Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8hE8bPCDM2peqKYZ8RnIZ2ghdGg.roa
File: 8hE8bPCDM2peqKYZ8RnIZ2ghdGg.roa (raw, json)
Hash identifier: smGkIiha+7Vk4KO9JJDiDGpIe+jDDTRlk8iE6U7zZ6U=
Subject key identifier: F2:11:3C:6C:F0:83:33:6A:5E:A8:A6:19:F1:19:C8:67:68:21:74:68
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1793
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8hE8bPCDM2peqKYZ8RnIZ2ghdGg.roa
Signing time: Mon 10 Feb 2025 14:07:03 +0000
ROA not before: Mon 10 Feb 2025 14:07:03 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131584
IP address blocks: 106.105.176.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6035 (0x1793)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:03 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F2113C6CF083336A5EA8A619F119C86768217468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:a1:44:21:d5:06:c5:19:52:52:49:87:04:
1f:46:e6:b0:b9:37:15:c0:8a:77:7e:ae:31:33:1f:
b3:eb:9a:7b:63:4d:91:fa:1e:cf:9f:0b:a4:c0:9f:
2f:b9:16:fe:8a:30:14:95:e7:7b:25:25:c8:ba:80:
22:b7:c0:2e:e8:0e:1a:63:99:e5:a0:e9:bd:b1:5e:
e0:f1:b1:ac:71:00:46:2f:7f:98:5a:06:4f:a7:3c:
31:17:4d:44:88:85:a3:a2:76:e8:86:9f:ea:66:19:
c7:9b:17:f1:3d:37:6a:ce:f4:cf:55:a8:eb:52:e4:
fd:1b:99:f4:4e:61:20:2b:f2:f8:3d:b1:fe:7e:71:
93:9d:cd:3f:c3:02:9d:d5:e9:b4:3f:23:35:4f:85:
c6:3e:06:46:3e:97:5d:f6:fd:b4:51:03:c0:a2:0d:
bd:cb:db:b0:0f:30:9b:6f:67:a9:a7:a9:df:59:2e:
be:c1:51:84:a8:0b:07:44:df:6b:2d:00:24:d8:31:
71:66:9a:11:13:c1:d7:9e:3d:55:03:ef:71:ec:67:
07:1f:e0:57:e7:79:bd:6e:97:a6:1f:83:01:e5:07:
d4:53:ee:6c:92:11:34:d6:e3:0f:57:1e:0b:bc:37:
40:8a:9a:84:6e:8d:71:4d:03:ab:a4:f9:65:05:27:
92:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:11:3C:6C:F0:83:33:6A:5E:A8:A6:19:F1:19:C8:67:68:21:74:68
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8hE8bPCDM2peqKYZ8RnIZ2ghdGg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.176.0/23
Signature Algorithm: sha256WithRSAEncryption
08:45:98:a1:05:76:1b:bf:d6:bc:38:ee:88:fd:5c:d5:35:a7:
49:e0:9d:ea:d0:8a:9a:6b:3b:7d:48:51:ad:ba:14:75:9e:a3:
55:63:be:74:88:f4:bc:23:6f:1f:e2:c1:e2:c0:1c:45:e8:b3:
cd:8f:93:61:e6:0d:1a:4a:ec:46:c9:19:11:7a:7b:55:73:46:
cb:f2:01:95:f4:e5:08:e0:7e:7f:9f:44:07:4f:6f:34:01:16:
a3:5c:b3:0d:34:6e:0b:cb:c3:c0:3a:bc:9b:2a:b9:63:c2:68:
30:ff:c5:3f:ff:08:f9:72:c4:87:54:69:e9:e8:82:53:04:c4:
ce:49:12:3a:72:9d:56:af:6f:83:af:1e:1b:4f:24:59:ab:b1:
85:f0:73:d1:1b:35:13:af:7f:c4:67:36:4e:aa:72:71:2c:0d:
40:39:ae:e5:16:58:c3:bd:78:27:b4:66:4f:aa:e6:1a:0a:56:
2a:db:ae:a6:2a:ab:9e:26:e4:89:6f:4f:c5:8c:f7:5b:e4:58:
f0:2e:8b:fa:b7:01:39:cb:d6:56:7b:03:54:eb:8c:81:00:ff:
9f:6f:c5:83:b8:93:be:76:7e:d5:a9:1e:45:79:6d:bd:32:55:
0c:76:4e:db:9d:a1:11:b0:f2:ed:ba:12:9b:dd:9a:e8:50:d2:
e5:a6:c8:87
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICF5MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3MDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEYyMTEzQzZDRjA4MzMz
NkE1RUE4QTYxOUYxMTlDODY3NjgyMTc0NjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBS6FEIdUGxRlSUkmHBB9G5rC5NxXAind+rjEzH7PrmntjTZH6
Hs+fC6TAny+5Fv6KMBSV53slJci6gCK3wC7oDhpjmeWg6b2xXuDxsaxxAEYvf5ha
Bk+nPDEXTUSIhaOiduiGn+pmGcebF/E9N2rO9M9VqOtS5P0bmfROYSAr8vg9sf5+
cZOdzT/DAp3V6bQ/IzVPhcY+BkY+l132/bRRA8CiDb3L27APMJtvZ6mnqd9ZLr7B
UYSoCwdE32stACTYMXFmmhETwdeePVUD73HsZwcf4Ffneb1ul6YfgwHlB9RT7myS
ETTW4w9XHgu8N0CKmoRujXFNA6uk+WUFJ5KDAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU8hE8bPCDM2peqKYZ8RnIZ2ghdGgwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvOGhFOGJQQ0RNMnBlcUtZWjhSbkla
MmdoZEdnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWppsDAN
BgkqhkiG9w0BAQsFAAOCAQEACEWYoQV2G7/WvDjuiP1c1TWnSeCd6tCKmms7fUhR
rboUdZ6jVWO+dIj0vCNvH+LB4sAcReizzY+TYeYNGkrsRskZEXp7VXNGy/IBlfTl
COB+f59EB09vNAEWo1yzDTRuC8vDwDq8myq5Y8JoMP/FP/8I+XLEh1Rp6eiCUwTE
zkkSOnKdVq9vg68eG08kWauxhfBz0Rs1E69/xGc2TqpycSwNQDmu5RZYw714J7Rm
T6rmGgpWKtuupiqrnibkiW9PxYz3W+RY8C6L+rcBOcvWVnsDVOuMgQD/n2/Fg7iT
vnZ+1akeRXltvTJVDHZO252hEbDy7boSm92a6FDS5abIhw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:51:26 2025 by rpki-client