Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C08Xxd5uAqD6Wm2xX0eGxjmj1wk.roa
File: C08Xxd5uAqD6Wm2xX0eGxjmj1wk.roa (raw, json)
Hash identifier: c4DeVRIhx1z8v/dtTIsKv7OigjRJu4w8MDf2TGAwcrY=
Subject key identifier: 0B:4F:17:C5:DE:6E:02:A0:FA:5A:6D:B1:5F:47:86:C6:39:A3:D7:09
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 3570
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C08Xxd5uAqD6Wm2xX0eGxjmj1wk.roa
Signing time: Mon 10 Feb 2025 13:53:20 +0000
ROA not before: Mon 10 Feb 2025 13:53:20 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13680 (0x3570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:20 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=0B4F17C5DE6E02A0FA5A6DB15F4786C639A3D709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:ed:a1:a4:46:9b:14:62:8d:6e:ee:c4:ee:
2f:1c:91:02:5a:d9:90:36:ad:33:a4:ff:11:e6:d9:
63:11:37:bd:f9:14:fe:52:e7:30:ca:71:28:95:02:
b4:5a:30:05:74:5d:cc:78:01:57:11:74:22:5d:03:
56:0e:76:be:01:91:83:4c:58:ca:f4:e8:12:26:ea:
da:c6:54:23:d2:3e:46:a6:2b:80:f9:51:b8:e5:c9:
45:e0:2c:2c:3d:fe:3b:97:06:72:c9:26:f8:a1:38:
a5:df:e1:cb:03:42:fa:a0:b3:aa:55:09:12:75:d2:
ab:3d:b5:16:63:33:05:9a:3e:a3:53:cf:a3:19:6a:
00:01:42:bd:57:d9:e0:ca:59:de:5c:62:dd:c9:ca:
34:0f:c1:4a:5a:ab:16:dc:e3:0a:ce:df:6a:63:e7:
88:df:f5:6d:ff:e0:87:49:0a:03:d5:47:a2:21:67:
bf:fb:c8:4d:1f:57:48:ec:bd:15:ac:07:21:83:4e:
fe:8c:fe:97:fa:4e:59:76:e5:cd:a7:eb:8d:14:0d:
f3:70:49:80:16:bf:11:74:15:3e:db:8c:43:d5:79:
5a:1e:38:47:ef:14:5a:1a:8d:b3:28:4b:50:aa:ec:
79:5f:c1:ff:d9:5f:e0:f2:8b:99:ca:c8:53:2e:7f:
59:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:17:C5:DE:6E:02:A0:FA:5A:6D:B1:5F:47:86:C6:39:A3:D7:09
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/C08Xxd5uAqD6Wm2xX0eGxjmj1wk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:20:37:35:87:c3:ba:e5:85:06:0b:43:39:25:58:83:96:e5:
bd:82:60:a5:ce:bd:58:a2:58:70:10:43:d2:b2:a6:2a:39:f8:
1d:f0:d1:ab:e7:15:b5:16:0f:bd:88:3c:f9:f7:27:8f:a6:91:
a3:c7:a6:44:fd:17:91:12:14:1d:2a:af:13:70:11:ea:5b:00:
9d:3f:40:95:1d:ed:18:7c:95:29:15:b5:0c:ac:8a:f5:74:2b:
36:4e:3b:e1:a8:2f:41:c8:fd:02:8b:c9:98:8c:4e:c8:05:f8:
7b:29:53:31:cc:d2:fe:25:cf:31:d6:4c:47:e2:62:8f:11:3d:
55:22:ec:a3:00:74:0c:e2:fb:05:de:ad:bb:a3:4d:f6:11:18:
8f:08:4e:95:d7:01:9b:ca:5e:8a:16:6a:a0:d0:1f:f2:3f:0b:
d4:88:02:42:ee:ca:91:cc:21:47:25:30:80:ac:41:35:a8:52:
be:4c:a5:ce:bc:f2:29:44:a9:ac:f8:8d:2b:8d:eb:24:a9:36:
ff:96:19:29:01:64:79:a4:a8:0a:11:f1:55:79:46:31:68:32:
2e:a4:35:b6:95:f0:79:d8:d9:3d:b3:14:9f:b7:72:fc:1b:2d:
e4:5e:20:3c:fa:59:70:0a:b0:59:cf:59:f1:ce:81:4a:4b:96:
27:68:a2:5d
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNXAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMjBaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDBCNEYxN0M1REU2RTAy
QTBGQTVBNkRCMTVGNDc4NkM2MzlBM0Q3MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEbu2hpEabFGKNbu7E7i8ckQJa2ZA2rTOk/xHm2WMRN735FP5S
5zDKcSiVArRaMAV0Xcx4AVcRdCJdA1YOdr4BkYNMWMr06BIm6trGVCPSPkamK4D5
UbjlyUXgLCw9/juXBnLJJvihOKXf4csDQvqgs6pVCRJ10qs9tRZjMwWaPqNTz6MZ
agABQr1X2eDKWd5cYt3JyjQPwUpaqxbc4wrO32pj54jf9W3/4IdJCgPVR6IhZ7/7
yE0fV0jsvRWsByGDTv6M/pf6Tll25c2n640UDfNwSYAWvxF0FT7bjEPVeVoeOEfv
FFoajbMoS1Cq7Hlfwf/ZX+Dyi5nKyFMuf1kVAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUC08Xxd5uAqD6Wm2xX0eGxjmj1wkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL0MwOFh4ZDV1QXFENldtMnhY
MGVHeGptajF3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJq
AVwwDQYJKoZIhvcNAQELBQADggEBAF0gNzWHw7rlhQYLQzklWIOW5b2CYKXOvVii
WHAQQ9Kypio5+B3w0avnFbUWD72IPPn3J4+mkaPHpkT9F5ESFB0qrxNwEepbAJ0/
QJUd7Rh8lSkVtQysivV0KzZOO+GoL0HI/QKLyZiMTsgF+HspUzHM0v4lzzHWTEfi
Yo8RPVUi7KMAdAzi+wXerbujTfYRGI8ITpXXAZvKXooWaqDQH/I/C9SIAkLuypHM
IUclMICsQTWoUr5Mpc688ilEqaz4jSuN6ySpNv+WGSkBZHmkqAoR8VV5RjFoMi6k
NbaV8HnY2T2zFJ+3cvwbLeReIDz6WXAKsFnPWfHOgUpLlidool0=
-----END CERTIFICATE-----
Generated at Sat Jun 21 05:32:20 2025 by rpki-client