Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/F0y0g_VBsLp9FqUaUz33vGDZpTE.roa
File: F0y0g_VBsLp9FqUaUz33vGDZpTE.roa (raw, json)
Hash identifier: 6saYgo1o0tfRoLbAW+3LaSSimTnW48KVqRkJe9DKRZ0=
Subject key identifier: 17:4C:B4:83:F5:41:B0:BA:7D:16:A5:1A:53:3D:F7:BC:60:D9:A5:31
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1660
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/F0y0g_VBsLp9FqUaUz33vGDZpTE.roa
Signing time: Mon 26 Aug 2024 05:22:07 +0000
ROA not before: Mon 26 Aug 2024 05:22:07 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131602
IP address blocks: 123.205.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5728 (0x1660)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:07 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=174CB483F541B0BA7D16A51A533DF7BC60D9A531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:24:58:9f:91:23:c7:27:bf:5d:c6:c5:4b:
70:d1:0a:d2:8a:20:a4:ee:ab:df:8c:e8:9f:3c:11:
cb:3c:e6:7b:f5:5e:75:6f:dd:7d:fa:7b:e4:ab:ea:
4a:a9:ef:77:4b:e7:e0:8d:d9:2c:27:cd:4f:c1:59:
e6:ca:56:39:bf:69:1b:92:da:4b:37:1a:f0:6e:6e:
61:95:4e:26:6c:1b:8e:b3:4c:d6:b4:4c:93:d0:7e:
5a:d2:da:c2:42:78:bf:12:c4:09:cb:bf:f1:80:cc:
ba:e4:a6:82:3d:50:cf:9d:18:2d:10:6c:fe:69:1b:
60:d9:3d:40:31:ac:a2:2f:5e:20:05:3a:58:b3:f9:
3a:45:25:3b:ba:47:ad:63:ba:f7:da:b3:24:41:81:
2e:07:92:6b:24:8e:33:fe:c3:62:a1:36:14:7e:36:
06:34:03:55:98:a8:e0:f7:11:80:75:56:2a:e7:17:
27:2a:43:66:f2:95:8d:9e:9b:67:7c:06:51:76:c2:
12:69:76:2c:09:8c:cf:f8:a0:c6:76:61:9c:54:41:
c3:16:5d:02:f6:61:a1:9b:72:31:bb:fd:43:7c:91:
49:7e:09:e9:c6:70:ab:9c:1b:40:0f:b1:b1:9d:1c:
50:93:1b:8a:d4:c6:69:f3:ce:36:d7:64:f9:bc:b4:
c3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:B4:83:F5:41:B0:BA:7D:16:A5:1A:53:3D:F7:BC:60:D9:A5:31
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/F0y0g_VBsLp9FqUaUz33vGDZpTE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.176.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:b0:ab:50:e2:36:43:32:e1:7d:22:0e:c9:98:7d:7d:ec:1a:
b0:18:28:c7:f6:56:92:cc:99:77:d3:21:63:1e:90:38:43:f4:
04:4c:6b:99:10:e7:b3:7f:75:d4:cc:34:d8:eb:b8:3f:00:86:
cc:41:b7:f3:59:5f:e5:03:10:e7:47:02:08:c8:29:09:ca:f9:
55:a7:54:a2:c9:c4:91:f6:f8:66:5d:3e:3b:71:7c:0a:d3:b9:
79:53:68:9f:88:c8:b4:32:0b:3a:03:d7:8b:57:f0:1e:05:c0:
71:0e:5c:d4:dc:09:8f:30:c3:d9:11:a2:0c:23:3e:dc:9f:9c:
db:7d:bb:13:cc:f6:c3:c9:e1:76:19:b4:5e:2a:40:ae:0b:9f:
d4:ae:31:38:ea:b4:30:d2:2e:67:53:35:32:94:df:23:a3:1d:
74:d5:f1:30:6d:fe:78:6a:ba:0c:38:5f:ab:24:5f:93:c1:3d:
a6:d0:4c:5a:ed:f1:b8:c8:f3:22:9e:b4:56:19:6c:9e:a4:9f:
82:d7:94:90:6b:da:a2:cd:25:4d:82:e9:65:6b:6d:5e:cb:31:
5d:71:d2:0a:ca:9b:92:f6:68:0d:87:7a:9e:52:e8:0e:5f:88:
eb:1d:6e:7a:e8:25:04:62:25:a6:d4:83:c6:7e:b0:fe:5a:9b:
49:5f:7a:c9
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICFmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIyMDdaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE3NENCNDgzRjU0MUIw
QkE3RDE2QTUxQTUzM0RGN0JDNjBEOUE1MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDENCRYn5Ejxye/XcbFS3DRCtKKIKTuq9+M6J88Ecs85nv1XnVv
3X36e+Sr6kqp73dL5+CN2SwnzU/BWebKVjm/aRuS2ks3GvBubmGVTiZsG46zTNa0
TJPQflrS2sJCeL8SxAnLv/GAzLrkpoI9UM+dGC0QbP5pG2DZPUAxrKIvXiAFOliz
+TpFJTu6R61juvfasyRBgS4HkmskjjP+w2KhNhR+NgY0A1WYqOD3EYB1VirnFycq
Q2bylY2em2d8BlF2whJpdiwJjM/4oMZ2YZxUQcMWXQL2YaGbcjG7/UN8kUl+CenG
cKucG0APsbGdHFCTG4rUxmnzzjbXZPm8tMPpAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUF0y0g/VBsLp9FqUaUz33vGDZpTEwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRjB5MGdfVkJzTHA5RnFVYVV6MzN2
R0RacFRFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHvNsDAN
BgkqhkiG9w0BAQsFAAOCAQEADrCrUOI2QzLhfSIOyZh9fewasBgox/ZWksyZd9Mh
Yx6QOEP0BExrmRDns3911Mw02Ou4PwCGzEG381lf5QMQ50cCCMgpCcr5VadUosnE
kfb4Zl0+O3F8CtO5eVNon4jItDILOgPXi1fwHgXAcQ5c1NwJjzDD2RGiDCM+3J+c
2327E8z2w8nhdhm0XipArguf1K4xOOq0MNIuZ1M1MpTfI6MddNXxMG3+eGq6DDhf
qyRfk8E9ptBMWu3xuMjzIp60VhlsnqSfgteUkGvaos0lTYLpZWttXssxXXHSCsqb
kvZoDYd6nlLoDl+I6x1ueuglBGIlptSDxn6w/lqbSV96yQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:06 2025 by rpki-client