSnw9t+TOhw0=
Subject key identifier: CC:03:98:7B:97:87:36:0B:2F:B5:F3:8B:56:7D:0E:D1:13:5D:FD:EF
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3487
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zAOYe5eHNgsvtfOLVn0O0RNd_e8.roa
Signing time: Mon 10 Feb 2025 13:52:28 +0000
ROA not before: Mon 10 Feb 2025 13:52:28 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.194.205.0/28 maxlen: 28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13447 (0x3487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:52:28 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CC03987B9787360B2FB5F38B567D0ED1135DFDEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:34:57:e4:b1:c0:ba:77:bf:57:75:96:be:c8:
db:0b:b3:bb:87:fe:a5:7d:0e:ce:f5:5e:bf:a7:3f:
45:10:0b:20:3e:13:8f:48:44:af:5d:d6:49:bb:96:
2f:4f:56:72:5e:03:8e:9d:ec:63:20:e4:88:bc:19:
6a:15:b4:5a:fb:9a:ed:11:1d:09:5c:2c:58:4c:83:
cb:50:3b:30:bd:3c:e6:8e:7c:1e:1e:e7:9a:ca:0e:
47:5e:91:64:67:7e:bf:ba:c4:e2:0c:f6:70:64:50:
61:0c:43:7c:5f:ce:e2:ef:1d:2c:68:fb:49:ea:84:
7e:96:17:fb:d7:50:ae:01:0b:b9:34:99:86:80:6b:
58:43:72:73:4e:87:e3:44:de:a1:4f:8a:99:c7:eb:
af:66:8e:ec:76:a7:99:87:fa:e6:b6:a9:13:d3:df:
cf:22:41:64:a0:9d:47:b3:50:19:82:89:90:db:09:
f5:50:99:06:0f:34:72:c6:b2:91:c7:40:64:cd:ac:
30:2e:32:62:98:1f:43:28:7b:25:46:0b:0e:45:0c:
90:15:5c:15:4a:f4:3e:1a:f8:14:85:fd:b9:15:e2:
6d:f2:13:c2:62:0b:e9:2c:00:05:4f:0d:ee:c2:71:
1a:0e:02:38:b1:07:fa:b6:f6:39:6f:74:28:73:50:
b0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:03:98:7B:97:87:36:0B:2F:B5:F3:8B:56:7D:0E:D1:13:5D:FD:EF
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/zAOYe5eHNgsvtfOLVn0O0RNd_e8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.194.205.0/28
Signature Algorithm: sha256WithRSAEncryption
9b:3e:f6:f7:cd:f1:2a:5e:12:86:ee:95:d7:bf:58:2f:86:32:
34:3e:51:a8:c7:f0:cf:69:21:83:23:1a:75:20:96:1b:00:4d:
aa:b1:59:77:02:c8:c9:08:6c:a5:5d:d9:64:37:81:0f:6c:47:
27:72:70:66:9f:72:ab:b2:83:be:cb:63:6a:fd:de:14:8f:d1:
a0:d3:a4:ff:2d:0a:39:db:5f:2f:a1:83:de:d2:c5:b6:f8:5f:
ce:36:26:13:13:af:d5:2e:26:fd:b6:29:84:67:c0:e4:0c:ef:
f5:59:b1:ee:f0:cc:30:6d:78:6a:4e:06:24:d0:90:92:26:64:
39:72:dd:02:d0:0e:16:ca:77:63:5f:c3:37:48:a9:c6:29:73:
60:ef:67:f9:3d:df:bc:47:5a:a4:d2:5e:35:df:b8:7f:6e:1d:
ae:6e:2d:b4:9c:0e:f7:8b:d6:f6:bd:dc:e5:4c:da:92:11:5f:
a7:3e:54:07:f5:c5:da:93:f6:ac:3b:3c:ef:f9:e6:81:5e:3c:
a7:f1:dd:d9:44:bf:30:12:fc:9a:b2:0f:6c:5c:d3:02:52:2e:
2a:a1:d3:19:a9:0b:85:ac:91:36:f8:50:a2:a6:39:58:a6:8a:
e1:f9:b3:85:ee:24:f8:c5:2b:d8:bd:aa:00:86:2a:bb:e2:e8:
65:08:3f:0e
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgICNIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUyMjhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDMDM5ODdCOTc4NzM2
MEIyRkI1RjM4QjU2N0QwRUQxMTM1REZERUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6NFfkscC6d79XdZa+yNsLs7uH/qV9Ds71Xr+nP0UQCyA+E49I
RK9d1km7li9PVnJeA46d7GMg5Ii8GWoVtFr7mu0RHQlcLFhMg8tQOzC9POaOfB4e
55rKDkdekWRnfr+6xOIM9nBkUGEMQ3xfzuLvHSxo+0nqhH6WF/vXUK4BC7k0mYaA
a1hDcnNOh+NE3qFPipnH669mjux2p5mH+ua2qRPT388iQWSgnUezUBmCiZDbCfVQ
mQYPNHLGspHHQGTNrDAuMmKYH0MoeyVGCw5FDJAVXBVK9D4a+BSF/bkV4m3yE8Ji
C+ksAAVPDe7CcRoOAjixB/q29jlvdChzULBnAgMBAAGjggHvMIIB6zAdBgNVHQ4E
FgQUzAOYe5eHNgsvtfOLVn0O0RNd/e8wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3pBT1llNWVITmdzdnRmT0xW
bjBPMFJOZF9lOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgABMAcDBQR7
ws0AMA0GCSqGSIb3DQEBCwUAA4IBAQCbPvb3zfEqXhKG7pXXv1gvhjI0PlGox/DP
aSGDIxp1IJYbAE2qsVl3AsjJCGylXdlkN4EPbEcncnBmn3KrsoO+y2Nq/d4Uj9Gg
06T/LQo5218voYPe0sW2+F/ONiYTE6/VLib9timEZ8DkDO/1WbHu8MwwbXhqTgYk
0JCSJmQ5ct0C0A4WyndjX8M3SKnGKXNg72f5Pd+8R1qk0l4137h/bh2ubi20nA73
i9b2vdzlTNqSEV+nPlQH9cXak/asOzzv+eaBXjyn8d3ZRL8wEvyasg9sXNMCUi4q
odMZqQuFrJE2+FCipjlYporh+bOF7iT4xSvYvaoAhiq74uhlCD8O
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:07 2025 by rpki-client