Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/cH9Sh8k63sDUs-PJlPGb7UVSWrY.roa
File: cH9Sh8k63sDUs-PJlPGb7UVSWrY.roa (raw, json)
Hash identifier: ul3ThKU6ufnUP64p6rw5Pka/8EMDTY0IT924Yz71gSk=
Subject key identifier: 70:7F:52:87:C9:3A:DE:C0:D4:B3:E3:C9:94:F1:9B:ED:45:52:5A:B6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 085B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cH9Sh8k63sDUs-PJlPGb7UVSWrY.roa
Signing time: Tue 29 Sep 2020 09:51:56 +0000
ROA not before: Tue 29 Sep 2020 09:51:56 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 106.105.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2139 (0x85b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:51:56 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=707F5287C93ADEC0D4B3E3C994F19BED45525AB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a3:6b:98:79:c9:87:f8:81:42:60:b3:45:3f:
0a:7e:bd:8b:51:e2:e3:ba:b4:ab:13:41:18:52:00:
c5:12:85:a0:e5:e5:a1:84:b9:35:ac:e7:77:cb:ff:
c0:18:8c:81:b4:07:d2:ac:a3:27:fd:7f:f2:db:2d:
7c:37:15:16:d2:02:50:a5:42:2f:aa:25:a1:8f:8f:
95:c9:d0:9d:43:43:63:f1:01:51:85:7c:94:ce:66:
5a:55:63:d0:64:cf:cc:b3:8d:47:0a:fd:66:25:58:
17:93:5b:cd:5c:72:0b:9e:4e:99:73:7d:f2:b8:8f:
db:96:87:7f:06:1d:05:3b:ad:c7:fa:c2:47:0d:23:
fd:ae:50:63:36:60:b0:f4:a4:16:ab:d7:04:a0:c1:
db:fc:e1:7e:f2:56:fe:6c:a5:ad:7f:5d:23:6e:91:
3d:5e:df:dd:23:e8:94:bf:c1:d2:d8:ae:de:25:eb:
02:f6:70:c0:95:61:dc:4f:45:87:4c:0d:45:be:c2:
6e:b5:44:c9:61:e6:81:3c:3d:11:92:9d:74:d7:43:
4e:76:c2:9b:6b:90:94:fa:c7:ff:ca:57:39:8e:ad:
44:d8:6c:1f:c3:2a:64:d6:01:fd:ac:ca:1c:74:20:
1a:0c:a1:20:df:e4:a6:2c:7e:a6:1f:8a:bb:c2:7d:
59:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7F:52:87:C9:3A:DE:C0:D4:B3:E3:C9:94:F1:9B:ED:45:52:5A:B6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cH9Sh8k63sDUs-PJlPGb7UVSWrY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
99:41:61:bb:09:d8:fa:d0:55:29:87:ca:d4:3d:6f:65:c0:2b:
a6:a7:d5:c4:4a:27:71:bc:b4:6a:ca:ec:c3:77:17:fa:53:aa:
b3:ac:7d:eb:09:78:9e:60:07:16:51:f6:db:3f:a8:7d:94:23:
19:03:7f:9b:7e:d2:e6:bd:0b:f9:91:b4:3e:77:e7:34:8c:02:
ee:1b:7c:1f:ce:74:59:38:87:59:31:64:e1:80:d9:83:f9:93:
4a:ab:85:33:5b:e9:36:33:b7:0f:b6:12:c9:67:ba:8b:0e:43:
79:eb:63:92:2c:30:b8:dd:b7:8d:bd:1e:ad:00:39:f0:3f:a1:
39:79:dc:c5:e8:91:5d:74:a3:19:87:06:5c:09:4c:a4:87:db:
60:0f:64:f9:a7:f6:40:ce:06:ae:71:6c:d7:fb:9e:46:91:40:
26:2b:6e:61:ae:0f:c7:53:18:1b:86:f1:4e:bb:23:88:ed:f4:
9c:bc:42:8f:39:c3:e2:36:ce:6f:15:f7:0a:dd:9e:bd:05:09:
82:aa:37:69:7b:b2:6f:9a:fe:70:81:78:02:3b:d0:b0:98:54:
a2:50:64:7d:e8:94:29:36:c0:55:03:4c:a8:c4:b6:5b:13:5f:
3f:01:e5:b0:cc:d6:5e:ba:7d:c7:2b:74:a5:75:78:a4:03:24:
23:16:83:a5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICCFswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMDA5Mjkw
OTUxNTZaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKDcwN0Y1Mjg3QzkzQURF
QzBENEIzRTNDOTk0RjE5QkVENDU1MjVBQjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDo2uYecmH+IFCYLNFPwp+vYtR4uO6tKsTQRhSAMUShaDl5aGE
uTWs53fL/8AYjIG0B9Ksoyf9f/LbLXw3FRbSAlClQi+qJaGPj5XJ0J1DQ2PxAVGF
fJTOZlpVY9Bkz8yzjUcK/WYlWBeTW81ccgueTplzffK4j9uWh38GHQU7rcf6wkcN
I/2uUGM2YLD0pBar1wSgwdv84X7yVv5spa1/XSNukT1e390j6JS/wdLYrt4l6wL2
cMCVYdxPRYdMDUW+wm61RMlh5oE8PRGSnXTXQ052wptrkJT6x//KVzmOrUTYbB/D
KmTWAf2syhx0IBoMoSDf5KYsfqYfirvCfVkzAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUcH9Sh8k63sDUs+PJlPGb7UVSWrYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvY0g5U2g4azYzc0RVcy1QSmxQR2I3
VVZTV3JZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpp+TAN
BgkqhkiG9w0BAQsFAAOCAQEAmUFhuwnY+tBVKYfK1D1vZcArpqfVxEoncby0asrs
w3cX+lOqs6x96wl4nmAHFlH22z+ofZQjGQN/m37S5r0L+ZG0PnfnNIwC7ht8H850
WTiHWTFk4YDZg/mTSquFM1vpNjO3D7YSyWe6iw5DeetjkiwwuN23jb0erQA58D+h
OXncxeiRXXSjGYcGXAlMpIfbYA9k+af2QM4GrnFs1/ueRpFAJituYa4Px1MYG4bx
TrsjiO30nLxCjznD4jbObxX3Ct2evQUJgqo3aXuyb5r+cIF4AjvQsJhUolBkfeiU
KTbAVQNMqMS2WxNfPwHlsMzWXrp9xyt0pXV4pAMkIxaDpQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:24 2025 by rpki-client