Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6LjAt6peBfbvgO2qHNuRYUbs0sY.roa
File: 6LjAt6peBfbvgO2qHNuRYUbs0sY.roa (raw, json)
Hash identifier: 0PI2zdFo+0xp6RyXRwcaD9yM9t/hOjh/EZiMdX7WxoQ=
Subject key identifier: E8:B8:C0:B7:AA:5E:05:F6:EF:80:ED:AA:1C:DB:91:61:46:EC:D2:C6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 185A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6LjAt6peBfbvgO2qHNuRYUbs0sY.roa
Signing time: Mon 10 Feb 2025 14:07:51 +0000
ROA not before: Mon 10 Feb 2025 14:07:51 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 218.210.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6234 (0x185a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:51 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E8B8C0B7AA5E05F6EF80EDAA1CDB916146ECD2C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:0b:92:49:3a:f5:59:66:90:58:72:b7:12:82:
e9:70:29:7b:ae:21:91:4f:92:02:a4:d0:cd:ff:63:
b3:27:cb:59:b3:21:d2:84:54:5b:f4:cc:f7:30:4d:
a5:57:02:f6:0d:55:d0:c3:84:8b:cb:3f:c3:66:63:
42:4d:4c:bc:a2:a8:85:1d:48:ae:e4:57:06:c4:e6:
f4:92:47:44:e7:27:33:32:6d:55:b6:98:ea:bb:4b:
24:cf:0f:a5:88:bd:3b:3a:3d:55:3f:b3:5b:c7:81:
c7:3a:b1:20:84:c6:31:a7:b5:cc:70:c8:fc:8d:04:
63:c8:c1:d6:e2:87:4b:fb:a7:92:50:cf:4e:e8:af:
e6:53:eb:20:c5:fa:98:66:f3:19:9c:f0:77:ab:77:
8e:36:97:f9:8d:fb:8d:74:e9:7c:cd:68:10:33:aa:
97:e8:21:0a:8a:cb:44:3a:e8:35:1d:7e:53:35:18:
b3:ed:54:14:94:00:28:f8:20:8e:72:5a:63:c3:77:
97:9a:51:ad:5f:2f:aa:e7:39:03:32:45:39:1b:cc:
a9:79:5b:68:d7:0f:ec:13:6b:2d:80:20:c7:49:17:
2f:37:dd:73:eb:34:26:76:a1:39:fc:8a:31:e4:18:
dc:95:1c:dd:12:30:9e:e8:c9:67:60:08:e5:7f:be:
30:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B8:C0:B7:AA:5E:05:F6:EF:80:ED:AA:1C:DB:91:61:46:EC:D2:C6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6LjAt6peBfbvgO2qHNuRYUbs0sY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:b9:c6:63:75:e0:43:ea:69:fb:5c:7e:66:50:0b:96:80:68:
fd:e3:2d:b6:2b:e7:72:be:e5:3e:b0:f4:81:39:5b:2e:db:f3:
65:90:0b:e2:a2:f0:21:6c:cb:c9:5e:c4:ca:80:c6:c3:6a:ea:
0f:87:ea:55:0d:3f:97:23:41:83:b1:b8:22:09:d4:1d:02:81:
8f:1b:17:89:a7:be:d3:f1:05:52:ae:71:f0:be:24:99:5f:34:
31:bf:87:02:40:f2:a3:13:e1:33:74:da:e0:cc:b5:97:75:0e:
97:58:f2:b5:71:73:ac:0c:4e:71:f6:4b:b0:1c:f0:9d:24:94:
98:cf:d1:71:12:92:36:4a:79:bf:e3:b1:7c:f3:38:35:41:a6:
fe:7f:e6:26:e2:d3:20:41:da:92:55:db:f5:6c:46:c2:ae:3a:
06:a8:46:e8:3a:45:50:34:9a:e4:a4:d1:20:11:c0:4a:51:30:
90:95:9e:76:c5:b3:c6:46:24:ed:76:38:c6:c6:cf:d1:5f:6a:
53:5e:c3:18:7d:2a:a1:42:b2:50:5d:5d:dc:93:4e:00:1d:70:
60:19:87:6f:90:f0:e4:8b:f6:6b:f8:37:de:13:ed:95:a3:bf:
50:8a:96:01:57:c3:c2:db:9f:57:42:06:66:c3:bd:c3:97:fe:
71:99:39:6f
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICGFowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3NTFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEU4QjhDMEI3QUE1RTA1
RjZFRjgwRURBQTFDREI5MTYxNDZFQ0QyQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4C5JJOvVZZpBYcrcSgulwKXuuIZFPkgKk0M3/Y7Mny1mzIdKE
VFv0zPcwTaVXAvYNVdDDhIvLP8NmY0JNTLyiqIUdSK7kVwbE5vSSR0TnJzMybVW2
mOq7SyTPD6WIvTs6PVU/s1vHgcc6sSCExjGntcxwyPyNBGPIwdbih0v7p5JQz07o
r+ZT6yDF+phm8xmc8Herd442l/mN+4106XzNaBAzqpfoIQqKy0Q66DUdflM1GLPt
VBSUACj4II5yWmPDd5eaUa1fL6rnOQMyRTkbzKl5W2jXD+wTay2AIMdJFy833XPr
NCZ2oTn8ijHkGNyVHN0SMJ7oyWdgCOV/vjDZAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQU6LjAt6peBfbvgO2qHNuRYUbs0sYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvNkxqQXQ2cGVCZmJ2Z08ycUhOdVJZ
VWJzMHNZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANrSMA0G
CSqGSIb3DQEBCwUAA4IBAQAXucZjdeBD6mn7XH5mUAuWgGj94y22K+dyvuU+sPSB
OVsu2/NlkAviovAhbMvJXsTKgMbDauoPh+pVDT+XI0GDsbgiCdQdAoGPGxeJp77T
8QVSrnHwviSZXzQxv4cCQPKjE+EzdNrgzLWXdQ6XWPK1cXOsDE5x9kuwHPCdJJSY
z9FxEpI2Snm/47F88zg1Qab+f+Ym4tMgQdqSVdv1bEbCrjoGqEboOkVQNJrkpNEg
EcBKUTCQlZ52xbPGRiTtdjjGxs/RX2pTXsMYfSqhQrJQXV3ck04AHXBgGYdvkPDk
i/Zr+DfeE+2Vo79QipYBV8PC259XQgZmw73Dl/5xmTlv
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:29 2025 by rpki-client