Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ss2gI-XKk8BBJKlFa0BYuEDjg6I.roa
File: Ss2gI-XKk8BBJKlFa0BYuEDjg6I.roa (raw, json)
Hash identifier: TZQfBzAo7l0nbaR6dyk+12dPl0+es7XnMgX1MNPn9vs=
Subject key identifier: 4A:CD:A0:23:E5:CA:93:C0:41:24:A9:45:6B:40:58:B8:40:E3:83:A2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0856
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ss2gI-XKk8BBJKlFa0BYuEDjg6I.roa
Signing time: Tue 29 Sep 2020 09:51:55 +0000
ROA not before: Tue 29 Sep 2020 09:51:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 218.210.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2134 (0x856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:51:55 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4ACDA023E5CA93C04124A9456B4058B840E383A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:41:79:fe:31:34:68:ef:e0:89:48:2c:90:37:
72:cb:ad:33:02:4a:b0:a9:f5:cd:5b:e9:ff:28:e9:
3c:e4:ec:4f:83:be:5e:85:6c:a0:bb:14:ee:ce:8c:
cd:44:06:b1:22:25:ad:4b:2e:92:51:7e:71:ef:d2:
86:f7:51:3f:0b:e6:7a:70:0c:4a:d3:eb:0f:62:22:
c7:e4:04:5d:07:33:2b:8b:67:39:62:28:81:d2:37:
b0:a4:89:07:61:fa:72:11:f6:ff:a8:c7:94:9b:e3:
75:c5:4a:50:d9:cf:4c:fb:49:9c:11:ea:e3:4e:bb:
f5:b2:3e:ce:ce:bf:07:68:ef:d3:01:2e:bd:38:d6:
3c:75:95:75:5d:96:03:97:05:8d:fe:12:68:6d:bb:
32:a1:41:0d:53:fb:5c:b0:4b:77:28:13:6e:ee:b9:
18:f0:9d:f7:da:a8:b3:1f:60:30:a9:1e:1b:3d:f6:
75:58:c6:e4:68:16:97:de:68:ee:3e:9a:9a:6e:7e:
83:b5:0b:14:62:cc:9d:ba:00:cd:d4:c3:18:f3:7a:
34:05:6e:d7:cf:68:05:74:e5:b8:0d:18:3e:d5:5f:
e6:35:2a:8a:e2:64:8b:fb:31:3b:42:ef:fa:4a:8b:
4d:80:bd:8f:ad:98:10:54:39:3f:60:fd:37:ea:78:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CD:A0:23:E5:CA:93:C0:41:24:A9:45:6B:40:58:B8:40:E3:83:A2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ss2gI-XKk8BBJKlFa0BYuEDjg6I.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/19
Signature Algorithm: sha256WithRSAEncryption
ad:34:5e:51:fc:f7:4b:c6:53:38:51:23:a7:ce:d7:34:42:d0:
10:0f:fe:a5:44:88:cb:da:32:8e:1a:a6:3a:63:69:74:fd:6f:
bb:40:7b:ac:db:88:b3:f8:54:26:92:ab:13:c4:e9:fa:4a:8f:
fe:c9:79:ce:d3:92:db:14:cb:40:36:9e:78:c7:9a:ca:77:38:
1c:13:cb:1e:d4:29:54:da:b2:c2:28:b9:f8:1d:c8:68:cf:03:
af:85:41:f9:51:58:f8:5f:9b:b3:3e:6d:9a:88:64:34:33:22:
0d:6a:37:f9:bc:0e:73:4c:e8:70:ab:3b:eb:b6:2e:dd:82:5c:
fd:70:4f:13:1f:75:c3:bb:c6:27:8b:24:a5:8f:8a:25:a8:d5:
84:17:93:cb:37:36:91:11:48:f4:6f:82:b2:a4:e2:a4:ac:7b:
a0:40:a5:7a:32:ba:cd:8c:17:25:11:d3:f6:42:3c:38:e0:04:
d2:c1:2b:01:95:ef:2e:03:e5:38:c4:f1:2e:08:b8:a5:e8:d8:
f9:ac:83:55:cf:84:14:1a:ce:4f:f0:42:0c:ec:7b:7f:67:98:
af:c1:5a:bb:4b:38:2b:ab:65:d2:67:de:4a:08:78:7e:3e:2b:
94:26:40:67:42:af:6a:70:6b:33:3d:c9:5b:2a:bb:ca:e3:6a:
fd:d2:3a:98
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUxNTVaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDRBQ0RBMDIzRTVDQTkz
QzA0MTI0QTk0NTZCNDA1OEI4NDBFMzgzQTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDeQXn+MTRo7+CJSCyQN3LLrTMCSrCp9c1b6f8o6Tzk7E+Dvl6F
bKC7FO7OjM1EBrEiJa1LLpJRfnHv0ob3UT8L5npwDErT6w9iIsfkBF0HMyuLZzli
KIHSN7CkiQdh+nIR9v+ox5Sb43XFSlDZz0z7SZwR6uNOu/WyPs7Ovwdo79MBLr04
1jx1lXVdlgOXBY3+EmhtuzKhQQ1T+1ywS3coE27uuRjwnffaqLMfYDCpHhs99nVY
xuRoFpfeaO4+mppufoO1CxRizJ26AM3UwxjzejQFbtfPaAV05bgNGD7VX+Y1Kori
ZIv7MTtC7/pKi02AvY+tmBBUOT9g/TfqeAoNAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUSs2gI+XKk8BBJKlFa0BYuEDjg6IwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvU3MyZ0ktWEtrOEJCSktsRmEwQll1
RURqZzZJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBdrSADAN
BgkqhkiG9w0BAQsFAAOCAQEArTReUfz3S8ZTOFEjp87XNELQEA/+pUSIy9oyjhqm
OmNpdP1vu0B7rNuIs/hUJpKrE8Tp+kqP/sl5ztOS2xTLQDaeeMeaync4HBPLHtQp
VNqywii5+B3IaM8Dr4VB+VFY+F+bsz5tmohkNDMiDWo3+bwOc0zocKs767Yu3YJc
/XBPEx91w7vGJ4skpY+KJajVhBeTyzc2kRFI9G+CsqTipKx7oEClejK6zYwXJRHT
9kI8OOAE0sErAZXvLgPlOMTxLgi4pejY+ayDVc+EFBrOT/BCDOx7f2eYr8Fau0s4
K6tl0mfeSgh4fj4rlCZAZ0KvanBrMz3JWyq7yuNq/dI6mA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:29 2025 by rpki-client