Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BdjIab7rFhuMe_qSkrikl9AkcWs.roa
File: BdjIab7rFhuMe_qSkrikl9AkcWs.roa (raw, json)
Hash identifier: 0JeSEllISv/X5hYLTBB6EKKwYLYzOKsqEE6VQ4q5/Fg=
Subject key identifier: 05:D8:C8:69:BE:EB:16:1B:8C:7B:FA:92:92:B8:A4:97:D0:24:71:6B
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3393
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BdjIab7rFhuMe_qSkrikl9AkcWs.roa
Signing time: Mon 10 Feb 2025 13:51:33 +0000
ROA not before: Mon 10 Feb 2025 13:51:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13203 (0x3393)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:33 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=05D8C869BEEB161B8C7BFA9292B8A497D024716B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:bd:47:ff:d6:43:ee:72:78:bb:15:55:d1:
6b:e5:e4:ef:3c:cb:7d:a1:fd:e8:52:fa:f2:56:78:
3f:f8:24:a5:b4:d5:b5:71:27:68:d5:b5:12:8e:02:
4f:6d:5f:a7:f0:9d:10:53:d1:3d:4b:85:e6:4f:d4:
cd:84:6e:0c:d9:0c:9c:d2:65:71:42:85:10:3c:0b:
b3:24:af:1b:6d:4c:22:d4:03:d7:41:7b:4a:e1:3f:
af:f6:26:c2:f1:3a:50:cc:45:26:4d:d1:9d:20:2a:
e1:f5:80:cf:fe:23:7f:7f:73:5f:72:a2:f7:d7:60:
3d:65:ee:e2:86:a0:bc:1b:96:e2:3e:21:c1:61:45:
71:f5:11:23:cd:1b:47:71:43:a7:1f:91:49:06:c9:
c4:a8:a2:a2:82:9d:a7:08:0d:4a:67:4f:4b:61:8b:
67:79:b4:ed:9c:5f:b4:40:20:5b:71:44:76:55:13:
d7:17:61:e8:40:9d:bd:a0:05:91:c9:88:9b:07:31:
34:52:75:cd:d3:6e:cc:d0:89:66:5c:c5:2e:c6:44:
2f:13:f5:be:e0:c1:ef:fb:82:12:3d:d5:b4:d5:fa:
12:33:68:84:2a:fd:2c:a1:ae:05:de:5b:f5:11:31:
ce:9a:06:e5:aa:9b:91:61:91:4a:3d:cd:88:0e:06:
4d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D8:C8:69:BE:EB:16:1B:8C:7B:FA:92:92:B8:A4:97:D0:24:71:6B
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/BdjIab7rFhuMe_qSkrikl9AkcWs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.224.0/22
Signature Algorithm: sha256WithRSAEncryption
86:7a:e5:0d:b4:56:8f:05:68:41:0e:36:ca:83:07:ea:93:ef:
6f:bd:bc:a5:1c:10:8a:d9:6c:de:dc:a2:a6:be:31:5c:3d:12:
2a:4b:8d:cf:3f:44:09:c6:6b:d0:2f:51:5f:3a:fc:c9:2a:fc:
0d:68:e2:21:cc:e5:91:1f:30:5f:12:73:f8:71:79:4e:ac:5f:
05:29:d4:0b:f9:bd:dc:b9:11:b0:2d:0c:71:44:bc:d2:5b:06:
e2:36:87:a6:f0:4e:ea:88:71:59:a8:51:b9:db:a7:bd:4f:3e:
47:5d:d3:07:62:94:04:5a:5c:2f:ea:5e:9e:ce:00:75:d4:dc:
8c:4d:f3:ae:16:76:5d:76:5b:be:05:16:16:ff:c7:f0:d8:e5:
16:83:84:76:84:2f:ef:b6:f1:35:06:0d:76:ae:9a:77:ef:e0:
5a:80:d5:7c:bd:aa:1a:41:c4:cb:46:81:db:50:58:55:3f:80:
d9:aa:6e:3a:48:c2:b2:0d:58:01:1b:c2:4a:62:eb:2e:10:8f:
1b:2f:ba:8f:98:58:49:58:e0:3e:b6:e5:8c:72:49:de:fd:f7:
0f:a9:50:c9:17:1a:44:04:01:37:80:63:b6:b6:c0:a6:4f:99:
06:66:9d:85:b6:ae:b7:f6:1e:23:b6:5b:f9:95:0b:57:5d:e0:
64:62:16:6c
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDA1RDhDODY5QkVFQjE2
MUI4QzdCRkE5MjkyQjhBNDk3RDAyNDcxNkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3Nb1H/9ZD7nJ4uxVV0Wvl5O88y32h/ehS+vJWeD/4JKW01bVx
J2jVtRKOAk9tX6fwnRBT0T1LheZP1M2EbgzZDJzSZXFChRA8C7MkrxttTCLUA9dB
e0rhP6/2JsLxOlDMRSZN0Z0gKuH1gM/+I39/c19yovfXYD1l7uKGoLwbluI+IcFh
RXH1ESPNG0dxQ6cfkUkGycSooqKCnacIDUpnT0thi2d5tO2cX7RAIFtxRHZVE9cX
YehAnb2gBZHJiJsHMTRSdc3TbszQiWZcxS7GRC8T9b7gwe/7ghI91bTV+hIzaIQq
/SyhrgXeW/URMc6aBuWqm5FhkUo9zYgOBk3NAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUBdjIab7rFhuMe/qSkrikl9AkcWswHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0JkaklhYjdyRmh1TWVfcVNr
cmlrbDlBa2NXcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AeAwDQYJKoZIhvcNAQELBQADggEBAIZ65Q20Vo8FaEEONsqDB+qT72+9vKUcEIrZ
bN7coqa+MVw9EipLjc8/RAnGa9AvUV86/Mkq/A1o4iHM5ZEfMF8Sc/hxeU6sXwUp
1Av5vdy5EbAtDHFEvNJbBuI2h6bwTuqIcVmoUbnbp71PPkdd0wdilARaXC/qXp7O
AHXU3IxN864Wdl12W74FFhb/x/DY5RaDhHaEL++28TUGDXaumnfv4FqA1Xy9qhpB
xMtGgdtQWFU/gNmqbjpIwrINWAEbwkpi6y4Qjxsvuo+YWElY4D625YxySd799w+p
UMkXGkQEATeAY7a2wKZPmQZmnYW2rrf2HiO2W/mVC1dd4GRiFmw=
-----END CERTIFICATE-----
Generated at Thu May 8 09:35:40 2025 by rpki-client