Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q9MGrraQ2_pDjP_wLo_PiEZAzJk.roa
File: q9MGrraQ2_pDjP_wLo_PiEZAzJk.roa (raw, json)
Hash identifier: c5w62SSBQlbdPF7RHgxUT9gmRgVbd0UmTpGL2lOB2/8=
Subject key identifier: AB:D3:06:AE:B6:90:DB:FA:43:8C:FF:F0:2E:8F:CF:88:46:40:CC:99
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 33A9
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q9MGrraQ2_pDjP_wLo_PiEZAzJk.roa
Signing time: Mon 10 Feb 2025 13:51:39 +0000
ROA not before: Mon 10 Feb 2025 13:51:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38841
IP address blocks: 106.1.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13225 (0x33a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Feb 10 13:51:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=ABD306AEB690DBFA438CFFF02E8FCF884640CC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:61:5f:03:12:24:2a:a5:1a:38:71:13:b4:75:
d2:9b:46:6d:4d:ff:af:2f:13:19:67:27:fc:92:fb:
11:fd:97:fc:76:6a:a4:fc:7c:4b:1f:4c:7c:63:69:
f8:56:61:9d:07:5f:74:cd:65:0b:64:f0:75:bf:39:
ef:4b:e3:a9:87:37:39:73:ed:52:f3:50:a0:44:08:
0e:3f:70:8a:f1:25:4c:f2:3d:63:64:4a:26:bc:4b:
94:f5:37:e1:09:20:f7:85:fb:dc:0c:fa:ca:ed:f0:
0d:5d:f3:f8:5a:45:c3:3a:57:4b:9a:04:d4:8f:66:
81:17:b6:1c:54:ec:74:ec:17:fe:a8:23:a1:bd:1f:
0f:84:dd:b9:f4:87:db:ba:67:a2:fc:8e:3f:55:4d:
59:48:c7:d1:0b:07:16:98:5a:0d:3a:04:53:16:73:
03:e4:ab:bf:d3:8c:52:4a:64:a0:65:7e:de:3a:46:
f3:53:1a:fb:b2:ce:77:9a:ae:84:ef:b2:59:12:05:
fb:47:75:f4:f2:0f:a3:b7:be:2b:45:75:c5:d1:cd:
a2:cf:6a:e7:18:e7:93:8c:8a:86:e6:a3:a9:e9:20:
86:d7:83:b2:88:5f:e8:fb:d2:ae:65:f0:6f:a2:a1:
a5:39:12:a6:48:2b:26:1b:e0:0e:e7:96:32:8e:c6:
fc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D3:06:AE:B6:90:DB:FA:43:8C:FF:F0:2E:8F:CF:88:46:40:CC:99
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/q9MGrraQ2_pDjP_wLo_PiEZAzJk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.24.0/21
Signature Algorithm: sha256WithRSAEncryption
24:5e:65:d9:78:a1:aa:2e:76:eb:dd:99:1c:cb:07:7e:02:a1:
b3:15:20:25:99:cd:c1:70:2d:19:b2:a0:05:d0:00:c2:71:48:
12:dc:47:f6:91:8d:54:88:22:4c:14:3b:52:be:d3:3a:10:de:
3b:f6:c4:08:36:b6:91:3f:6a:52:fd:ee:36:d9:70:38:78:23:
cd:59:8c:0f:7f:b2:80:c9:7e:33:e4:5a:d7:5b:3f:f6:17:8d:
5b:ac:8e:48:8b:ac:49:58:8d:19:1f:ae:27:ba:ad:09:f2:02:
16:f2:fd:5d:30:a9:44:fb:4c:b5:3c:bf:e7:79:5d:9c:db:6b:
f0:32:2f:f3:54:ff:51:1e:16:74:71:b6:1c:ed:72:5e:9c:d0:
a0:11:f9:0f:4f:f1:22:04:34:bd:7a:e0:57:1c:6e:14:df:00:
15:f7:97:a0:4e:2f:62:fc:00:32:38:77:f8:3f:98:82:6a:2b:
66:f5:59:bd:ae:c6:e7:eb:f4:fb:d1:97:f8:64:64:5b:8c:30:
2b:41:74:f0:c8:58:34:bb:29:5c:5a:ce:64:95:a1:c2:90:36:
e0:67:e3:92:33:f5:19:bb:a0:f7:b9:d3:7b:ad:f7:e1:a4:92:
55:f9:30:b4:bb:a2:b7:64:97:b5:31:11:38:98:a8:7a:20:ac:
1d:28:27:eb
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICM6kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yNTAyMTAx
MzUxMzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEFCRDMwNkFFQjY5MERC
RkE0MzhDRkZGMDJFOEZDRjg4NDY0MENDOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlYV8DEiQqpRo4cRO0ddKbRm1N/68vExlnJ/yS+xH9l/x2aqT8
fEsfTHxjafhWYZ0HX3TNZQtk8HW/Oe9L46mHNzlz7VLzUKBECA4/cIrxJUzyPWNk
Sia8S5T1N+EJIPeF+9wM+srt8A1d8/haRcM6V0uaBNSPZoEXthxU7HTsF/6oI6G9
Hw+E3bn0h9u6Z6L8jj9VTVlIx9ELBxaYWg06BFMWcwPkq7/TjFJKZKBlft46RvNT
GvuyznearoTvslkSBftHdfTyD6O3vitFdcXRzaLPaucY55OMiobmo6npIIbXg7KI
X+j70q5l8G+ioaU5EqZIKyYb4A7nljKOxvzfAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUq9MGrraQ2/pDjP/wLo/PiEZAzJkwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL3E5TUdycmFRMl9wRGpQX3dM
b19QaUVaQXpKay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBANq
ARgwDQYJKoZIhvcNAQELBQADggEBACReZdl4oaouduvdmRzLB34CobMVICWZzcFw
LRmyoAXQAMJxSBLcR/aRjVSIIkwUO1K+0zoQ3jv2xAg2tpE/alL97jbZcDh4I81Z
jA9/soDJfjPkWtdbP/YXjVusjkiLrElYjRkfrie6rQnyAhby/V0wqUT7TLU8v+d5
XZzba/AyL/NU/1EeFnRxthztcl6c0KAR+Q9P8SIENL164FccbhTfABX3l6BOL2L8
ADI4d/g/mIJqK2b1Wb2uxufr9PvRl/hkZFuMMCtBdPDIWDS7KVxazmSVocKQNuBn
45Iz9Rm7oPe503ut9+GkklX5MLS7ordkl7UxETiYqHogrB0oJ+s=
-----END CERTIFICATE-----
Generated at Mon May 19 00:34:30 2025 by rpki-client