Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/jIwQjNvBtBMZ22bibJLCKC7C43Q.roa
File: jIwQjNvBtBMZ22bibJLCKC7C43Q.roa (raw, json)
Hash identifier: QRsr77ieXrhWGQpgCTBTdBvIiTrl9MDsWdviKodITm4=
Subject key identifier: 8C:8C:10:8C:DB:C1:B4:13:19:DB:66:E2:6C:92:C2:28:2E:C2:E3:74
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 16BA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jIwQjNvBtBMZ22bibJLCKC7C43Q.roa
Signing time: Mon 26 Aug 2024 05:22:33 +0000
ROA not before: Mon 26 Aug 2024 05:22:33 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 218.211.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5818 (0x16ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:33 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8C8C108CDBC1B41319DB66E26C92C2282EC2E374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:02:4f:9f:29:17:81:8e:d1:66:03:8a:90:
bc:70:97:db:80:9c:84:1a:77:f9:72:74:41:cd:78:
ca:be:93:0b:17:3a:10:9a:46:01:f7:88:99:fb:b3:
01:df:09:32:99:53:09:f6:4a:4c:a4:98:73:bc:7a:
0a:44:b0:d5:88:4d:97:44:dd:09:35:a7:9c:92:f5:
f8:5c:32:54:1c:aa:91:91:0e:cd:4d:4c:4e:d3:fe:
e4:8f:30:ac:0d:99:fd:3b:02:e7:d4:12:75:f1:4d:
68:95:58:5d:3b:a0:86:12:c4:0d:7d:3c:1a:d1:e6:
ae:ba:18:3b:30:f9:e4:70:44:57:99:a8:10:66:65:
4e:71:dd:dd:4c:9d:c2:2f:1c:ab:d4:3e:89:8d:0e:
2e:4b:78:2e:62:e3:cd:18:2e:32:60:17:11:6a:d2:
06:91:0e:f8:bd:58:44:21:79:96:2a:ae:98:39:d9:
19:af:30:70:8c:ca:4b:f4:f9:6c:50:2c:5a:22:a3:
f9:b4:18:1c:0e:57:0c:6f:2c:52:b3:7d:3c:50:a0:
a5:e9:e8:56:a5:bb:8a:dd:21:00:ed:ce:2b:45:c1:
e9:85:c8:a4:f0:b1:20:1f:05:f0:07:47:b5:d1:3d:
e4:35:93:27:8e:bc:59:05:93:7b:23:17:3c:60:73:
13:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8C:10:8C:DB:C1:B4:13:19:DB:66:E2:6C:92:C2:28:2E:C2:E3:74
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jIwQjNvBtBMZ22bibJLCKC7C43Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.211.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:72:90:2a:c4:3b:e0:4b:c0:4b:8f:b9:c5:28:62:16:25:87:
1d:19:c2:a2:c5:ed:04:d1:2c:84:cb:57:98:18:00:1f:4c:23:
86:54:fd:aa:17:84:e3:b5:04:35:06:2a:6c:f2:aa:b2:95:79:
f5:f1:ba:f0:85:4a:f2:49:1e:c0:82:4e:09:ad:68:89:74:9e:
33:aa:b2:e4:3f:3d:49:b5:ab:75:43:eb:11:25:70:21:b8:22:
18:60:76:ab:39:f0:54:26:d8:4e:8e:4f:17:48:13:dc:ba:b6:
2d:6b:ce:aa:d8:e1:46:58:e4:af:e4:d0:6e:f6:7d:c1:62:85:
64:eb:ee:cf:8b:04:73:d3:36:12:32:dc:3c:44:73:d7:07:9e:
06:67:c7:38:6a:19:54:fa:e7:ea:a7:23:c2:02:28:49:65:2d:
82:42:1c:58:c3:a4:b3:ad:97:48:2b:bf:66:6f:5e:81:1a:c4:
e5:d1:30:f3:99:c3:79:2d:f6:46:b9:4d:d5:b6:e5:0c:f3:9d:
bc:73:1f:fb:b4:40:04:c4:65:d6:99:21:4e:16:b6:a3:6d:01:
44:78:a9:ff:b8:9b:55:61:12:aa:c1:ae:c4:e2:21:53:40:07:
5b:06:cb:85:3c:48:59:99:fa:7b:65:2d:c4:92:4f:cc:27:88:
8f:ea:4b:f1
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICFrowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIyMzNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDhDOEMxMDhDREJDMUI0
MTMxOURCNjZFMjZDOTJDMjI4MkVDMkUzNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCijQJPnykXgY7RZgOKkLxwl9uAnIQad/lydEHNeMq+kwsXOhCa
RgH3iJn7swHfCTKZUwn2SkykmHO8egpEsNWITZdE3Qk1p5yS9fhcMlQcqpGRDs1N
TE7T/uSPMKwNmf07AufUEnXxTWiVWF07oIYSxA19PBrR5q66GDsw+eRwRFeZqBBm
ZU5x3d1MncIvHKvUPomNDi5LeC5i480YLjJgFxFq0gaRDvi9WEQheZYqrpg52Rmv
MHCMykv0+WxQLFoio/m0GBwOVwxvLFKzfTxQoKXp6Falu4rdIQDtzitFwemFyKTw
sSAfBfAHR7XRPeQ1kyeOvFkFk3sjFzxgcxNlAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUjIwQjNvBtBMZ22bibJLCKC7C43QwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvakl3UWpOdkJ0Qk1aMjJiaWJKTENL
QzdDNDNRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANrTMA0G
CSqGSIb3DQEBCwUAA4IBAQBrcpAqxDvgS8BLj7nFKGIWJYcdGcKixe0E0SyEy1eY
GAAfTCOGVP2qF4TjtQQ1Bips8qqylXn18brwhUrySR7Agk4JrWiJdJ4zqrLkPz1J
tat1Q+sRJXAhuCIYYHarOfBUJthOjk8XSBPcurYta86q2OFGWOSv5NBu9n3BYoVk
6+7PiwRz0zYSMtw8RHPXB54GZ8c4ahlU+ufqpyPCAihJZS2CQhxYw6SzrZdIK79m
b16BGsTl0TDzmcN5LfZGuU3VtuUM8528cx/7tEAExGXWmSFOFrajbQFEeKn/uJtV
YRKqwa7E4iFTQAdbBsuFPEhZmfp7ZS3Ekk/MJ4iP6kvx
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:36 2025 by rpki-client