Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sAwYBy7xtTRRMKuSbeh7vWEy0Sc.roa
File: sAwYBy7xtTRRMKuSbeh7vWEy0Sc.roa (raw, json)
Hash identifier: TgTRuwN0taXnqvAjbmxPVDzXVP/dJc2SpLo9QLTUexM=
Subject key identifier: B0:0C:18:07:2E:F1:B5:34:51:30:AB:92:6D:E8:7B:BD:61:32:D1:27
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CE9
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sAwYBy7xtTRRMKuSbeh7vWEy0Sc.roa
Signing time: Sun 07 Feb 2021 11:45:53 +0000
ROA not before: Sun 07 Feb 2021 11:45:53 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 122.147.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3305 (0xce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:45:53 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=B00C18072EF1B5345130AB926DE87BBD6132D127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:37:c9:40:7b:f3:a5:82:5d:bd:a4:48:b6:38:
1e:6b:56:b4:c9:ae:1a:61:59:37:23:45:86:04:1f:
0d:55:1a:49:84:5f:08:42:61:46:85:66:8d:6d:71:
73:61:bc:9e:2e:cb:6c:ac:e9:51:ee:e1:4a:74:d8:
5e:0e:39:71:d6:b9:b3:31:74:63:69:1d:45:d7:5e:
89:4e:c3:c9:02:c2:0c:79:46:8c:dd:4a:90:8a:17:
1e:c4:96:14:d1:de:56:13:96:be:3d:ea:6e:04:7e:
cf:e6:72:17:d1:3b:2b:a7:a5:d8:bd:ea:11:1c:9b:
f5:79:7d:88:f4:47:08:a9:d9:3f:62:8e:7f:4b:12:
29:c6:c8:17:e7:71:00:72:3b:0e:78:40:57:61:a2:
14:b0:81:84:07:06:5a:30:af:21:08:ea:43:fe:59:
0f:a3:fe:7d:47:a2:7f:55:91:f2:e6:96:93:d6:9a:
ae:70:c0:11:c3:36:c1:3e:b2:98:cb:e1:3d:bd:7b:
b0:3c:ff:40:da:56:d0:b9:ca:18:57:8f:90:9c:01:
95:68:88:ad:60:71:19:5c:c4:2d:42:92:6d:a6:32:
ff:21:32:a2:ba:92:7d:f0:a9:1f:37:21:67:40:65:
81:4f:d0:f0:4a:32:07:be:67:9d:d9:db:ad:c1:63:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0C:18:07:2E:F1:B5:34:51:30:AB:92:6D:E8:7B:BD:61:32:D1:27
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sAwYBy7xtTRRMKuSbeh7vWEy0Sc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.176.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:b4:f6:ee:f0:67:2d:fb:0e:d1:ad:f8:9e:cc:94:d9:a7:4b:
df:1e:fe:04:56:72:04:eb:ab:cc:37:95:01:79:68:c8:7c:dc:
cd:7c:fb:2a:d0:75:32:57:a9:f9:e3:0a:e7:e3:be:87:3a:7e:
b8:5e:c1:10:1e:30:1e:ae:e8:75:c4:4f:89:38:a1:29:99:5e:
5c:14:57:b0:3c:1f:db:0c:d0:a4:44:a3:9f:4b:fa:f6:d5:a8:
06:67:0e:cd:ae:c4:0c:12:f4:04:b9:73:6d:50:b0:40:5d:33:
a5:75:9e:f3:e7:37:80:e4:92:57:23:9b:70:14:1a:b0:82:f5:
1d:4b:3c:3c:30:66:ac:3d:08:d9:cc:5e:27:fd:63:86:bf:0b:
62:cc:8b:9a:15:a3:51:60:25:6a:89:ed:74:c8:0b:18:64:b0:
ae:a1:e1:81:5a:f7:2d:fe:27:36:97:19:e3:7a:ea:b6:aa:06:
04:e1:70:2f:a3:3b:15:72:90:1b:10:07:85:42:5f:b9:12:32:
b6:fc:2d:9a:47:32:a5:cf:a0:a1:23:55:7f:dc:6c:f3:3a:80:
04:07:2f:fd:eb:22:df:2e:5d:6e:de:d8:b8:a0:f7:a1:c8:38:
45:5b:f1:56:70:f0:41:2a:2f:63:cf:27:03:31:3d:90:dc:9a:
50:2c:6a:05
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yMTAyMDcx
MTQ1NTNaFw0yMTA5MjkwOTUxMjNaMDMxMTAvBgNVBAMTKEIwMEMxODA3MkVGMUI1
MzQ1MTMwQUI5MjZERTg3QkJENjEzMkQxMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLN8lAe/Olgl29pEi2OB5rVrTJrhphWTcjRYYEHw1VGkmEXwhC
YUaFZo1tcXNhvJ4uy2ys6VHu4Up02F4OOXHWubMxdGNpHUXXXolOw8kCwgx5Rozd
SpCKFx7ElhTR3lYTlr496m4Efs/mchfROyunpdi96hEcm/V5fYj0Rwip2T9ijn9L
EinGyBfncQByOw54QFdhohSwgYQHBlowryEI6kP+WQ+j/n1Hon9VkfLmlpPWmq5w
wBHDNsE+spjL4T29e7A8/0DaVtC5yhhXj5CcAZVoiK1gcRlcxC1Ckm2mMv8hMqK6
kn3wqR83IWdAZYFP0PBKMge+Z53Z263BYztdAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUsAwYBy7xtTRRMKuSbeh7vWEy0ScwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc0F3WUJ5N3h0VFJSTUt1U2JlaDd2
V0V5MFNjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHqTsDAN
BgkqhkiG9w0BAQsFAAOCAQEAX7T27vBnLfsO0a34nsyU2adL3x7+BFZyBOurzDeV
AXloyHzczXz7KtB1Mlep+eMK5+O+hzp+uF7BEB4wHq7odcRPiTihKZleXBRXsDwf
2wzQpESjn0v69tWoBmcOza7EDBL0BLlzbVCwQF0zpXWe8+c3gOSSVyObcBQasIL1
HUs8PDBmrD0I2cxeJ/1jhr8LYsyLmhWjUWAlaontdMgLGGSwrqHhgVr3Lf4nNpcZ
43rqtqoGBOFwL6M7FXKQGxAHhUJfuRIytvwtmkcypc+goSNVf9xs8zqABAcv/esi
3y5dbt7YuKD3ocg4RVvxVnDwQSovY88nAzE9kNyaUCxqBQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:37 2025 by rpki-client