Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tz5lAKhIB1gnLKtP-t3vJN6bCNk.roa
File: tz5lAKhIB1gnLKtP-t3vJN6bCNk.roa (raw, json)
Hash identifier: Ms4jeLEt9Tvm8FmPI6/BIbPJ2Xyt28fGZFVHUGvFCgo=
Subject key identifier: B7:3E:65:00:A8:48:07:58:27:2C:AB:4F:FA:DD:EF:24:DE:9B:08:D9
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 318B
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tz5lAKhIB1gnLKtP-t3vJN6bCNk.roa
Signing time: Mon 26 Aug 2024 05:30:34 +0000
ROA not before: Mon 26 Aug 2024 05:30:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 123.195.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12683 (0x318b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Aug 26 05:30:34 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B73E6500A8480758272CAB4FFADDEF24DE9B08D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:e4:0b:e6:5e:a6:4f:5a:d6:58:71:db:18:
31:b8:b2:ed:7e:80:15:0c:3e:72:0b:04:04:6f:62:
db:3e:fb:73:97:28:a3:26:dd:1f:3f:69:8d:07:35:
c6:91:73:6c:45:2e:e9:9e:25:02:b2:4c:6c:e7:5d:
67:0a:6c:cd:5f:be:09:bc:1f:4a:74:e9:e7:30:f2:
b9:01:49:1d:21:3f:b9:aa:c5:91:e8:59:56:88:69:
5e:53:ef:85:da:e0:57:8e:2a:c3:42:a1:c7:84:6b:
62:36:d5:16:2f:ce:ee:c6:b9:d7:3f:40:b0:49:ea:
c0:b5:4f:20:f6:5d:14:15:c7:3f:e1:33:d5:29:83:
69:70:c7:b8:da:1e:cb:f1:ef:0b:4b:f8:37:83:87:
db:5d:91:34:4c:e5:2a:3b:e3:57:aa:b2:aa:4d:ce:
9b:76:fd:f8:74:56:0d:c6:b1:45:dd:40:0e:f9:7b:
e1:93:a9:d6:43:94:2d:5f:fd:61:39:21:06:bd:0f:
28:81:9f:9b:a8:bd:e3:4d:e3:58:e9:93:1b:ca:b8:
07:1c:5b:7a:cd:c1:5b:f9:39:a1:ab:84:0a:73:f7:
e4:7b:88:1a:bd:2e:03:aa:1c:76:99:93:43:f1:7d:
9f:33:01:7c:4f:9e:b4:ab:91:2d:ed:58:a4:27:b8:
e3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:3E:65:00:A8:48:07:58:27:2C:AB:4F:FA:DD:EF:24:DE:9B:08:D9
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/tz5lAKhIB1gnLKtP-t3vJN6bCNk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.195.12.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a6:50:ee:51:2e:55:12:8b:33:b1:be:4e:9b:81:ab:62:d2:
2a:8e:0e:0f:1f:1c:8f:b4:82:3f:11:e0:c8:39:75:39:b3:cb:
28:63:29:8e:2b:cb:cf:99:a5:69:2b:7d:50:28:fb:db:15:87:
18:6e:65:4d:85:f9:9b:11:41:48:b4:af:df:d4:5d:f2:56:0c:
4b:d4:4a:40:ee:cd:39:70:c0:76:44:00:a4:5b:1b:1a:0f:06:
e8:90:e8:45:a6:fb:f6:19:56:0c:16:9a:37:3f:0c:5a:85:87:
e8:d0:14:3e:30:a9:40:e1:15:b4:34:52:7a:69:00:cb:45:5d:
7f:88:97:d3:6a:34:d8:a0:fc:30:45:42:a9:0e:74:81:7c:fe:
8f:65:42:e7:65:04:28:33:bf:7a:7d:6d:3e:61:fd:5a:d7:d4:
1e:d5:76:1f:14:89:54:38:b6:12:d4:31:bb:24:d7:fa:49:1e:
5a:df:d1:72:ab:86:3e:71:04:97:c5:bf:84:ae:63:30:c3:91:
3f:0c:fe:05:cc:ba:b7:ca:e9:59:77:de:a5:00:e9:f0:26:55:
c9:0f:65:1a:53:41:5e:04:cb:74:5e:94:16:ed:84:5e:20:8b:
af:1a:e7:4e:b1:56:77:80:be:42:48:1c:73:6e:3d:46:cf:df:
6f:da:ce:b6
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICMYswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNDA4MjYw
NTMwMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3M0U2NTAwQTg0ODA3
NTgyNzJDQUI0RkZBRERFRjI0REU5QjA4RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQClR+QL5l6mT1rWWHHbGDG4su1+gBUMPnILBARvYts++3OXKKMm
3R8/aY0HNcaRc2xFLumeJQKyTGznXWcKbM1fvgm8H0p06ecw8rkBSR0hP7mqxZHo
WVaIaV5T74Xa4FeOKsNCoceEa2I21RYvzu7Gudc/QLBJ6sC1TyD2XRQVxz/hM9Up
g2lwx7jaHsvx7wtL+DeDh9tdkTRM5So741eqsqpNzpt2/fh0Vg3GsUXdQA75e+GT
qdZDlC1f/WE5IQa9DyiBn5uoveNN41jpkxvKuAccW3rNwVv5OaGrhApz9+R7iBq9
LgOqHHaZk0PxfZ8zAXxPnrSrkS3tWKQnuON9AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUtz5lAKhIB1gnLKtP+t3vJN6bCNkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3R6NWxBS2hJQjFnbkxLdFAt
dDN2Sk42YkNOay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJ7
wwwwDQYJKoZIhvcNAQELBQADggEBADumUO5RLlUSizOxvk6bgati0iqODg8fHI+0
gj8R4Mg5dTmzyyhjKY4ry8+ZpWkrfVAo+9sVhxhuZU2F+ZsRQUi0r9/UXfJWDEvU
SkDuzTlwwHZEAKRbGxoPBuiQ6EWm+/YZVgwWmjc/DFqFh+jQFD4wqUDhFbQ0Unpp
AMtFXX+Il9NqNNig/DBFQqkOdIF8/o9lQudlBCgzv3p9bT5h/VrX1B7Vdh8UiVQ4
thLUMbsk1/pJHlrf0XKrhj5xBJfFv4SuYzDDkT8M/gXMurfK6Vl33qUA6fAmVckP
ZRpTQV4Ey3RelBbthF4gi68a506xVneAvkJIHHNuPUbP32/azrY=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:06:27 2025 by rpki-client