Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IHRzNh2KM1fo2yJfQpIA9U8sEE8.roa
File: IHRzNh2KM1fo2yJfQpIA9U8sEE8.roa (raw, json)
Hash identifier: 43K0mYyYKPzTJwFSyR0VimPQBe/SL7btoMf09VWZFms=
Subject key identifier: 20:74:73:36:1D:8A:33:57:E8:DB:22:5F:42:92:00:F5:4F:2C:10:4F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13CC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IHRzNh2KM1fo2yJfQpIA9U8sEE8.roa
Signing time: Fri 01 Sep 2023 09:25:27 +0000
ROA not before: Fri 01 Sep 2023 09:25:27 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131586
IP address blocks: 106.106.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5068 (0x13cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:27 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=207473361D8A3357E8DB225F429200F54F2C104F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:59:93:d8:04:73:b4:ce:08:4c:6c:2e:d6:8f:
fd:55:08:cf:2e:5a:ca:e6:a5:20:9e:8b:3d:4d:68:
c0:4f:5d:c7:75:40:9b:c1:c9:9a:a9:38:cf:54:ad:
41:ea:04:e4:90:a0:d4:0b:b4:68:28:fb:72:b4:69:
ad:a7:cc:fc:be:a5:1d:3e:a7:6e:16:d5:a4:20:54:
5e:ce:b7:3f:10:ee:a0:2f:3e:9b:ae:7a:d5:ce:f2:
bb:39:15:8a:d3:ab:53:97:6f:6c:0e:aa:6a:fe:bb:
06:36:1c:2a:4b:16:4e:53:bc:c8:bd:db:35:cf:fe:
14:90:7f:c7:4a:64:eb:6f:9c:b8:ba:07:c7:07:d2:
30:92:31:f1:a2:75:f2:2c:48:9d:0c:65:88:7c:d1:
eb:2e:97:f1:39:0b:82:a7:8a:61:63:4b:e7:a4:ce:
6d:bb:a2:d0:d4:c8:58:4a:ed:55:8b:dd:26:2b:b8:
45:6e:d6:a1:36:a7:cb:1d:49:07:d8:88:18:cf:97:
a9:b4:fe:e8:f2:d3:2a:10:1c:26:0b:83:2f:a2:71:
b2:ef:cb:5a:60:fc:a5:be:88:e8:6a:1f:ee:cb:6e:
d7:39:e2:30:85:7c:d2:78:83:7a:57:49:4c:b0:1f:
68:28:74:61:ff:2d:b3:b3:a3:00:23:6d:eb:d4:db:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:74:73:36:1D:8A:33:57:E8:DB:22:5F:42:92:00:F5:4F:2C:10:4F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IHRzNh2KM1fo2yJfQpIA9U8sEE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.106.0.0/17
Signature Algorithm: sha256WithRSAEncryption
9d:21:07:f3:4f:fb:fb:8a:09:05:d9:20:e8:18:11:af:9d:d0:
ee:7c:e3:8b:60:23:b9:0b:d7:a3:7f:1c:a5:94:37:2a:5c:fe:
c1:87:be:39:5d:c9:d1:52:40:c4:58:7e:f3:8e:1f:5e:26:06:
e8:c9:ff:28:32:09:6e:86:4c:f3:30:69:38:01:7a:e6:4c:27:
1c:9f:65:f0:6e:a1:5b:a7:3a:e6:b6:42:c7:a7:51:4d:87:d9:
ea:eb:5e:7d:ab:8c:3e:90:91:44:85:b6:1a:79:4e:b2:f7:5b:
85:c1:8d:e0:f5:6a:1d:80:28:11:75:d1:00:a6:4d:0b:f3:6d:
09:6a:70:fd:e0:61:36:49:89:4e:47:bb:83:a9:c4:d0:87:8f:
4d:6f:87:85:34:f4:d9:16:03:dd:e0:57:5a:1d:0d:3d:95:20:
c5:69:71:e9:5d:f4:ab:01:ad:af:84:f4:ee:43:81:c0:16:24:
44:18:8d:9a:14:1d:96:da:a4:ea:55:b1:68:5e:1a:b0:9a:1a:
6e:73:22:22:dc:e3:95:36:66:17:ac:91:9f:64:4a:4b:05:b3:
10:57:a6:4a:85:9d:1d:26:d6:ab:cb:33:51:bb:0a:00:4b:52:
99:95:d4:e2:cf:26:4b:c9:56:d8:0b:f5:17:63:f7:30:5b:ac:
5b:69:a8:66
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE8wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI1MjdaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDIwNzQ3MzM2MUQ4QTMz
NTdFOERCMjI1RjQyOTIwMEY1NEYyQzEwNEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqWZPYBHO0zghMbC7Wj/1VCM8uWsrmpSCeiz1NaMBPXcd1QJvB
yZqpOM9UrUHqBOSQoNQLtGgo+3K0aa2nzPy+pR0+p24W1aQgVF7Otz8Q7qAvPpuu
etXO8rs5FYrTq1OXb2wOqmr+uwY2HCpLFk5TvMi92zXP/hSQf8dKZOtvnLi6B8cH
0jCSMfGidfIsSJ0MZYh80esul/E5C4KnimFjS+ekzm27otDUyFhK7VWL3SYruEVu
1qE2p8sdSQfYiBjPl6m0/ujy0yoQHCYLgy+icbLvy1pg/KW+iOhqH+7Lbtc54jCF
fNJ4g3pXSUywH2godGH/LbOzowAjbevU20npAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUIHRzNh2KM1fo2yJfQpIA9U8sEE8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvSUhSek5oMktNMWZvMnlKZlFwSUE5
VThzRUU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB2pqADAN
BgkqhkiG9w0BAQsFAAOCAQEAnSEH80/7+4oJBdkg6BgRr53Q7nzji2AjuQvXo38c
pZQ3Klz+wYe+OV3J0VJAxFh+844fXiYG6Mn/KDIJboZM8zBpOAF65kwnHJ9l8G6h
W6c65rZCx6dRTYfZ6utefauMPpCRRIW2GnlOsvdbhcGN4PVqHYAoEXXRAKZNC/Nt
CWpw/eBhNkmJTke7g6nE0IePTW+HhTT02RYD3eBXWh0NPZUgxWlx6V30qwGtr4T0
7kOBwBYkRBiNmhQdltqk6lWxaF4asJoabnMiItzjlTZmF6yRn2RKSwWzEFemSoWd
HSbWq8szUbsKAEtSmZXU4s8mS8lW2Av1F2P3MFusW2moZg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:30 2025 by rpki-client