Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/rj3Ka1aKXg8yyDtCnbbvF-9So70.roa
File: rj3Ka1aKXg8yyDtCnbbvF-9So70.roa (raw, json)
Hash identifier: lwQqKTmIiu9sxGJU6ChrenKBl6EfRjyuYfbfn5QMW1w=
Subject key identifier: AE:3D:CA:6B:56:8A:5E:0F:32:C8:3B:42:9D:B6:EF:17:EF:52:A3:BD
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13AB
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rj3Ka1aKXg8yyDtCnbbvF-9So70.roa
Signing time: Fri 01 Sep 2023 09:25:16 +0000
ROA not before: Fri 01 Sep 2023 09:25:16 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131627
IP address blocks: 106.105.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5035 (0x13ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:16 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=AE3DCA6B568A5E0F32C83B429DB6EF17EF52A3BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:e6:2a:ca:43:94:21:9e:88:3c:92:47:9c:
d7:c2:60:a2:c6:ca:bc:13:0c:91:7c:f2:8b:e7:21:
3b:78:51:21:2b:57:02:90:9d:3b:e1:ff:7e:d5:62:
f6:80:45:05:bb:a3:b2:0d:fb:28:a8:74:97:6f:5c:
95:2f:e8:c0:28:ed:29:e9:17:5e:2d:4b:38:f1:3f:
00:17:64:5c:8c:b7:fe:0d:c1:1b:d4:06:ca:53:59:
6f:0f:0b:13:89:69:8c:0f:4a:26:7e:95:25:6f:35:
d9:f2:a3:a9:e9:67:3c:95:b4:7b:9b:d8:e9:b1:80:
3d:22:bc:4f:e6:1f:01:d9:38:58:d7:7d:86:48:22:
51:6c:a9:db:ca:d6:dc:23:3f:30:ad:3e:f4:7a:42:
f6:3f:e5:81:32:91:5d:89:c1:06:ad:bc:97:5f:ea:
75:8b:4f:68:42:c1:fb:80:d9:d6:7d:8d:7e:0a:63:
c8:9e:0c:8f:90:99:cb:42:c8:77:35:cb:2c:7f:3b:
fc:a0:86:87:5a:03:42:50:a8:4f:65:d8:ed:04:8b:
4d:40:79:03:6d:43:2c:b1:73:2f:28:f5:92:b8:a1:
a7:5a:cd:9e:82:4a:cc:b5:db:3e:7a:c8:f0:85:8d:
4f:49:e5:28:cb:ae:bf:23:38:5b:8f:95:21:6b:51:
d3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3D:CA:6B:56:8A:5E:0F:32:C8:3B:42:9D:B6:EF:17:EF:52:A3:BD
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/rj3Ka1aKXg8yyDtCnbbvF-9So70.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.105.249.0/24
Signature Algorithm: sha256WithRSAEncryption
93:2f:db:7f:25:34:e5:ca:17:8c:05:f9:34:e8:81:45:36:e7:
c2:dc:33:c2:5b:cc:92:b5:de:c9:34:9e:af:e8:ef:ef:c8:92:
50:a9:6b:e4:96:e2:f7:3f:7a:7d:8b:17:69:ef:88:a1:c3:68:
00:eb:92:2b:15:ec:64:71:cb:45:b0:65:56:ca:a7:82:dc:88:
ae:28:dc:09:51:be:31:b9:6c:63:1c:b8:c6:a5:bd:18:36:90:
50:06:79:8d:02:4c:2a:9f:e7:f4:0c:85:eb:d5:0a:79:52:cc:
df:f3:c5:8d:c6:49:62:3d:30:ba:83:32:36:87:fd:14:28:6e:
e4:77:11:33:c0:9e:39:39:ad:0c:0d:15:4e:cb:f8:fd:9e:f8:
f9:41:3d:27:c1:99:f4:dd:b2:1a:7b:c0:57:19:10:fa:81:4e:
a4:05:a9:3e:c6:a9:e9:8d:93:fc:68:7a:37:c3:93:bf:fa:7f:
be:fb:0a:14:d8:14:d6:34:2d:0d:38:73:d2:e0:34:be:e8:3a:
3c:4e:40:9a:32:37:c9:a2:e3:43:1b:19:7f:d4:0f:bd:ad:fd:
65:ba:3f:79:a1:b9:ac:bf:be:b7:de:52:67:24:70:60:60:84:
fb:d0:a5:d2:79:8e:c4:88:39:12:52:04:c0:42:77:f4:a6:12:
00:08:42:3d
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICE6swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzA5MDEw
OTI1MTZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKEFFM0RDQTZCNTY4QTVF
MEYzMkM4M0I0MjlEQjZFRjE3RUY1MkEzQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEFeYqykOUIZ6IPJJHnNfCYKLGyrwTDJF88ovnITt4USErVwKQ
nTvh/37VYvaARQW7o7IN+yiodJdvXJUv6MAo7SnpF14tSzjxPwAXZFyMt/4NwRvU
BspTWW8PCxOJaYwPSiZ+lSVvNdnyo6npZzyVtHub2OmxgD0ivE/mHwHZOFjXfYZI
IlFsqdvK1twjPzCtPvR6QvY/5YEykV2JwQatvJdf6nWLT2hCwfuA2dZ9jX4KY8ie
DI+QmctCyHc1yyx/O/yghodaA0JQqE9l2O0Ei01AeQNtQyyxcy8o9ZK4oadazZ6C
Ssy12z56yPCFjU9J5SjLrr8jOFuPlSFrUdMbAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUrj3Ka1aKXg8yyDtCnbbvF+9So70wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvcmozS2ExYUtYZzh5eUR0Q25iYnZG
LTlTbzcwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGpp+TAN
BgkqhkiG9w0BAQsFAAOCAQEAky/bfyU05coXjAX5NOiBRTbnwtwzwlvMkrXeyTSe
r+jv78iSUKlr5Jbi9z96fYsXae+IocNoAOuSKxXsZHHLRbBlVsqngtyIrijcCVG+
MblsYxy4xqW9GDaQUAZ5jQJMKp/n9AyF69UKeVLM3/PFjcZJYj0wuoMyNof9FChu
5HcRM8CeOTmtDA0VTsv4/Z74+UE9J8GZ9N2yGnvAVxkQ+oFOpAWpPsap6Y2T/Gh6
N8OTv/p/vvsKFNgU1jQtDThz0uA0vug6PE5AmjI3yaLjQxsZf9QPva39Zbo/eaG5
rL++t95SZyRwYGCE+9Cl0nmOxIg5ElIEwEJ39KYSAAhCPQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:30 2025 by rpki-client