Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pKaIwYmYmSr5XLiPqSzczvm9g7s.roa
File: pKaIwYmYmSr5XLiPqSzczvm9g7s.roa (raw, json)
Hash identifier: At6jLqq+X+Io/beaWxA9XV5Ruz801GxMJNlyPnLh1qg=
Subject key identifier: A4:A6:88:C1:89:98:99:2A:F9:5C:B8:8F:A9:2C:DC:CE:F9:BD:83:BB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 16BE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pKaIwYmYmSr5XLiPqSzczvm9g7s.roa
Signing time: Mon 26 Aug 2024 05:22:34 +0000
ROA not before: Mon 26 Aug 2024 05:22:34 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 59.104.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5822 (0x16be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:34 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A4A688C18998992AF95CB88FA92CDCCEF9BD83BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:3f:e2:36:b3:89:2c:af:aa:df:0d:e8:e0:
98:22:c0:92:b9:86:51:20:0f:d8:40:b4:30:23:79:
91:53:7d:cc:dd:d2:bd:db:de:15:58:53:64:fb:fc:
62:1e:ef:9d:ea:a3:5c:08:bc:8b:aa:fa:e7:40:40:
a9:8d:33:9b:f6:64:91:d6:fa:74:da:41:b2:cd:b8:
6d:b0:c0:41:3f:f2:f6:b4:e3:47:db:f4:58:14:39:
37:12:f5:94:0f:1f:c5:7e:a7:98:4c:69:37:75:8c:
85:ad:56:9c:3c:a3:1c:2e:9a:10:89:39:97:3a:fb:
0e:f0:8e:ad:a7:86:e1:04:dd:e3:32:e2:d9:f4:aa:
5b:8f:98:fc:77:2f:73:f4:fb:b9:7c:3c:2a:55:b2:
9a:6e:a6:31:5f:93:38:7f:1b:60:5f:62:ec:90:ae:
89:98:ad:66:cc:60:90:0a:e8:63:35:f2:95:9e:ed:
d1:60:0d:ac:54:ec:98:2f:d6:ec:72:7b:8d:54:c5:
0e:75:6a:4e:ba:3d:39:48:7c:45:16:9a:f1:34:1c:
20:ab:1f:c8:f1:b5:d6:7a:97:1a:6b:0b:86:1b:4e:
9a:3e:1f:db:66:41:15:f5:50:cd:4e:8f:b2:5e:71:
12:99:89:cd:31:35:fa:da:b8:07:df:ad:05:b1:77:
22:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A6:88:C1:89:98:99:2A:F9:5C:B8:8F:A9:2C:DC:CE:F9:BD:83:BB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pKaIwYmYmSr5XLiPqSzczvm9g7s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
1e:43:5b:dd:55:91:1e:b8:f2:c9:ab:65:05:c7:77:8e:d0:a0:
8c:11:d0:14:05:c0:84:b4:0d:a3:e7:c0:59:53:5f:b0:f6:be:
29:d5:70:c2:23:fd:55:ef:df:7d:ee:db:91:55:a1:a2:02:15:
14:de:ed:8c:bb:3d:83:69:d3:d8:15:af:35:bc:a6:f5:5f:18:
94:be:bc:19:27:0d:9d:24:db:0c:db:46:39:4a:51:94:f9:73:
63:6b:4d:2e:c1:06:ad:0e:a0:cc:80:44:b3:a8:66:bd:9f:0c:
d8:7e:b2:02:63:a7:c5:f7:e2:f7:21:bb:76:e0:e5:02:2a:a7:
70:31:d3:09:ba:54:78:7f:e6:04:27:68:75:50:a2:67:a7:17:
93:60:0e:17:ac:e9:7d:f8:3f:52:fa:8c:a4:93:32:2f:3c:90:
cb:22:1c:70:e1:fc:e5:f6:65:0d:e9:b1:7f:9f:51:d6:01:4a:
0f:68:1c:06:1b:62:03:30:e4:d5:6f:17:55:d9:fe:8e:8e:e9:
83:63:91:ed:0e:ca:e4:9e:a2:fb:e5:50:bf:3b:ed:97:3b:6d:
0b:26:ce:71:f4:c7:5b:e2:2a:e0:78:63:ec:6b:ea:57:84:c0:
e0:c4:eb:43:24:91:97:cd:89:8d:74:0d:75:4d:b0:84:9a:23:
ba:dc:69:b9
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICFr4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIyMzRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEE0QTY4OEMxODk5ODk5
MkFGOTVDQjg4RkE5MkNEQ0NFRjlCRDgzQkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKcz/iNrOJLK+q3w3o4JgiwJK5hlEgD9hAtDAjeZFTfczd0r3b
3hVYU2T7/GIe753qo1wIvIuq+udAQKmNM5v2ZJHW+nTaQbLNuG2wwEE/8va040fb
9FgUOTcS9ZQPH8V+p5hMaTd1jIWtVpw8oxwumhCJOZc6+w7wjq2nhuEE3eMy4tn0
qluPmPx3L3P0+7l8PCpVsppupjFfkzh/G2BfYuyQromYrWbMYJAK6GM18pWe7dFg
DaxU7Jgv1uxye41UxQ51ak66PTlIfEUWmvE0HCCrH8jxtdZ6lxprC4YbTpo+H9tm
QRX1UM1Oj7JecRKZic0xNfrauAffrQWxdyKRAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUpKaIwYmYmSr5XLiPqSzczvm9g7swHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcEthSXdZbVltU3I1WExpUHFTemN6
dm05ZzdzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDATtoMA0G
CSqGSIb3DQEBCwUAA4IBAQAeQ1vdVZEeuPLJq2UFx3eO0KCMEdAUBcCEtA2j58BZ
U1+w9r4p1XDCI/1V79997tuRVaGiAhUU3u2Muz2DadPYFa81vKb1XxiUvrwZJw2d
JNsM20Y5SlGU+XNja00uwQatDqDMgESzqGa9nwzYfrICY6fF9+L3Ibt24OUCKqdw
MdMJulR4f+YEJ2h1UKJnpxeTYA4XrOl9+D9S+oykkzIvPJDLIhxw4fzl9mUN6bF/
n1HWAUoPaBwGG2IDMOTVbxdV2f6OjumDY5HtDsrknqL75VC/O+2XO20LJs5x9Mdb
4irgeGPsa+pXhMDgxOtDJJGXzYmNdA11TbCEmiO63Gm5
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:27:52 2025 by rpki-client