Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TS3XSwfWqhGJhTLIfjnXwd0e6Bs.roa
File: TS3XSwfWqhGJhTLIfjnXwd0e6Bs.roa (raw, json)
Hash identifier: j1zVLJ7uxPxn2oNsJ7AN0b2sn/1Z++pudRcMlt/2Ou0=
Subject key identifier: 4D:2D:D7:4B:07:D6:AA:11:89:85:32:C8:7E:39:D7:C1:DD:1E:E8:1B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 134A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TS3XSwfWqhGJhTLIfjnXwd0e6Bs.roa
Signing time: Fri 01 Sep 2023 09:24:44 +0000
ROA not before: Fri 01 Sep 2023 09:24:44 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 113.196.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4938 (0x134a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:44 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=4D2DD74B07D6AA11898532C87E39D7C1DD1EE81B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:e4:1f:eb:f2:82:96:69:0b:ad:7f:dd:0e:
87:6e:c8:ea:db:7f:a8:38:4c:d4:a0:f2:f8:ca:24:
35:20:4c:12:dd:74:19:f3:15:a7:6f:94:53:dd:09:
f0:6e:9c:ab:ac:8a:e5:f3:e8:c9:ac:25:05:e4:66:
71:60:ae:bc:1f:81:5c:75:27:5a:64:58:4f:fe:fb:
d2:af:ce:5a:91:85:8f:1e:1e:20:0d:d0:62:0d:be:
94:ab:e7:b7:2e:f9:47:76:12:de:e7:b0:e0:a4:e5:
5e:63:42:85:ca:0e:3c:0b:85:74:20:6b:5d:7c:e8:
ee:82:56:7a:64:55:48:aa:73:c1:c1:a7:1c:6a:49:
51:87:82:45:9f:3e:71:e1:55:02:0d:4e:ea:b5:9a:
ce:e2:7c:58:47:5b:fc:6b:5b:7d:c5:d1:a1:eb:d0:
f2:0e:32:59:3b:1e:c0:42:7d:b2:b2:38:09:77:f9:
9d:d4:62:82:40:ca:c1:19:d0:62:6b:89:79:fc:31:
f8:f7:46:49:c6:8d:b9:df:de:78:c6:e3:cd:77:33:
44:1d:d1:d8:82:a4:84:98:46:5d:11:6f:b8:06:c5:
ac:4a:72:51:1e:7b:1c:99:b4:1b:68:a6:8b:76:f9:
fb:47:68:f3:bc:53:ba:59:0b:16:e7:43:12:5f:e8:
e4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2D:D7:4B:07:D6:AA:11:89:85:32:C8:7E:39:D7:C1:DD:1E:E8:1B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TS3XSwfWqhGJhTLIfjnXwd0e6Bs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.192.0/18
Signature Algorithm: sha256WithRSAEncryption
49:f1:0d:d8:ce:87:f1:10:b2:fc:e7:52:f7:e4:b9:5a:92:b9:
ea:04:bb:a9:2e:cc:9f:be:7f:f9:bb:1a:05:2e:c9:fb:cd:82:
27:6e:c7:9b:69:3b:b0:bd:e3:79:cb:aa:03:a6:95:62:34:c4:
e1:4d:41:48:44:c7:78:c8:61:b5:d0:3b:49:d3:b8:ca:70:de:
8a:68:01:9e:21:a9:6b:04:2d:e4:59:95:06:a3:66:a9:6d:c3:
70:4a:06:03:2f:13:58:b0:a8:52:5f:06:a9:c8:42:eb:df:13:
e8:7e:f1:23:04:02:5e:5e:e5:11:08:39:e6:ff:24:7e:bc:00:
2b:6d:95:25:ab:4a:dc:33:6d:9f:cf:6b:e1:7f:6d:52:b5:c4:
5a:5d:48:bd:b3:e5:d2:4e:76:b1:86:ff:d0:42:b2:f5:43:e9:
49:7c:4f:84:e8:43:72:4e:53:46:0f:c9:dc:83:f4:5c:c8:fc:
98:25:59:97:25:3a:bf:f1:52:a5:fe:29:07:6f:ae:39:68:02:
4e:bd:cd:41:98:e9:bb:2a:e1:59:5a:86:65:85:a0:84:14:14:
c2:c0:45:34:f6:b5:f2:e9:98:7e:0f:93:00:3c:81:60:df:8f:
07:44:f8:a0:c7:b2:4f:06:11:ad:78:1b:da:c6:ee:c0:3c:2a:
42:6b:14:48
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE0owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI0NDRaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDREMkRENzRCMDdENkFB
MTE4OTg1MzJDODdFMzlEN0MxREQxRUU4MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvkOQf6/KClmkLrX/dDoduyOrbf6g4TNSg8vjKJDUgTBLddBnz
FadvlFPdCfBunKusiuXz6MmsJQXkZnFgrrwfgVx1J1pkWE/++9KvzlqRhY8eHiAN
0GINvpSr57cu+Ud2Et7nsOCk5V5jQoXKDjwLhXQga1186O6CVnpkVUiqc8HBpxxq
SVGHgkWfPnHhVQINTuq1ms7ifFhHW/xrW33F0aHr0PIOMlk7HsBCfbKyOAl3+Z3U
YoJAysEZ0GJriXn8Mfj3RknGjbnf3njG4813M0Qd0diCpISYRl0Rb7gGxaxKclEe
exyZtBtopot2+ftHaPO8U7pZCxbnQxJf6OTzAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUTS3XSwfWqhGJhTLIfjnXwd0e6BswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvVFMzWFN3ZldxaEdKaFRMSWZqblh3
ZDBlNkJzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBnHEwDAN
BgkqhkiG9w0BAQsFAAOCAQEASfEN2M6H8RCy/OdS9+S5WpK56gS7qS7Mn75/+bsa
BS7J+82CJ27Hm2k7sL3jecuqA6aVYjTE4U1BSETHeMhhtdA7SdO4ynDeimgBniGp
awQt5FmVBqNmqW3DcEoGAy8TWLCoUl8GqchC698T6H7xIwQCXl7lEQg55v8kfrwA
K22VJatK3DNtn89r4X9tUrXEWl1IvbPl0k52sYb/0EKy9UPpSXxPhOhDck5TRg/J
3IP0XMj8mCVZlyU6v/FSpf4pB2+uOWgCTr3NQZjpuyrhWVqGZYWghBQUwsBFNPa1
8umYfg+TADyBYN+PB0T4oMeyTwYRrXgb2sbuwDwqQmsUSA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:13 2025 by rpki-client