Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/DQxD5EawP8Lv25Yo9dKbyF0RFd8.roa
File: DQxD5EawP8Lv25Yo9dKbyF0RFd8.roa (raw, json)
Hash identifier: Zd2wECRVMLqz4RMh+4vL0OBc24IBpO0CV6f51H1YhgA=
Subject key identifier: 0D:0C:43:E4:46:B0:3F:C2:EF:DB:96:28:F5:D2:9B:C8:5D:11:15:DF
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E96
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DQxD5EawP8Lv25Yo9dKbyF0RFd8.roa
Signing time: Wed 29 Sep 2021 02:43:46 +0000
ROA not before: Wed 29 Sep 2021 02:43:46 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 113.196.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3734 (0xe96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:46 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=0D0C43E446B03FC2EFDB9628F5D29BC85D1115DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:1f:66:6f:b5:e6:ae:c9:c4:d4:eb:b7:68:
9b:5c:e2:85:ad:7c:76:51:53:b2:d4:57:16:c9:e3:
13:85:10:25:e2:45:e3:6e:3f:e2:80:ab:64:8c:20:
03:c6:7d:5e:0c:f0:1d:79:5b:00:93:a1:f5:ea:3c:
85:04:42:3b:42:ef:f8:f2:c5:d4:d2:36:a1:7f:fc:
10:be:3e:30:7a:fc:ed:64:c6:cb:02:78:ed:64:c6:
db:61:28:c8:55:b4:e5:e2:85:25:90:8a:ed:fc:f0:
52:77:8c:c0:3f:ef:06:39:93:10:cb:be:fd:76:8b:
9b:2c:d6:39:a1:c1:eb:4c:78:ba:b4:91:c2:41:91:
1b:37:56:29:f6:76:ba:c9:a1:aa:9c:23:8f:c4:5c:
07:58:24:81:4c:a5:e3:6e:be:93:48:59:76:9f:e4:
15:83:20:8a:b3:0d:54:a5:b3:8c:51:99:33:c4:29:
c8:ad:18:66:cb:84:c8:e7:28:c6:55:1d:3d:c5:1f:
2a:69:e0:95:b3:ed:e2:9d:47:13:b9:05:d7:29:d5:
a6:69:80:c0:1f:f8:8e:fe:f3:85:d4:a0:bc:02:b4:
b1:59:18:23:e5:78:11:0c:a6:8e:a6:6c:dd:73:1f:
43:48:80:36:dc:d3:7c:49:43:6f:39:fa:e4:9e:22:
69:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0C:43:E4:46:B0:3F:C2:EF:DB:96:28:F5:D2:9B:C8:5D:11:15:DF
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/DQxD5EawP8Lv25Yo9dKbyF0RFd8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.192.0/18
Signature Algorithm: sha256WithRSAEncryption
36:3d:05:85:09:b0:82:e9:f7:f8:39:b3:be:58:ff:e6:ff:75:
34:85:51:e0:02:b7:36:3c:50:75:4e:24:dc:0f:32:1f:c0:67:
f2:24:75:6a:52:9e:c1:1b:74:df:0a:36:52:4c:04:0d:cf:c9:
00:f3:4d:bc:9a:f8:2e:71:6a:b2:73:47:5e:52:78:ff:52:9e:
0d:1e:bc:6d:6d:7a:8f:f5:99:b2:bb:5d:96:e2:6a:c3:be:23:
67:92:eb:17:af:0c:fd:7a:93:05:7e:59:04:a2:42:6e:f5:4f:
a8:ad:be:ee:6b:60:2b:9b:8b:90:f4:38:ce:fd:f3:8d:40:73:
ff:c8:b9:40:aa:86:be:a6:8f:13:58:da:3e:fa:34:13:75:f4:
5d:17:1e:41:5f:ea:64:6a:ca:91:7d:a7:c0:ed:75:b2:5a:e5:
fc:08:2c:e4:f0:34:fe:09:d8:18:af:82:9c:a5:7f:46:0e:28:
f2:c2:91:97:9f:f4:ab:31:ab:96:e4:23:54:14:fb:25:43:5f:
90:04:bf:3e:1f:cf:2d:20:54:78:8b:e4:80:e0:cc:7e:f9:b8:
64:7c:33:c6:42:8a:58:05:6f:98:4d:9d:66:5b:65:a7:2b:54:
f6:fe:8d:0d:75:52:66:46:95:c0:30:bc:eb:bd:be:6f:08:23:
63:cf:a1:75
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDpYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzNDZaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDBEMEM0M0U0NDZCMDNG
QzJFRkRCOTYyOEY1RDI5QkM4NUQxMTE1REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNVR9mb7XmrsnE1Ou3aJtc4oWtfHZRU7LUVxbJ4xOFECXiReNu
P+KAq2SMIAPGfV4M8B15WwCTofXqPIUEQjtC7/jyxdTSNqF//BC+PjB6/O1kxssC
eO1kxtthKMhVtOXihSWQiu388FJ3jMA/7wY5kxDLvv12i5ss1jmhwetMeLq0kcJB
kRs3Vin2drrJoaqcI4/EXAdYJIFMpeNuvpNIWXaf5BWDIIqzDVSls4xRmTPEKcit
GGbLhMjnKMZVHT3FHypp4JWz7eKdRxO5Bdcp1aZpgMAf+I7+84XUoLwCtLFZGCPl
eBEMpo6mbN1zH0NIgDbc03xJQ285+uSeImkHAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUDQxD5EawP8Lv25Yo9dKbyF0RFd8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRFF4RDVFYXdQOEx2MjVZbzlkS2J5
RjBSRmQ4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnHEwDAN
BgkqhkiG9w0BAQsFAAOCAQEANj0FhQmwgun3+Dmzvlj/5v91NIVR4AK3NjxQdU4k
3A8yH8Bn8iR1alKewRt03wo2UkwEDc/JAPNNvJr4LnFqsnNHXlJ4/1KeDR68bW16
j/WZsrtdluJqw74jZ5LrF68M/XqTBX5ZBKJCbvVPqK2+7mtgK5uLkPQ4zv3zjUBz
/8i5QKqGvqaPE1jaPvo0E3X0XRceQV/qZGrKkX2nwO11slrl/Ags5PA0/gnYGK+C
nKV/Rg4o8sKRl5/0qzGrluQjVBT7JUNfkAS/Ph/PLSBUeIvkgODMfvm4ZHwzxkKK
WAVvmE2dZltlpytU9v6NDXVSZkaVwDC8672+bwgjY8+hdQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:45 2025 by rpki-client