Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7l6JMqjyS7ttKEFc5eS4vZBBiBc.roa
File: 7l6JMqjyS7ttKEFc5eS4vZBBiBc.roa (raw, json)
Hash identifier: gFGUfOtM7jIup7rrvRDQmz+sthA+/qFqVlP2iKq2cw8=
Subject key identifier: EE:5E:89:32:A8:F2:4B:BB:6D:28:41:5C:E5:E4:B8:BD:90:41:88:17
Certificate issuer: /CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Certificate serial: 0F6D
Authority key identifier: B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7l6JMqjyS7ttKEFc5eS4vZBBiBc.roa
Signing time: Mon 10 Feb 2025 14:08:04 +0000
ROA not before: Mon 10 Feb 2025 14:08:04 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 192.72.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3949 (0xf6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4A65A0EB8669219C4185442D49FC9D6F825B665
Validity
Not Before: Feb 10 14:08:04 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EE5E8932A8F24BBB6D28415CE5E4B8BD90418817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:d7:b5:08:1e:c7:c3:22:b2:c1:c0:c5:24:
da:3f:83:2f:a4:55:e9:18:35:28:ac:ad:12:a7:4f:
f3:f5:a3:b7:76:44:88:76:48:d8:c0:b9:4b:9a:cf:
42:50:45:d5:fc:c6:26:ec:31:72:89:74:2a:ce:02:
22:47:7a:85:2f:b7:e2:c2:9e:26:5d:e6:cb:7e:a0:
91:f6:81:a4:96:38:c9:71:78:c5:3e:f0:e9:8f:77:
51:7f:f1:57:13:e1:80:7c:a6:2a:1b:fb:fd:e4:a0:
b8:b6:36:b1:5b:ac:24:88:95:cb:b0:7f:1d:ea:01:
b9:aa:ad:3e:26:c6:5d:c9:12:51:a4:93:48:4a:f6:
9c:d8:3d:b1:22:58:51:16:87:c1:f5:76:24:d6:8a:
cc:9d:13:56:e9:f3:70:50:8b:5e:ef:45:3a:d3:24:
a8:72:22:e7:57:99:fb:ae:3f:35:76:94:c4:03:1a:
c8:ef:45:33:32:1a:0b:32:66:7f:8d:73:69:23:18:
a4:c5:dc:d0:2d:e6:98:97:88:ca:5a:44:ce:de:e2:
10:cf:96:49:fe:a4:12:b2:d4:81:c7:df:53:eb:1f:
6c:15:da:70:bf:5f:ea:ef:d8:7a:53:26:f5:5a:dc:
d2:70:88:4f:7e:54:f5:7e:78:29:3a:b5:c5:e3:7b:
6f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5E:89:32:A8:F2:4B:BB:6D:28:41:5C:E5:E4:B8:BD:90:41:88:17
X509v3 Authority Key Identifier:
keyid:B4:A6:5A:0E:B8:66:92:19:C4:18:54:42:D4:9F:C9:D6:F8:25:B6:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/tKZaDrhmkhnEGFRC1J_J1vgltmU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tKZaDrhmkhnEGFRC1J_J1vgltmU.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7l6JMqjyS7ttKEFc5eS4vZBBiBc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
192.72.64.0/18
Signature Algorithm: sha256WithRSAEncryption
97:74:40:e3:9e:4e:83:95:d2:c0:10:0b:a6:23:b1:a5:d6:a7:
2f:98:50:c6:81:c5:5b:a4:89:6a:b7:2a:d3:b6:37:9a:e8:fa:
84:42:69:48:bd:77:f4:15:4e:61:78:23:c6:73:f7:1c:34:a6:
c3:91:19:39:9e:d7:82:9e:8d:72:46:21:a8:42:67:5d:dd:c7:
1b:ec:52:8d:ea:11:bc:5b:14:46:68:d1:3d:2c:07:e7:0d:95:
ed:be:5f:55:54:1d:8c:6c:c9:5e:a4:c8:b7:1c:b9:b7:0f:d2:
9d:76:49:e9:23:c3:19:bb:5e:ec:9d:50:46:36:90:fa:62:57:
cd:81:7c:72:1d:83:54:00:e4:ba:e9:c6:41:0b:47:c2:b4:c8:
2e:d2:65:8b:29:09:67:07:c2:25:82:d1:94:0c:91:4b:fe:fb:
e2:dc:13:6a:b6:4f:44:1d:2b:1e:8e:65:4f:fe:5a:31:e2:fa:
bd:c5:00:cb:b8:e3:57:93:ed:8c:49:99:40:a9:38:42:29:56:
6d:dd:79:6a:e1:d2:2b:98:09:fb:0b:83:dd:6a:e5:bd:dd:e5:
29:4e:c2:51:7b:15:93:47:63:42:37:e9:6f:07:93:2c:66:a1:
66:d7:c6:18:a0:c2:9e:74:46:1f:ce:23:8a:86:a8:fe:3a:5c:
e3:92:a6:e5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD20wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjRB
NjVBMEVCODY2OTIxOUM0MTg1NDQyRDQ5RkM5RDZGODI1QjY2NTAeFw0yNTAyMTAx
NDA4MDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVFNUU4OTMyQThGMjRC
QkI2RDI4NDE1Q0U1RTRCOEJEOTA0MTg4MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8Xde1CB7HwyKywcDFJNo/gy+kVekYNSisrRKnT/P1o7d2RIh2
SNjAuUuaz0JQRdX8xibsMXKJdCrOAiJHeoUvt+LCniZd5st+oJH2gaSWOMlxeMU+
8OmPd1F/8VcT4YB8piob+/3koLi2NrFbrCSIlcuwfx3qAbmqrT4mxl3JElGkk0hK
9pzYPbEiWFEWh8H1diTWisydE1bp83BQi17vRTrTJKhyIudXmfuuPzV2lMQDGsjv
RTMyGgsyZn+Nc2kjGKTF3NAt5piXiMpaRM7e4hDPlkn+pBKy1IHH31PrH2wV2nC/
X+rv2HpTJvVa3NJwiE9+VPV+eCk6tcXje29lAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU7l6JMqjyS7ttKEFc5eS4vZBBiBcwHwYDVR0jBBgwFoAUtKZaDrhmkhnEGFRC
1J/J1vgltmUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy90
S1phRHJobWtobkVHRlJDMUpfSjF2Z2x0bVUuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L3RLWmFEcmhta2huRUdGUkMxSl9KMXZnbHRtVS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvN2w2Sk1xanlTN3R0S0VGYzVlUzR2
WkJCaUJjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsBIQDAN
BgkqhkiG9w0BAQsFAAOCAQEAl3RA455Og5XSwBALpiOxpdanL5hQxoHFW6SJarcq
07Y3muj6hEJpSL139BVOYXgjxnP3HDSmw5EZOZ7Xgp6NckYhqEJnXd3HG+xSjeoR
vFsURmjRPSwH5w2V7b5fVVQdjGzJXqTItxy5tw/SnXZJ6SPDGbte7J1QRjaQ+mJX
zYF8ch2DVADkuunGQQtHwrTILtJliykJZwfCJYLRlAyRS/774twTarZPRB0rHo5l
T/5aMeL6vcUAy7jjV5PtjEmZQKk4QilWbd15auHSK5gJ+wuD3Wrlvd3lKU7CUXsV
k0djQjfpbweTLGahZtfGGKDCnnRGH84jioao/jpc45Km5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:26 2025 by rpki-client