Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0cp5Br_lx9JP8MAcKFPMDMDUqGU.roa
File: 0cp5Br_lx9JP8MAcKFPMDMDUqGU.roa (raw, json)
Hash identifier: 8WejpH2LMv/cJHSN820XnrO/Je/w+/s7kd4grRUnawA=
Subject key identifier: D1:CA:79:06:BF:E5:C7:D2:4F:F0:C0:1C:28:53:CC:0C:C0:D4:A8:65
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 139F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0cp5Br_lx9JP8MAcKFPMDMDUqGU.roa
Signing time: Fri 01 Sep 2023 09:25:13 +0000
ROA not before: Fri 01 Sep 2023 09:25:13 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 106.105.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5023 (0x139f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:13 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=D1CA7906BFE5C7D24FF0C01C2853CC0CC0D4A865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e9:1b:06:93:ab:dd:38:a6:90:74:7e:66:48:
2b:86:7e:30:4b:18:ec:eb:dc:66:f7:9f:c7:58:da:
ee:53:c3:20:89:6f:70:59:5d:f0:d6:1b:1c:c3:3e:
bf:f9:b4:97:7d:7b:17:aa:16:a5:30:3f:18:90:a9:
b5:5b:4c:48:9b:7c:a8:bf:f5:a2:c0:15:83:86:d0:
89:c2:6e:9d:5a:b6:ea:4b:52:47:0d:ce:01:42:b7:
ce:7f:03:e8:d4:85:b3:d7:23:ad:3b:3c:72:00:d4:
19:5a:10:c4:ee:7d:07:59:b8:39:41:a1:ec:02:4e:
4a:64:87:c5:b4:98:14:cb:39:7a:05:b0:71:13:58:
ae:5b:20:f4:a9:58:ff:8d:5e:d6:dc:1e:42:3b:ad:
0b:99:ec:2d:6a:56:af:c1:88:44:01:b5:b9:cb:a8:
c0:e7:19:c3:d2:bf:2c:cc:73:c0:66:cc:5f:b6:b8:
c1:63:59:b0:98:8d:d7:e4:b6:8e:f1:f4:2f:14:d5:
a5:7a:23:70:e5:d1:bb:84:83:db:1f:1c:39:e9:79:
69:2d:8c:12:09:11:30:9c:5f:0b:5f:0c:59:75:dc:
37:e7:09:ef:38:a7:5e:5a:a7:ab:42:dc:bb:b7:9b:
db:98:d2:4e:6a:6a:20:a7:02:22:1b:e1:a3:d5:8a:
99:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CA:79:06:BF:E5:C7:D2:4F:F0:C0:1C:28:53:CC:0C:C0:D4:A8:65
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0cp5Br_lx9JP8MAcKFPMDMDUqGU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9b:d6:54:df:2d:67:57:3c:f8:2a:20:71:6c:65:48:c1:55:bc:
f0:eb:0f:dc:50:e2:99:17:ed:64:04:b8:c9:73:19:42:7e:f4:
74:ef:e0:ec:32:20:28:89:dc:9d:ce:d7:68:1e:95:30:0a:43:
2f:07:fa:fa:1e:c7:32:29:aa:bf:ac:b8:9b:95:66:0e:40:89:
ef:ba:31:4a:77:1e:ba:2f:97:7b:35:c9:46:b7:c8:28:12:00:
36:d3:f8:c9:2a:76:38:81:c9:4e:85:4f:b2:ac:8a:19:1e:39:
08:2a:d0:ac:8d:53:1f:3b:4b:55:2c:4b:c1:1c:9b:e6:a3:3d:
62:fd:f5:b4:a9:ce:85:4b:be:95:70:18:a4:4d:fc:fd:4b:95:
6e:44:d8:bf:a7:0f:c5:96:0e:fe:18:7c:a3:25:f8:67:b2:77:
93:4d:32:3b:a1:fb:93:94:19:70:3e:93:38:f0:46:e0:b9:ae:
74:5b:3a:a4:f5:87:a6:4f:54:19:fd:ac:b6:77:8b:1f:dd:30:
37:10:cb:45:dd:df:fd:ce:3c:b0:03:f0:4e:08:9a:84:9b:d1:
6a:56:5b:9a:b5:4f:e4:6d:9c:eb:fa:53:44:b7:eb:dd:ff:70:
dd:6b:6b:a7:94:87:10:d2:1a:74:2d:13:6c:50:d3:8c:cd:aa:
ee:a2:c2:30
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI1MTNaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEQxQ0E3OTA2QkZFNUM3
RDI0RkYwQzAxQzI4NTNDQzBDQzBENEE4NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC16RsGk6vdOKaQdH5mSCuGfjBLGOzr3Gb3n8dY2u5TwyCJb3BZ
XfDWGxzDPr/5tJd9exeqFqUwPxiQqbVbTEibfKi/9aLAFYOG0InCbp1atupLUkcN
zgFCt85/A+jUhbPXI607PHIA1BlaEMTufQdZuDlBoewCTkpkh8W0mBTLOXoFsHET
WK5bIPSpWP+NXtbcHkI7rQuZ7C1qVq/BiEQBtbnLqMDnGcPSvyzMc8BmzF+2uMFj
WbCYjdfkto7x9C8U1aV6I3Dl0buEg9sfHDnpeWktjBIJETCcXwtfDFl13DfnCe84
p15ap6tC3Lu3m9uY0k5qaiCnAiIb4aPVipm/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU0cp5Br/lx9JP8MAcKFPMDMDUqGUwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvMGNwNUJyX2x4OUpQOE1BY0tGUE1E
TURVcUdVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBWpp4DAN
BgkqhkiG9w0BAQsFAAOCAQEAm9ZU3y1nVzz4KiBxbGVIwVW88OsP3FDimRftZAS4
yXMZQn70dO/g7DIgKIncnc7XaB6VMApDLwf6+h7HMimqv6y4m5VmDkCJ77oxSnce
ui+XezXJRrfIKBIANtP4ySp2OIHJToVPsqyKGR45CCrQrI1THztLVSxLwRyb5qM9
Yv31tKnOhUu+lXAYpE38/UuVbkTYv6cPxZYO/hh8oyX4Z7J3k00yO6H7k5QZcD6T
OPBG4LmudFs6pPWHpk9UGf2stneLH90wNxDLRd3f/c48sAPwTgiahJvRalZbmrVP
5G2c6/pTRLfr3f9w3Wtrp5SHENIadC0TbFDTjM2q7qLCMA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:48 2025 by rpki-client