Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/m8kMnMOPwOCgTvVvQGd9J2phaF8.roa
File: m8kMnMOPwOCgTvVvQGd9J2phaF8.roa (raw, json)
Hash identifier: nQcA93OQBwJNWTVHxEsheq4kJxmCFg6azrf8mD6RgnM=
Subject key identifier: 9B:C9:0C:9C:C3:8F:C0:E0:A0:4E:F5:6F:40:67:7D:27:6A:61:68:5F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m8kMnMOPwOCgTvVvQGd9J2phaF8.roa
Signing time: Thu 15 Sep 2022 02:43:22 +0000
ROA not before: Thu 15 Sep 2022 02:43:22 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 18049
IP address blocks: 106.107.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:22 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=9BC90C9CC38FC0E0A04EF56F40677D276A61685F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:86:50:ce:22:2c:89:93:ff:eb:18:4d:4a:
da:c2:82:c8:be:5c:ed:ef:f2:ff:89:8a:12:0d:90:
4e:76:b7:64:ea:9a:6e:eb:93:74:19:9b:4c:01:00:
c9:4b:d5:e5:56:b1:c9:ce:a9:e1:64:36:50:8b:2b:
c8:11:9b:a6:2e:9b:5d:12:0f:12:3a:16:20:0b:68:
fa:85:6c:0e:5c:8a:a3:74:c1:90:69:2b:98:5c:15:
3f:26:b7:9b:5e:d3:20:44:82:39:82:49:3c:89:f1:
c7:a1:48:08:76:09:5b:bc:f9:09:96:8a:65:65:d2:
ac:9b:d5:5c:8e:30:b1:33:f0:8f:6b:b5:cd:85:c8:
3f:85:5e:58:75:92:17:d4:e9:41:56:26:21:48:dc:
ed:2a:8f:03:88:83:76:2d:df:5c:fe:6b:a2:8b:c8:
c5:f2:e5:e6:f5:56:ac:80:ce:0c:f2:0a:c8:ba:66:
ea:21:c4:ad:18:c3:ed:88:8e:96:9a:f2:02:fa:03:
95:4e:eb:1f:43:82:59:fd:46:55:aa:c2:c1:4c:80:
e1:f2:6e:6a:7c:ef:17:02:2e:f8:d9:db:37:a9:2b:
c5:c5:d1:1d:89:99:3f:99:d0:20:88:07:21:37:69:
2f:4f:a4:68:8e:96:22:b6:90:4d:c7:93:6c:be:27:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C9:0C:9C:C3:8F:C0:E0:A0:4E:F5:6F:40:67:7D:27:6A:61:68:5F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m8kMnMOPwOCgTvVvQGd9J2phaF8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.107.144.0/21
Signature Algorithm: sha256WithRSAEncryption
c1:1f:22:da:74:a4:45:0a:d7:78:8c:a9:49:66:d1:96:bd:f3:
ca:ff:08:e1:31:c0:53:b6:9c:d4:2c:fd:97:64:69:c3:77:53:
88:6b:aa:80:21:76:5c:f2:da:b2:13:88:33:58:12:76:0c:e5:
9b:cf:f5:f6:14:67:4e:99:cd:c6:ac:56:47:61:4c:3d:82:d6:
47:4a:bc:a1:bb:ee:12:d7:f9:49:c6:5f:6f:10:2d:f7:d0:99:
1d:ed:68:3d:7a:7b:6e:ce:2f:c0:41:6f:33:9d:d1:6f:fc:c9:
2b:45:dc:00:6b:06:f9:ce:2e:d8:df:2d:10:92:70:dc:8d:0d:
e0:d2:2e:10:37:54:e8:b7:f8:b7:8f:7c:55:9f:a8:09:74:91:
ef:87:39:83:42:39:c4:72:4e:a3:27:5e:37:1b:f3:a9:48:80:
86:33:74:60:96:fa:8d:a0:a1:63:09:b7:66:bf:fb:e5:84:dc:
43:5e:12:02:16:64:c0:db:9f:93:8b:54:3c:8f:fa:80:4d:10:
15:79:24:23:a7:f3:6b:35:bf:cd:b0:3e:d0:a4:b4:0a:5b:db:
d0:da:64:82:ec:fb:6d:52:6e:11:96:7e:8b:b3:37:01:34:26:
63:22:4a:b2:9b:e4:c5:72:d2:74:e6:1e:44:cc:31:70:d2:a9:
e0:51:25:66
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICD8QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMjA5MTUw
MjQzMjJaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKDlCQzkwQzlDQzM4RkMw
RTBBMDRFRjU2RjQwNjc3RDI3NkE2MTY4NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5SoZQziIsiZP/6xhNStrCgsi+XO3v8v+JihINkE52t2Tqmm7r
k3QZm0wBAMlL1eVWscnOqeFkNlCLK8gRm6Yum10SDxI6FiALaPqFbA5ciqN0wZBp
K5hcFT8mt5te0yBEgjmCSTyJ8cehSAh2CVu8+QmWimVl0qyb1VyOMLEz8I9rtc2F
yD+FXlh1khfU6UFWJiFI3O0qjwOIg3Yt31z+a6KLyMXy5eb1VqyAzgzyCsi6Zuoh
xK0Yw+2Ijpaa8gL6A5VO6x9Dgln9RlWqwsFMgOHybmp87xcCLvjZ2zepK8XF0R2J
mT+Z0CCIByE3aS9PpGiOliK2kE3Hk2y+JxgfAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUm8kMnMOPwOCgTvVvQGd9J2phaF8wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvbThrTW5NT1B3T0NnVHZWdlFHZDlK
MnBoYUY4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA2prkDAN
BgkqhkiG9w0BAQsFAAOCAQEAwR8i2nSkRQrXeIypSWbRlr3zyv8I4THAU7ac1Cz9
l2Rpw3dTiGuqgCF2XPLashOIM1gSdgzlm8/19hRnTpnNxqxWR2FMPYLWR0q8obvu
Etf5ScZfbxAt99CZHe1oPXp7bs4vwEFvM53Rb/zJK0XcAGsG+c4u2N8tEJJw3I0N
4NIuEDdU6Lf4t498VZ+oCXSR74c5g0I5xHJOoydeNxvzqUiAhjN0YJb6jaChYwm3
Zr/75YTcQ14SAhZkwNufk4tUPI/6gE0QFXkkI6fzazW/zbA+0KS0Clvb0Npkguz7
bVJuEZZ+i7M3ATQmYyJKspvkxXLSdOYeRMwxcNKp4FElZg==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:31 2025 by rpki-client