Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/cNBnj5mpntWn1BwROS0QKntkTn8.roa
File: cNBnj5mpntWn1BwROS0QKntkTn8.roa (raw, json)
Hash identifier: RDFaItbrZigoEHmUmny9cypV2ASN7Oyy8f7N3wZyZWY=
Subject key identifier: 70:D0:67:8F:99:A9:9E:D5:A7:D4:1C:11:39:2D:10:2A:7B:64:4E:7F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E39
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cNBnj5mpntWn1BwROS0QKntkTn8.roa
Signing time: Wed 29 Sep 2021 02:43:20 +0000
ROA not before: Wed 29 Sep 2021 02:43:20 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 18049
IP address blocks: 106.107.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3641 (0xe39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:20 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=70D0678F99A99ED5A7D41C11392D102A7B644E7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:b7:98:1c:be:ac:48:a1:b4:81:e5:b3:f8:
4c:2a:ca:db:64:5a:dc:69:cb:a6:02:05:27:e5:c5:
2c:d6:04:35:67:75:57:b3:a3:96:3f:82:a9:59:83:
ee:0e:88:89:06:6e:3e:63:28:29:b8:83:fc:a0:97:
07:02:e0:68:50:0b:89:e7:99:19:4d:85:05:3c:59:
66:f1:28:2c:84:e9:fb:72:72:97:a2:89:29:eb:8c:
5e:fa:da:28:c8:94:6d:03:c8:70:aa:62:75:ab:75:
a6:46:17:a8:5c:54:35:2a:ec:8e:62:f5:54:29:27:
40:22:a9:2b:67:70:ab:2d:65:f5:06:e8:65:b1:27:
a6:d3:25:9c:fc:d4:dc:26:2d:76:e7:77:49:be:3b:
54:a1:bc:04:83:fb:f4:f8:01:9e:6e:16:23:79:dd:
03:96:a4:d3:78:85:c5:06:ce:90:3e:45:10:3f:35:
fa:a1:59:35:07:16:f4:53:fe:31:91:53:d1:6f:63:
56:a8:ee:74:b3:0e:b7:b0:f6:d3:17:8d:cc:ea:74:
71:4a:5a:6d:dd:5d:eb:58:09:16:18:18:6b:31:ab:
70:10:25:57:aa:aa:86:7b:3e:84:b1:0d:0c:02:f2:
af:f4:a1:b0:cd:01:7d:1a:87:20:e2:df:ca:e2:17:
15:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D0:67:8F:99:A9:9E:D5:A7:D4:1C:11:39:2D:10:2A:7B:64:4E:7F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/cNBnj5mpntWn1BwROS0QKntkTn8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.128.0/17
Signature Algorithm: sha256WithRSAEncryption
59:15:6f:52:fe:bc:27:fe:54:e1:5f:20:87:c0:63:b6:c0:2e:
ae:39:61:d4:6f:a4:35:c2:37:33:df:ac:31:98:f9:b4:53:00:
16:a9:07:ac:99:b0:e7:1b:55:45:70:55:86:66:7c:4d:c7:f7:
41:ea:8f:37:bd:9f:23:39:82:47:a3:f3:5c:2b:f8:c9:82:a1:
82:d6:86:50:75:7d:3a:03:56:f4:3d:b1:31:86:e7:ed:b5:c8:
6b:29:49:9d:42:1f:11:0a:ad:db:c7:9e:f2:ea:f7:d7:2a:a2:
4f:b1:56:70:0c:9e:3e:d2:65:1e:18:7b:85:e9:80:83:82:8e:
c3:25:b0:5a:d1:5f:19:b9:da:43:e2:6c:13:cc:8c:28:42:a5:
25:30:22:28:49:7f:1f:eb:68:5a:fc:41:97:6a:00:70:51:c8:
48:fc:ed:97:da:dd:fd:05:95:07:f1:9c:58:bd:b5:f6:77:3d:
60:89:ad:fa:eb:16:ee:3d:1f:63:b9:e9:66:70:50:8b:8e:c8:
36:63:9d:96:b4:18:18:05:c0:3b:56:6d:6a:04:6f:9a:30:29:
9e:d0:89:88:28:ea:6a:9b:4c:71:58:e6:22:06:c7:8c:fe:4d:
0f:b0:42:4b:fa:54:06:a6:77:2d:4c:fc:aa:62:37:d2:c9:0d:
1b:c0:28:77
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDjkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTA5Mjkw
MjQzMjBaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDcwRDA2NzhGOTlBOTlF
RDVBN0Q0MUMxMTM5MkQxMDJBN0I2NDRFN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlN7eYHL6sSKG0geWz+EwqyttkWtxpy6YCBSflxSzWBDVndVez
o5Y/gqlZg+4OiIkGbj5jKCm4g/yglwcC4GhQC4nnmRlNhQU8WWbxKCyE6ftycpei
iSnrjF762ijIlG0DyHCqYnWrdaZGF6hcVDUq7I5i9VQpJ0AiqStncKstZfUG6GWx
J6bTJZz81NwmLXbnd0m+O1ShvASD+/T4AZ5uFiN53QOWpNN4hcUGzpA+RRA/Nfqh
WTUHFvRT/jGRU9FvY1ao7nSzDrew9tMXjczqdHFKWm3dXetYCRYYGGsxq3AQJVeq
qoZ7PoSxDQwC8q/0obDNAX0ahyDi38riFxWhAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUcNBnj5mpntWn1BwROS0QKntkTn8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvY05Cbmo1bXBudFduMUJ3Uk9TMFFL
bnRrVG44LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB2prgDAN
BgkqhkiG9w0BAQsFAAOCAQEAWRVvUv68J/5U4V8gh8BjtsAurjlh1G+kNcI3M9+s
MZj5tFMAFqkHrJmw5xtVRXBVhmZ8Tcf3QeqPN72fIzmCR6PzXCv4yYKhgtaGUHV9
OgNW9D2xMYbn7bXIaylJnUIfEQqt28ee8ur31yqiT7FWcAyePtJlHhh7hemAg4KO
wyWwWtFfGbnaQ+JsE8yMKEKlJTAiKEl/H+toWvxBl2oAcFHISPztl9rd/QWVB/Gc
WL219nc9YImt+usW7j0fY7npZnBQi47INmOdlrQYGAXAO1ZtagRvmjApntCJiCjq
aptMcVjmIgbHjP5ND7BCS/pUBqZ3LUz8qmI30skNG8Aodw==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:05 2025 by rpki-client