Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/FzJWWP3h_TJBvRb2rs-Jdb0VxIQ.roa
File: FzJWWP3h_TJBvRb2rs-Jdb0VxIQ.roa (raw, json)
Hash identifier: ZFysbmZp4hZSU02CIwoyv3iQnjPO4njKmdb1sL/XZDc=
Subject key identifier: 17:32:56:58:FD:E1:FD:32:41:BD:16:F6:AE:CF:89:75:BD:15:C4:84
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0C59
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FzJWWP3h_TJBvRb2rs-Jdb0VxIQ.roa
Signing time: Sun 07 Feb 2021 11:43:00 +0000
ROA not before: Sun 07 Feb 2021 11:43:00 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 123.205.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3161 (0xc59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:43:00 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=17325658FDE1FD3241BD16F6AECF8975BD15C484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:91:79:f0:7e:59:21:bd:30:1b:83:85:aa:
86:a5:ca:9d:b6:6f:bf:48:ee:e4:c8:ae:51:02:22:
ef:06:d8:9a:fb:84:d7:ea:f2:97:0a:74:73:35:4b:
5a:32:5a:fd:77:16:57:fb:d8:ce:32:d7:35:d9:f6:
57:d4:e5:34:50:dc:df:63:52:c7:aa:e8:a5:cf:7f:
f9:95:31:18:1e:be:9c:27:ac:7d:6f:78:38:cf:e9:
3f:81:30:41:8e:3f:e1:35:fc:a9:e8:3b:f3:dd:13:
71:74:44:40:34:ae:7c:92:b2:6f:a7:71:96:d3:19:
8e:9c:ab:44:47:de:e3:6f:77:a7:c7:28:4d:3c:79:
d2:88:91:74:7e:de:c6:b1:e9:77:08:29:3c:e0:7c:
10:3f:d8:e9:58:83:02:79:83:4d:e0:f4:20:65:e5:
ee:b6:f3:0c:4f:26:ae:d9:44:a2:11:c5:4b:04:d5:
45:78:08:77:e9:05:42:0d:7e:f6:3e:6e:48:23:ff:
bb:89:22:67:93:50:71:43:69:1a:80:43:6c:8f:e1:
82:73:88:c2:cc:22:2a:eb:81:ba:d6:00:77:6f:57:
b2:b3:10:88:72:f2:54:fd:9b:7e:ff:69:6e:28:a9:
84:26:0c:5e:16:ff:14:52:f6:3d:77:6c:bd:e5:cf:
e8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:32:56:58:FD:E1:FD:32:41:BD:16:F6:AE:CF:89:75:BD:15:C4:84
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/FzJWWP3h_TJBvRb2rs-Jdb0VxIQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.128.0/17
Signature Algorithm: sha256WithRSAEncryption
88:df:81:a4:59:70:c9:56:8a:85:be:31:41:99:b9:51:4c:9d:
0a:1b:92:88:b7:8d:08:f2:58:5e:0d:76:ec:d3:11:18:ab:0c:
1f:17:12:e9:cc:0c:b1:51:b9:66:b8:aa:8b:ad:e0:7a:a1:57:
25:c0:23:bf:9a:cc:f9:79:66:7c:f5:5a:2a:09:41:71:c3:8d:
fc:10:08:aa:c9:d7:73:5b:46:65:82:d9:be:c6:c5:9a:f0:31:
c2:7a:39:5f:1e:44:46:f4:58:a1:d9:3a:3a:ff:40:b6:25:5c:
f8:51:e8:05:6c:c6:96:dd:64:c8:bb:ee:c2:c4:27:a4:93:42:
5b:45:f2:92:b2:61:fe:10:72:5e:0b:73:56:bb:79:f2:8f:4c:
5d:db:98:6e:e4:2e:3b:45:a5:e6:25:48:4e:b9:76:ff:de:38:
a2:53:e3:53:ff:53:16:9a:84:81:92:a2:74:2c:2f:8f:07:d3:
63:91:99:f9:b1:9f:31:78:60:67:8a:1a:c8:7c:24:6e:85:0f:
50:08:fa:a4:d4:4a:89:3d:da:a4:91:2a:b6:fa:d3:02:ef:e1:
c2:97:ed:9c:8c:47:48:68:d9:c5:77:62:b1:77:79:81:39:57:
4c:4f:f8:34:dc:7f:37:5b:8c:c6:20:42:26:f6:8b:12:19:64:
28:cb:3b:96
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQzMDBaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDE3MzI1NjU4RkRFMUZE
MzI0MUJEMTZGNkFFQ0Y4OTc1QkQxNUM0ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPR5F58H5ZIb0wG4OFqoalyp22b79I7uTIrlECIu8G2Jr7hNfq
8pcKdHM1S1oyWv13Flf72M4y1zXZ9lfU5TRQ3N9jUseq6KXPf/mVMRgevpwnrH1v
eDjP6T+BMEGOP+E1/KnoO/PdE3F0REA0rnySsm+ncZbTGY6cq0RH3uNvd6fHKE08
edKIkXR+3sax6XcIKTzgfBA/2OlYgwJ5g03g9CBl5e628wxPJq7ZRKIRxUsE1UV4
CHfpBUINfvY+bkgj/7uJImeTUHFDaRqAQ2yP4YJziMLMIirrgbrWAHdvV7KzEIhy
8lT9m37/aW4oqYQmDF4W/xRS9j13bL3lz+j5AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUFzJWWP3h/TJBvRb2rs+Jdb0VxIQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvRnpKV1dQM2hfVEpCdlJiMnJzLUpk
YjBWeElRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB3vNgDAN
BgkqhkiG9w0BAQsFAAOCAQEAiN+BpFlwyVaKhb4xQZm5UUydChuSiLeNCPJYXg12
7NMRGKsMHxcS6cwMsVG5Zriqi63geqFXJcAjv5rM+XlmfPVaKglBccON/BAIqsnX
c1tGZYLZvsbFmvAxwno5Xx5ERvRYodk6Ov9AtiVc+FHoBWzGlt1kyLvuwsQnpJNC
W0XykrJh/hByXgtzVrt58o9MXduYbuQuO0Wl5iVITrl2/944olPjU/9TFpqEgZKi
dCwvjwfTY5GZ+bGfMXhgZ4oayHwkboUPUAj6pNRKiT3apJEqtvrTAu/hwpftnIxH
SGjZxXdisXd5gTlXTE/4NNx/N1uMxiBCJvaLEhlkKMs7lg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:45 2025 by rpki-client