Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/jlOmOKwejE893kljwDCJvj8fGU8.roa
File: jlOmOKwejE893kljwDCJvj8fGU8.roa (raw, json)
Hash identifier: Eabef3N2oB7SoRcSZi8qTnoJCTopm0DKZyKLUASiJdQ=
Subject key identifier: 8E:53:A6:38:AC:1E:8C:4F:3D:DE:49:63:C0:30:89:BE:3F:1F:19:4F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jlOmOKwejE893kljwDCJvj8fGU8.roa
Signing time: Thu 15 Sep 2022 02:43:30 +0000
ROA not before: Thu 15 Sep 2022 02:43:30 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:30 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=8E53A638AC1E8C4F3DDE4963C03089BE3F1F194F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:b3:27:9b:23:b6:3e:7f:50:e1:37:59:fe:
ff:bb:22:31:a5:18:d1:59:09:df:87:ce:f0:35:f1:
1e:88:be:13:33:78:ec:4b:30:56:94:7b:a0:8d:b2:
4f:ec:2a:8e:78:c8:32:2f:5e:e6:9d:0c:67:06:b3:
59:13:9c:f7:14:62:76:e3:d8:1f:14:0f:68:cb:34:
cf:f7:10:20:b8:73:77:4c:b9:71:1f:0a:e7:e3:30:
d8:44:20:f8:4e:f7:aa:c8:36:b7:79:37:cb:77:8d:
5b:6f:7b:24:24:15:1c:6d:10:b5:6d:08:65:7b:41:
4b:ce:50:f3:12:28:ae:92:1a:71:9f:50:d1:57:29:
a2:3e:b9:c1:99:2d:74:00:60:7a:ca:6b:d9:af:ab:
d4:be:a9:89:c7:1c:41:4b:79:4b:c4:97:70:37:d3:
20:3a:32:81:41:78:7f:3a:4f:6b:02:f4:3d:b2:13:
3e:f9:c9:3c:20:81:6e:14:9a:d6:6e:66:3c:e7:80:
5e:fa:de:d5:7e:97:6e:73:ad:b9:6d:9d:55:a8:91:
0d:57:06:d0:6b:47:9c:97:7d:5e:17:f4:c8:17:09:
a4:99:61:b5:76:d4:b7:1d:65:39:e3:ab:6e:95:b1:
24:5b:91:ec:5b:09:b0:b6:d3:f6:28:54:30:7b:c2:
b6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:53:A6:38:AC:1E:8C:4F:3D:DE:49:63:C0:30:89:BE:3F:1F:19:4F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jlOmOKwejE893kljwDCJvj8fGU8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.58.0/24
Signature Algorithm: sha256WithRSAEncryption
11:dd:b3:0c:9d:84:ea:64:ca:6f:a8:75:e4:3e:e7:3e:13:10:
21:c3:07:ac:3d:70:76:38:76:df:20:31:e9:b8:96:4c:f5:76:
f0:67:bf:48:80:48:a6:51:2a:c3:ac:0c:de:0a:85:d6:df:51:
05:0c:85:c8:9e:6e:0d:b7:7d:61:9e:24:ec:ea:95:38:92:ec:
f1:a9:8e:13:bb:c7:f5:28:42:72:b9:06:85:77:cf:f0:05:45:
8a:47:7a:9b:6b:1c:71:31:0f:1e:2b:d4:c7:7d:af:54:ba:4f:
a2:3e:be:e7:b7:69:db:6f:85:64:e7:35:1b:28:9e:8a:15:67:
19:17:74:8d:af:a5:29:be:e6:fb:d3:e6:76:75:78:48:3a:b1:
7d:01:7e:77:1c:85:b7:df:3a:55:7f:5b:1e:76:67:db:1c:4c:
09:4f:31:b2:db:1b:71:26:0b:95:b6:80:df:55:dd:45:ff:fc:
37:5f:e0:e0:3f:d7:34:94:8a:e9:93:e4:08:2f:25:1d:54:0d:
c1:4d:2d:3d:e1:05:46:1f:25:e4:fc:22:99:9b:f5:62:49:b4:
61:12:96:9e:27:0f:55:1e:5a:65:71:10:7c:07:06:1e:12:63:
07:7d:8f:b5:c1:a5:9a:2e:1d:f1:89:a7:50:7e:48:ce:2c:27:
02:b7:8a:54
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMzBaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDhFNTNBNjM4QUMxRThD
NEYzRERFNDk2M0MwMzA4OUJFM0YxRjE5NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGzbMnmyO2Pn9Q4TdZ/v+7IjGlGNFZCd+HzvA18R6IvhMzeOxL
MFaUe6CNsk/sKo54yDIvXuadDGcGs1kTnPcUYnbj2B8UD2jLNM/3ECC4c3dMuXEf
CufjMNhEIPhO96rINrd5N8t3jVtveyQkFRxtELVtCGV7QUvOUPMSKK6SGnGfUNFX
KaI+ucGZLXQAYHrKa9mvq9S+qYnHHEFLeUvEl3A30yA6MoFBeH86T2sC9D2yEz75
yTwggW4UmtZuZjzngF763tV+l25zrbltnVWokQ1XBtBrR5yXfV4X9MgXCaSZYbV2
1LcdZTnjq26VsSRbkexbCbC20/YoVDB7wrbjAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUjlOmOKwejE893kljwDCJvj8fGU8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvamxPbU9Ld2VqRTg5M2tsandEQ0p2
ajhmR1U4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHvNOjAN
BgkqhkiG9w0BAQsFAAOCAQEAEd2zDJ2E6mTKb6h15D7nPhMQIcMHrD1wdjh23yAx
6biWTPV28Ge/SIBIplEqw6wM3gqF1t9RBQyFyJ5uDbd9YZ4k7OqVOJLs8amOE7vH
9ShCcrkGhXfP8AVFikd6m2sccTEPHivUx32vVLpPoj6+57dp22+FZOc1GyieihVn
GRd0ja+lKb7m+9PmdnV4SDqxfQF+dxyFt986VX9bHnZn2xxMCU8xstsbcSYLlbaA
31XdRf/8N1/g4D/XNJSK6ZPkCC8lHVQNwU0tPeEFRh8l5PwimZv1Ykm0YRKWnicP
VR5aZXEQfAcGHhJjB32PtcGlmi4d8YmnUH5IziwnAreKVA==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:15 2025 by rpki-client