Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/l8CK1SZMgolsy7NbyhqE-3UAoe4.roa
File: l8CK1SZMgolsy7NbyhqE-3UAoe4.roa (raw, json)
Hash identifier: COduqgO2Q3GhgN7S3ZFUwAI9qpaUfQPjv4sJy/RqUk8=
Subject key identifier: 97:C0:8A:D5:26:4C:82:89:6C:CB:B3:5B:CA:1A:84:FB:75:00:A1:EE
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13BB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/l8CK1SZMgolsy7NbyhqE-3UAoe4.roa
Signing time: Fri 01 Sep 2023 09:25:21 +0000
ROA not before: Fri 01 Sep 2023 09:25:21 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 175.183.138.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5051 (0x13bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:21 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=97C08AD5264C82896CCBB35BCA1A84FB7500A1EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b4:4c:e7:30:dd:21:cd:00:43:25:00:62:09:
7a:ba:63:f7:ee:b2:68:ce:84:db:88:9d:c3:c8:0b:
74:78:45:86:b3:0d:e2:a5:40:99:80:eb:9f:19:b0:
5e:d5:89:18:a4:f2:53:36:c5:84:15:39:d2:a6:af:
7c:67:c4:99:7f:f6:22:fa:d7:18:5b:8d:64:af:fb:
9b:78:91:33:cc:f6:29:1e:e3:06:74:93:68:ad:ba:
1e:55:f5:2b:49:ab:06:be:65:33:7b:e2:9a:08:66:
3d:6e:8f:df:71:ce:64:d8:fe:76:e8:c1:3a:4e:ec:
1e:9d:c2:cb:08:60:f7:8e:df:6f:8f:05:ea:53:dc:
55:78:37:d5:68:53:05:27:62:4f:54:c8:20:8d:01:
e2:59:6e:54:1b:d3:93:7a:71:0a:8f:1a:a5:da:22:
e1:cc:35:38:83:ef:ba:7e:52:db:b0:14:6c:06:bf:
13:8b:54:7b:23:74:42:f8:95:d1:a8:92:db:97:ba:
e0:80:c8:4c:b1:4a:84:5d:a6:49:4a:19:e9:f9:31:
a1:87:d7:de:97:d9:9a:e1:cd:1b:d1:87:1b:9a:c2:
1d:a2:34:98:e1:dd:ae:00:da:0d:a3:81:60:d7:3f:
a0:70:5b:23:ab:6d:21:0c:2e:c8:41:25:6b:86:c8:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C0:8A:D5:26:4C:82:89:6C:CB:B3:5B:CA:1A:84:FB:75:00:A1:EE
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/l8CK1SZMgolsy7NbyhqE-3UAoe4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.138.0/23
Signature Algorithm: sha256WithRSAEncryption
93:48:e5:80:98:39:27:d5:71:24:e9:2d:3f:59:89:03:3a:7c:
01:1d:d4:ae:c0:e0:55:97:86:09:8d:6a:df:d0:e9:01:31:46:
c7:cc:2a:9b:46:9c:cb:93:7a:55:54:64:c8:72:b2:2e:e5:2b:
8a:ce:3b:ff:89:c3:96:36:fb:a2:06:8f:9e:df:0e:05:45:e4:
85:ff:a4:3b:0e:73:42:2e:34:ec:49:d2:52:b1:b5:d0:0f:cf:
44:3d:44:45:8d:d6:95:a7:06:01:29:0d:b0:d6:41:38:b6:d9:
a4:66:5c:99:69:26:c8:56:17:d6:04:2a:b0:74:40:cd:79:bc:
df:7f:af:d4:66:7a:e9:93:3a:0a:73:bc:2b:de:97:4c:09:e9:
9e:e7:37:7c:a6:b4:f8:a0:c6:9e:ed:6d:bf:40:d7:62:5b:75:
7e:de:19:9b:e9:be:69:a6:f7:43:a5:9c:54:d1:37:79:f5:25:
46:42:c5:8c:c3:19:d1:32:a8:f6:67:97:c8:92:0f:5f:b1:c6:
31:ac:c1:da:86:d1:36:ca:b7:30:32:e7:8c:fb:14:01:bb:03:
a2:16:67:ea:81:8c:da:d9:04:99:e9:f2:44:4c:c7:72:6a:16:
f2:d1:29:f7:ec:60:01:cb:1f:96:f4:25:ab:06:76:ce:e2:43:
6d:eb:84:5e
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE7swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI1MjFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDk3QzA4QUQ1MjY0Qzgy
ODk2Q0NCQjM1QkNBMUE4NEZCNzUwMEExRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChtEznMN0hzQBDJQBiCXq6Y/fusmjOhNuIncPIC3R4RYazDeKl
QJmA658ZsF7ViRik8lM2xYQVOdKmr3xnxJl/9iL61xhbjWSv+5t4kTPM9ike4wZ0
k2ituh5V9StJqwa+ZTN74poIZj1uj99xzmTY/nbowTpO7B6dwssIYPeO32+PBepT
3FV4N9VoUwUnYk9UyCCNAeJZblQb05N6cQqPGqXaIuHMNTiD77p+UtuwFGwGvxOL
VHsjdEL4ldGoktuXuuCAyEyxSoRdpklKGen5MaGH196X2ZrhzRvRhxuawh2iNJjh
3a4A2g2jgWDXP6BwWyOrbSEMLshBJWuGyMXvAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUl8CK1SZMgolsy7NbyhqE+3UAoe4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbDhDSzFTWk1nb2xzeTdOYnlocUUt
M1VBb2U0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAa+3ijAN
BgkqhkiG9w0BAQsFAAOCAQEAk0jlgJg5J9VxJOktP1mJAzp8AR3UrsDgVZeGCY1q
39DpATFGx8wqm0acy5N6VVRkyHKyLuUris47/4nDljb7ogaPnt8OBUXkhf+kOw5z
Qi407EnSUrG10A/PRD1ERY3WlacGASkNsNZBOLbZpGZcmWkmyFYX1gQqsHRAzXm8
33+v1GZ66ZM6CnO8K96XTAnpnuc3fKa0+KDGnu1tv0DXYlt1ft4Zm+m+aab3Q6Wc
VNE3efUlRkLFjMMZ0TKo9meXyJIPX7HGMazB2obRNsq3MDLnjPsUAbsDohZn6oGM
2tkEmenyREzHcmoW8tEp9+xgAcsflvQlqwZ2zuJDbeuEXg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:10 2025 by rpki-client