Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GsAk4BjsO1a8wInNgGFo0uwBMsA.roa
File: GsAk4BjsO1a8wInNgGFo0uwBMsA.roa (raw, json)
Hash identifier: OH68XdOtnwS13Z8vdOW1iIAsdM3lCTwW3IC8i9AJNDY=
Subject key identifier: 1A:C0:24:E0:18:EC:3B:56:BC:C0:89:CD:80:61:68:D2:EC:01:32:C0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13D1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GsAk4BjsO1a8wInNgGFo0uwBMsA.roa
Signing time: Fri 01 Sep 2023 09:25:29 +0000
ROA not before: Fri 01 Sep 2023 09:25:29 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 175.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5073 (0x13d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:29 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=1AC024E018EC3B56BCC089CD806168D2EC0132C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:55:3d:79:61:95:f6:b4:aa:4b:f7:90:29:1e:
e2:0b:73:68:bb:f5:a9:72:22:1c:fd:91:dc:83:fe:
60:a3:19:83:34:73:ad:fa:0e:4a:67:cd:1e:8b:4e:
cd:5e:88:a5:e7:bf:11:79:c9:ad:53:53:e7:3e:65:
6c:b0:cf:b4:18:0e:65:fd:be:e5:c6:78:41:3f:5b:
fd:2b:ea:b6:c3:0d:93:22:dd:f2:f9:ca:91:41:93:
96:46:c6:5b:67:e7:69:9f:55:3c:1d:fc:9e:fe:b3:
b1:80:bb:a8:5e:76:ce:f5:bf:73:ac:d6:28:f7:6f:
39:c7:10:3e:fb:8a:b6:bb:cd:82:8a:73:ab:bd:5a:
a4:af:ce:5d:ed:68:fb:ad:3a:14:74:c1:78:2b:c8:
ad:49:56:f5:87:3d:04:76:17:4e:61:a2:6e:64:be:
89:37:c6:f8:38:d7:ec:74:51:55:f1:b5:90:3b:da:
6d:13:7f:22:60:9c:38:a9:d7:64:70:8f:cf:23:ce:
36:4f:d7:92:26:b0:ae:3c:49:71:ac:ea:97:23:f0:
d0:cc:11:22:b4:a6:02:f0:1c:f0:2a:27:6c:35:fd:
b7:54:dd:06:d8:b2:e0:a6:43:dd:77:52:27:40:e3:
53:fb:e7:08:ab:b8:16:44:84:28:1f:a2:c8:cf:d8:
c1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C0:24:E0:18:EC:3B:56:BC:C0:89:CD:80:61:68:D2:EC:01:32:C0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GsAk4BjsO1a8wInNgGFo0uwBMsA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.180.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:66:8d:4a:b0:b6:b5:09:da:17:f1:a0:fb:25:a4:30:63:fc:
b5:fa:3d:fe:c1:a1:53:28:b5:07:ec:4d:42:48:90:35:9b:f0:
4e:69:78:b2:82:f6:f3:c1:28:c2:4b:d9:dd:b0:01:0e:36:08:
50:7e:5b:14:bd:6a:4b:2f:4c:59:31:e5:d8:30:9d:0c:fa:20:
07:05:30:3b:2a:3c:c7:0e:f6:46:fd:1b:a3:4b:1c:ff:0b:38:
76:d5:66:8b:d6:ee:8d:f2:93:f5:5d:7c:bd:53:8a:3b:d0:34:
ab:55:50:bf:2c:3f:7f:92:aa:cb:5e:2b:66:dd:57:e1:e3:fe:
09:70:5c:04:53:ae:f4:e8:e6:af:03:4a:7f:6f:f3:42:9e:3e:
a5:0e:f4:0f:35:7c:b8:70:a9:3b:87:9a:cb:6e:21:8f:c3:35:
4e:0c:8f:5b:6a:02:e8:db:33:46:6f:a5:fc:99:0c:f5:65:e5:
32:3d:54:d4:39:05:44:58:ac:79:97:8e:4c:4e:ec:d7:7a:98:
fb:91:5f:91:8f:72:72:89:65:ae:ac:49:17:a3:a9:88:2c:21:
99:95:fd:5d:f3:23:6a:f8:d3:8b:21:a9:0e:77:14:d8:86:8c:
50:2f:fa:3c:c6:22:93:42:1a:4e:ef:31:fe:b2:13:e5:1d:87:
d7:1c:52:41
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICE9EwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI1MjlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDFBQzAyNEUwMThFQzNC
NTZCQ0MwODlDRDgwNjE2OEQyRUMwMTMyQzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfVT15YZX2tKpL95ApHuILc2i79alyIhz9kdyD/mCjGYM0c636
DkpnzR6LTs1eiKXnvxF5ya1TU+c+ZWywz7QYDmX9vuXGeEE/W/0r6rbDDZMi3fL5
ypFBk5ZGxltn52mfVTwd/J7+s7GAu6heds71v3Os1ij3bznHED77ira7zYKKc6u9
WqSvzl3taPutOhR0wXgryK1JVvWHPQR2F05hom5kvok3xvg41+x0UVXxtZA72m0T
fyJgnDip12Rwj88jzjZP15ImsK48SXGs6pcj8NDMESK0pgLwHPAqJ2w1/bdU3QbY
suCmQ913UidA41P75wiruBZEhCgfosjP2MEnAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUGsAk4BjsO1a8wInNgGFo0uwBMsAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvR3NBazRCanNPMWE4d0luTmdHRm8w
dXdCTXNBLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAK+0MA0G
CSqGSIb3DQEBCwUAA4IBAQB8Zo1KsLa1CdoX8aD7JaQwY/y1+j3+waFTKLUH7E1C
SJA1m/BOaXiygvbzwSjCS9ndsAEONghQflsUvWpLL0xZMeXYMJ0M+iAHBTA7KjzH
DvZG/RujSxz/Czh21WaL1u6N8pP1XXy9U4o70DSrVVC/LD9/kqrLXitm3Vfh4/4J
cFwEU6706OavA0p/b/NCnj6lDvQPNXy4cKk7h5rLbiGPwzVODI9bagLo2zNGb6X8
mQz1ZeUyPVTUOQVEWKx5l45MTuzXepj7kV+Rj3JyiWWurEkXo6mILCGZlf1d8yNq
+NOLIakOdxTYhoxQL/o8xiKTQhpO7zH+shPlHYfXHFJB
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:03 2025 by rpki-client