Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/fHVhnp4PkiOVp4BB8A9YB5zdAMQ.roa
File: fHVhnp4PkiOVp4BB8A9YB5zdAMQ.roa (raw, json)
Hash identifier: iOh0VH0QkJu3L2Mhlc0ANN0VkgiP+EiXgv7gmTmM724=
Subject key identifier: 7C:75:61:9E:9E:0F:92:23:95:A7:80:41:F0:0F:58:07:9C:DD:00:C4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 12FB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fHVhnp4PkiOVp4BB8A9YB5zdAMQ.roa
Signing time: Fri 01 Sep 2023 09:24:19 +0000
ROA not before: Fri 01 Sep 2023 09:24:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 133747
IP address blocks: 115.30.64.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4859 (0x12fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=7C75619E9E0F922395A78041F00F58079CDD00C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:9d:77:c1:d2:f2:4c:ff:5b:8d:bd:81:35:
f2:da:b3:96:f0:d5:6b:c0:e2:ac:7b:90:e2:c6:e2:
71:51:32:39:07:64:20:99:28:1e:4a:2a:75:25:42:
41:09:1c:43:96:ec:b2:33:2f:bb:37:02:cc:44:fc:
b1:dd:c0:0d:0f:4d:4c:11:c0:e3:8f:3a:63:ab:4c:
f1:a3:92:96:af:7b:35:a8:4a:2a:39:1e:1b:b4:10:
bb:f6:42:37:54:40:60:ef:cb:64:b6:8a:52:8f:2f:
93:97:f4:ae:2c:d9:54:cf:87:6c:3c:dd:da:ce:65:
e9:46:ff:c1:90:8e:01:a4:eb:eb:07:c4:89:57:52:
44:b5:41:f4:bb:e1:2c:bb:33:75:b2:17:8d:35:1f:
f0:49:ce:f0:7a:21:95:73:36:26:ab:97:67:b9:c0:
74:c8:1a:d7:ca:a7:6e:31:e1:21:ad:31:dc:a8:d2:
13:5f:a1:b0:a7:52:13:4d:13:90:45:ed:c4:43:cf:
f5:57:4c:19:79:da:8e:0e:f3:90:fd:ac:b8:c9:94:
69:10:43:dd:05:c9:ba:75:08:4a:d8:d2:1d:90:ab:
2a:3a:b7:ea:d3:05:ae:53:91:1c:a3:75:e1:93:5e:
53:c7:d7:bf:9a:ec:41:8a:c4:89:21:51:18:a1:a6:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:61:9E:9E:0F:92:23:95:A7:80:41:F0:0F:58:07:9C:DD:00:C4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/fHVhnp4PkiOVp4BB8A9YB5zdAMQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/23
Signature Algorithm: sha256WithRSAEncryption
c9:e1:23:22:68:c3:c8:4d:39:ce:78:4d:d2:3f:ae:2f:21:f2:
0f:75:57:88:a3:96:06:58:64:79:70:d1:e4:3f:ea:d0:e5:fe:
35:be:5c:5c:f8:7d:5b:bc:f5:ac:a4:ed:d6:12:19:85:e8:4c:
09:4c:4c:54:e2:c6:a4:cd:0b:17:92:50:b6:c3:8f:25:c0:df:
4d:37:e4:4f:06:26:ac:fe:9a:cb:a5:fe:3a:6c:23:91:3d:5f:
74:f7:9f:2e:d5:0b:b9:66:53:a6:54:9b:c6:cd:ff:1e:e0:90:
4a:1d:14:78:76:0b:32:e1:e2:a1:a0:fb:00:df:65:49:83:8d:
3d:65:67:f6:bc:fb:be:d6:c3:02:74:9d:57:90:dc:ee:47:aa:
86:1c:69:97:de:8f:54:b5:ee:b5:c1:5c:29:fa:b8:ce:5c:fd:
68:ae:6d:cb:3c:68:3d:58:32:98:a8:9d:5b:35:7d:dd:55:0f:
63:96:40:21:08:18:df:40:06:8b:9c:44:e9:b3:98:8e:a2:72:
2e:4d:53:b5:4c:e6:6c:19:35:6d:ca:08:cc:73:1f:74:98:f6:
13:10:80:08:4e:53:d1:82:0f:16:4d:0c:64:b9:37:3a:0d:1b:
a2:8a:0f:e1:d8:dc:3d:15:bd:cd:4b:18:43:8d:8c:f3:01:30:
76:44:cc:11
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICEvswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI0MTlaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDdDNzU2MTlFOUUwRjky
MjM5NUE3ODA0MUYwMEY1ODA3OUNERDAwQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAuZ13wdLyTP9bjb2BNfLas5bw1WvA4qx7kOLG4nFRMjkHZCCZ
KB5KKnUlQkEJHEOW7LIzL7s3AsxE/LHdwA0PTUwRwOOPOmOrTPGjkpavezWoSio5
Hhu0ELv2QjdUQGDvy2S2ilKPL5OX9K4s2VTPh2w83drOZelG/8GQjgGk6+sHxIlX
UkS1QfS74Sy7M3WyF401H/BJzvB6IZVzNiarl2e5wHTIGtfKp24x4SGtMdyo0hNf
obCnUhNNE5BF7cRDz/VXTBl52o4O85D9rLjJlGkQQ90Fybp1CErY0h2Qqyo6t+rT
Ba5TkRyjdeGTXlPH17+a7EGKxIkhURihpu2/AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUfHVhnp4PkiOVp4BB8A9YB5zdAMQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvZkhWaG5wNFBraU9WcDRCQjhBOVlC
NXpkQU1RLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAXMeQDAN
BgkqhkiG9w0BAQsFAAOCAQEAyeEjImjDyE05znhN0j+uLyHyD3VXiKOWBlhkeXDR
5D/q0OX+Nb5cXPh9W7z1rKTt1hIZhehMCUxMVOLGpM0LF5JQtsOPJcDfTTfkTwYm
rP6ay6X+OmwjkT1fdPefLtULuWZTplSbxs3/HuCQSh0UeHYLMuHioaD7AN9lSYON
PWVn9rz7vtbDAnSdV5Dc7keqhhxpl96PVLXutcFcKfq4zlz9aK5tyzxoPVgymKid
WzV93VUPY5ZAIQgY30AGi5xE6bOYjqJyLk1TtUzmbBk1bcoIzHMfdJj2ExCACE5T
0YIPFk0MZLk3Og0boooP4djcPRW9zUsYQ42M8wEwdkTMEQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:47 2025 by rpki-client