Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/s6UMVpnDH6Qb3a-tWtmB_qz8dRQ.roa
File: s6UMVpnDH6Qb3a-tWtmB_qz8dRQ.roa (raw, json)
Hash identifier: Zl5rTY6CbXgU6DlE2vFM5ACpuWPSUIEM46+KIgaWpVA=
Subject key identifier: B3:A5:0C:56:99:C3:1F:A4:1B:DD:AF:AD:5A:D9:81:FE:AC:FC:75:14
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10C5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s6UMVpnDH6Qb3a-tWtmB_qz8dRQ.roa
Signing time: Wed 01 Feb 2023 10:29:01 +0000
ROA not before: Wed 01 Feb 2023 10:29:01 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 220.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4293 (0x10c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:29:01 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=B3A50C5699C31FA41BDDAFAD5AD981FEACFC7514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:e4:e2:83:0c:2f:13:57:4a:69:f1:8b:03:
6e:09:4a:f8:15:2e:5e:6c:21:35:cb:c1:12:9c:d7:
06:14:17:0d:20:10:14:62:3f:2b:dc:f8:c9:79:6f:
ec:76:d9:76:2d:40:0a:d1:48:6f:6b:88:c3:10:24:
9a:05:bd:59:89:dc:5f:30:e9:1c:4c:c5:3b:1e:de:
2c:5e:10:47:1e:c3:35:a7:0d:14:88:94:0a:d7:5a:
8d:01:9a:c2:56:40:7a:11:1d:6b:fa:f4:d7:d7:fd:
57:ba:62:43:fc:b2:12:f4:68:49:e2:90:f6:a7:eb:
35:58:1f:e0:72:c4:7e:d0:7a:3b:4b:57:84:18:6e:
7f:aa:c2:06:42:6e:f4:ca:bf:1a:21:6e:e4:20:7c:
e0:48:8e:d1:df:85:ef:74:f2:d9:b1:dd:0a:c2:72:
85:ca:16:43:61:67:e0:e3:cf:19:2b:16:c8:ca:5c:
2c:49:5d:f7:6c:27:b0:1d:94:87:85:ca:5e:e3:95:
a9:70:93:0e:af:0f:23:bc:35:b5:1e:5c:2f:d3:e3:
aa:cf:b3:4a:f6:9e:90:c0:ec:e0:d8:71:f0:6c:95:
05:d4:4d:fb:b7:0b:e3:c8:bb:7f:d2:59:b5:8a:a0:
43:8c:34:52:93:e7:5e:d0:5b:ab:e0:3d:be:95:2a:
f5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:0C:56:99:C3:1F:A4:1B:DD:AF:AD:5A:D9:81:FE:AC:FC:75:14
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/s6UMVpnDH6Qb3a-tWtmB_qz8dRQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3d:0b:ca:2a:66:21:04:d7:ca:26:97:8d:4c:aa:be:d4:5b:cf:
76:8c:44:87:15:43:05:c6:18:32:cb:0e:23:ef:4b:a7:33:8a:
2d:b6:31:10:1d:14:0f:45:6a:2a:25:69:0c:17:66:f9:14:b1:
92:4f:69:b1:cd:22:52:70:68:ca:48:c1:e5:3b:73:88:c7:9a:
21:0b:6d:71:9a:91:62:49:fd:48:11:ec:db:7b:a0:86:7e:f2:
c4:c1:12:98:4c:cf:cc:19:74:1c:6a:97:04:48:da:37:98:03:
cd:d7:c0:d3:c4:59:99:2c:39:08:11:18:9c:0e:bf:14:77:77:
6f:7c:98:79:f6:e8:0c:f7:f2:7a:ec:79:d2:36:10:e3:91:04:
f6:ef:72:55:ad:ef:1b:38:06:11:d0:f2:21:b8:32:91:22:bb:
95:7c:39:cb:e1:81:7f:b5:2a:13:9b:b6:82:7b:0b:d1:3c:bd:
51:70:01:6f:4f:9f:5c:40:20:ae:24:50:f6:39:7d:fb:38:bf:
ec:73:b0:09:92:82:fd:b3:20:c8:06:17:a7:04:1e:06:8a:14:
8d:d7:bc:b3:12:6a:d6:83:16:f7:05:69:9a:66:cb:2a:2b:16:
4c:45:f1:2d:25:43:90:d7:94:40:14:3e:86:76:26:88:92:fa:
db:2c:4a:61
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICEMUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMzAyMDEx
MDI5MDFaFw0yMzA5MDYwMzAwMzVaMDMxMTAvBgNVBAMTKEIzQTUwQzU2OTlDMzFG
QTQxQkREQUZBRDVBRDk4MUZFQUNGQzc1MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCiheTigwwvE1dKafGLA24JSvgVLl5sITXLwRKc1wYUFw0gEBRi
Pyvc+Ml5b+x22XYtQArRSG9riMMQJJoFvVmJ3F8w6RxMxTse3ixeEEcewzWnDRSI
lArXWo0BmsJWQHoRHWv69NfX/Ve6YkP8shL0aEnikPan6zVYH+ByxH7QejtLV4QY
bn+qwgZCbvTKvxohbuQgfOBIjtHfhe908tmx3QrCcoXKFkNhZ+DjzxkrFsjKXCxJ
XfdsJ7AdlIeFyl7jlalwkw6vDyO8NbUeXC/T46rPs0r2npDA7ODYcfBslQXUTfu3
C+PIu3/SWbWKoEOMNFKT517QW6vgPb6VKvXfAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUs6UMVpnDH6Qb3a+tWtmB/qz8dRQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvczZVTVZwbkRINlFiM2EtdFd0bUJf
cXo4ZFJRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANzkMA0G
CSqGSIb3DQEBCwUAA4IBAQA9C8oqZiEE18oml41Mqr7UW892jESHFUMFxhgyyw4j
70unM4ottjEQHRQPRWoqJWkMF2b5FLGST2mxzSJScGjKSMHlO3OIx5ohC21xmpFi
Sf1IEezbe6CGfvLEwRKYTM/MGXQcapcESNo3mAPN18DTxFmZLDkIERicDr8Ud3dv
fJh59ugM9/J67HnSNhDjkQT273JVre8bOAYR0PIhuDKRIruVfDnL4YF/tSoTm7aC
ewvRPL1RcAFvT59cQCCuJFD2OX37OL/sc7AJkoL9syDIBhenBB4GihSN17yzEmrW
gxb3BWmaZssqKxZMRfEtJUOQ15RAFD6GdiaIkvrbLEph
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:36 2025 by rpki-client