Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/D_QfnKnaxwbISPIAhRQCKEZvvFM.roa
File: D_QfnKnaxwbISPIAhRQCKEZvvFM.roa (raw, json)
Hash identifier: QjfS9xqAPqcUsRA0SHsW97vnzdb44sjSZGKM8CNZ/os=
Subject key identifier: 0F:F4:1F:9C:A9:DA:C7:06:C8:48:F2:00:85:14:02:28:46:6F:BC:53
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CAF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/D_QfnKnaxwbISPIAhRQCKEZvvFM.roa
Signing time: Sun 07 Feb 2021 11:44:35 +0000
ROA not before: Sun 07 Feb 2021 11:44:35 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 112.105.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3247 (0xcaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:44:35 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=0FF41F9CA9DAC706C848F20085140228466FBC53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:bb:4b:3e:f5:c0:1b:68:5a:f9:f2:5f:0c:
fc:6e:11:c9:19:33:bc:09:c5:52:27:f8:41:01:c4:
bc:0a:77:5f:17:18:6b:85:80:2a:9e:96:87:1f:c2:
1b:03:26:63:02:d6:5a:27:1b:91:bd:ba:3c:0f:9d:
41:b8:1e:cd:c3:7b:55:67:87:49:34:20:59:19:4c:
2f:8a:4c:a3:f9:b4:ec:23:1d:0c:b7:0b:54:99:dc:
b1:4a:a5:17:46:b6:c6:86:16:e4:b2:86:e2:93:74:
2e:1b:67:27:8e:91:3d:68:e3:97:74:1b:7c:59:74:
f4:3f:bb:57:4c:6f:58:82:c5:26:cc:8f:fd:cc:c2:
bd:d3:f0:96:7c:4f:b4:a8:b8:df:e7:35:8a:2e:45:
5e:94:0a:ac:19:8c:0f:1e:52:12:74:1b:fd:0e:28:
87:74:c7:60:06:a8:a6:95:fd:1c:58:99:77:68:08:
0c:3b:05:ed:37:98:e9:ac:cc:8e:57:44:88:1a:0b:
19:48:c5:eb:58:37:da:8d:bd:d6:9e:54:90:8d:62:
e0:55:c4:84:1f:e6:63:0f:ad:3c:cc:ba:28:7a:28:
0f:42:f3:c0:7b:4c:b2:69:74:f6:5e:b7:7b:76:d9:
d3:c8:5d:16:59:01:9e:bd:e2:fb:65:fb:7e:be:58:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F4:1F:9C:A9:DA:C7:06:C8:48:F2:00:85:14:02:28:46:6F:BC:53
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/D_QfnKnaxwbISPIAhRQCKEZvvFM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.64.0/18
Signature Algorithm: sha256WithRSAEncryption
a2:2a:e3:97:db:25:d4:7f:e1:48:f2:cb:49:5c:45:20:ff:26:
3e:99:f1:94:b2:70:7a:c8:a1:89:2d:31:2a:ca:b7:66:47:67:
4c:f1:f1:51:6e:f8:4f:31:f5:77:b2:c1:33:dc:74:0b:87:08:
bc:d1:43:f0:df:41:d8:ee:b5:05:99:fa:f7:80:d7:84:16:17:
0f:6d:ae:ee:82:fc:1e:f1:ef:78:27:e6:ee:10:ad:ba:1b:18:
fe:b0:61:0f:98:a7:44:c4:3e:08:eb:01:e3:6d:60:bd:94:81:
6a:e8:10:51:dd:49:46:c1:ee:8d:4d:1c:06:c1:1c:67:11:14:
14:83:d9:9f:44:1f:98:f9:40:00:04:42:d2:1b:ec:43:60:ae:
52:99:83:99:af:82:89:d3:12:2c:51:86:32:0d:12:ac:ca:28:
71:4e:d6:2c:0e:34:bc:ef:79:c4:e7:c8:df:78:f3:63:01:ba:
69:8d:dd:b2:71:e3:d6:06:70:ca:19:2f:59:e5:d8:c2:8e:3d:
6f:d4:e0:7b:45:e3:b2:89:51:6c:cd:06:79:f2:db:b7:f5:9f:
6b:d8:19:99:e5:88:b6:f7:e6:8e:19:c0:61:58:31:9a:61:42:
92:e4:ce:8d:0c:7c:1d:4d:e5:1e:9b:1f:7c:14:73:60:93:67:
4f:f2:b9:58
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDK8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ0MzVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDBGRjQxRjlDQTlEQUM3
MDZDODQ4RjIwMDg1MTQwMjI4NDY2RkJDNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGFbtLPvXAG2ha+fJfDPxuEckZM7wJxVIn+EEBxLwKd18XGGuF
gCqelocfwhsDJmMC1lonG5G9ujwPnUG4Hs3De1Vnh0k0IFkZTC+KTKP5tOwjHQy3
C1SZ3LFKpRdGtsaGFuSyhuKTdC4bZyeOkT1o45d0G3xZdPQ/u1dMb1iCxSbMj/3M
wr3T8JZ8T7SouN/nNYouRV6UCqwZjA8eUhJ0G/0OKId0x2AGqKaV/RxYmXdoCAw7
Be03mOmszI5XRIgaCxlIxetYN9qNvdaeVJCNYuBVxIQf5mMPrTzMuih6KA9C88B7
TLJpdPZet3t22dPIXRZZAZ694vtl+36+WDybAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUD/QfnKnaxwbISPIAhRQCKEZvvFMwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRF9RZm5LbmF4d2JJU1BJQWhSUUNL
RVp2dkZNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnBpQDAN
BgkqhkiG9w0BAQsFAAOCAQEAoirjl9sl1H/hSPLLSVxFIP8mPpnxlLJwesihiS0x
Ksq3ZkdnTPHxUW74TzH1d7LBM9x0C4cIvNFD8N9B2O61BZn694DXhBYXD22u7oL8
HvHveCfm7hCtuhsY/rBhD5inRMQ+COsB421gvZSBaugQUd1JRsHujU0cBsEcZxEU
FIPZn0QfmPlAAARC0hvsQ2CuUpmDma+CidMSLFGGMg0SrMoocU7WLA40vO95xOfI
33jzYwG6aY3dsnHj1gZwyhkvWeXYwo49b9Tge0XjsolRbM0GefLbt/Wfa9gZmeWI
tvfmjhnAYVgxmmFCkuTOjQx8HU3lHpsffBRzYJNnT/K5WA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:04 2025 by rpki-client