Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xBTBUmgGocRcIziP8Uu-408Lkf0.roa
File: xBTBUmgGocRcIziP8Uu-408Lkf0.roa (raw, json)
Hash identifier: /fFggd8l9lQwaGcTphKkLQqU3HEcGK5ez/YldmLC/hg=
Subject key identifier: C4:14:C1:52:68:06:A1:C4:5C:23:38:8F:F1:4B:BE:E3:4F:0B:91:FD
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 35BB
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xBTBUmgGocRcIziP8Uu-408Lkf0.roa
Signing time: Mon 10 Feb 2025 13:53:38 +0000
ROA not before: Mon 10 Feb 2025 13:53:38 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9924
IP address blocks: 123.193.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13755 (0x35bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:53:38 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=C414C1526806A1C45C23388FF14BBEE34F0B91FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:f5:1d:78:0d:b0:28:8e:30:68:a4:6f:63:
0a:f5:6e:39:01:67:cb:93:79:56:2c:74:d9:ad:bd:
29:c1:6d:4b:67:90:3b:b6:5f:d4:2d:32:b6:3c:b8:
81:50:5b:1e:75:04:dc:aa:97:14:35:85:87:5b:b2:
e4:6c:a5:8a:3a:37:f4:f6:b2:40:b6:e6:a9:0d:a0:
76:a9:f1:43:46:79:2f:28:5b:cb:ed:64:8c:c2:b1:
a1:76:cb:3e:1b:32:a9:c3:05:6d:39:3d:e2:c3:b4:
21:fc:39:14:cf:ba:ec:4b:8b:b6:a8:e0:80:3e:0f:
e6:69:45:f7:ba:27:3b:4b:27:a7:99:75:1a:c1:05:
e4:61:38:7d:67:b2:5d:29:40:3a:24:d9:f1:fb:0c:
78:df:25:3b:03:be:ae:38:b4:90:bd:6a:4d:96:be:
0b:9b:fe:a7:b0:14:c7:a4:ea:15:af:e9:f6:7e:58:
c6:c6:f6:6f:33:1d:fa:26:62:11:5c:fc:ef:26:20:
17:b1:7a:2b:0f:de:fd:b4:7b:0b:5a:f4:4d:29:86:
45:96:a7:5a:74:0b:b5:4d:c3:b5:2d:07:98:3f:2e:
da:84:07:3d:ac:d6:ea:5c:c9:c8:07:49:23:d4:f7:
64:ba:83:ce:88:2f:52:fd:6b:07:78:91:08:be:53:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:C1:52:68:06:A1:C4:5C:23:38:8F:F1:4B:BE:E3:4F:0B:91:FD
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/xBTBUmgGocRcIziP8Uu-408Lkf0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.193.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:da:b3:e8:0c:29:50:3b:e3:a0:7d:c8:4c:7d:a5:f6:d7:98:
d0:86:31:22:1a:70:9f:3e:4f:be:8a:c5:70:1c:4b:bb:53:2a:
9d:e9:7a:75:a4:36:00:a4:0f:ac:ce:d5:8a:5c:41:21:2c:4c:
dd:d7:c7:99:cb:ec:cf:4c:6e:52:b5:96:41:0c:9c:eb:3e:b4:
ab:9b:97:65:26:e9:b3:46:3b:e5:91:3c:f1:bc:7f:fb:30:ab:
56:1a:2a:11:58:a3:b2:8e:3a:88:7d:64:83:71:1c:36:8c:90:
bf:de:72:9a:2f:c5:b8:7e:05:31:7c:f8:0f:b3:1f:cc:25:48:
2b:a8:d3:46:17:b5:a1:41:e9:01:5a:e6:2c:94:7b:b0:2f:35:
c5:c0:b0:3b:60:99:56:92:25:62:7c:4d:66:75:e0:75:36:71:
cf:bc:f0:7f:0f:80:12:db:57:9e:6e:da:e5:06:5e:18:a2:7a:
c6:fb:58:f5:c2:b2:20:f4:af:ed:f8:6d:8b:0f:02:fd:6c:45:
99:e5:09:25:f6:07:22:15:3c:d8:8b:9a:5c:60:f9:fb:f6:7c:
39:26:75:d9:26:bc:31:fe:4d:bb:55:73:98:0c:fc:8d:00:5d:
de:b8:0e:20:22:ad:03:64:d7:57:5a:16:bb:e5:20:d2:c1:88:
1e:76:7b:e3
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICNbswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUzMzhaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEM0MTRDMTUyNjgwNkEx
QzQ1QzIzMzg4RkYxNEJCRUUzNEYwQjkxRkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWi/UdeA2wKI4waKRvYwr1bjkBZ8uTeVYsdNmtvSnBbUtnkDu2
X9QtMrY8uIFQWx51BNyqlxQ1hYdbsuRspYo6N/T2skC25qkNoHap8UNGeS8oW8vt
ZIzCsaF2yz4bMqnDBW05PeLDtCH8ORTPuuxLi7ao4IA+D+ZpRfe6JztLJ6eZdRrB
BeRhOH1nsl0pQDok2fH7DHjfJTsDvq44tJC9ak2Wvgub/qewFMek6hWv6fZ+WMbG
9m8zHfomYhFc/O8mIBexeisP3v20ewta9E0phkWWp1p0C7VNw7UtB5g/LtqEBz2s
1upcycgHSSPU92S6g86IL1L9awd4kQi+U/szAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUxBTBUmgGocRcIziP8Uu+408Lkf0wHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3hCVEJVbWdHb2NSY0l6aVA4
VXUtNDA4TGtmMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV7
wQAwDQYJKoZIhvcNAQELBQADggEBAC3as+gMKVA746B9yEx9pfbXmNCGMSIacJ8+
T76KxXAcS7tTKp3penWkNgCkD6zO1YpcQSEsTN3Xx5nL7M9MblK1lkEMnOs+tKub
l2Um6bNGO+WRPPG8f/swq1YaKhFYo7KOOoh9ZINxHDaMkL/ecpovxbh+BTF8+A+z
H8wlSCuo00YXtaFB6QFa5iyUe7AvNcXAsDtgmVaSJWJ8TWZ14HU2cc+88H8PgBLb
V55u2uUGXhiiesb7WPXCsiD0r+34bYsPAv1sRZnlCSX2ByIVPNiLmlxg+fv2fDkm
ddkmvDH+TbtVc5gM/I0AXd64DiAirQNk11daFrvlINLBiB52e+M=
-----END CERTIFICATE-----
Generated at Tue May 6 03:03:40 2025 by rpki-client