Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sIvPzW63HhQTNCiRRc_KtuU_BV0.roa
File: sIvPzW63HhQTNCiRRc_KtuU_BV0.roa (raw, json)
Hash identifier: bonhmO17MQ6ldx6YJIMvpBWnjXwEOS4+2Y9Jnpv1qSU=
Subject key identifier: B0:8B:CF:CD:6E:B7:1E:14:13:34:28:91:45:CF:CA:B6:E5:3F:05:5D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17CA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sIvPzW63HhQTNCiRRc_KtuU_BV0.roa
Signing time: Mon 10 Feb 2025 14:07:15 +0000
ROA not before: Mon 10 Feb 2025 14:07:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 60.245.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6090 (0x17ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B08BCFCD6EB71E141334289145CFCAB6E53F055D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:85:84:fb:a4:39:68:50:55:78:55:94:f0:
95:2d:63:d8:ac:28:0a:5d:cb:c9:cf:f8:eb:3e:30:
0f:9b:e2:c7:a6:e1:bd:06:40:39:55:de:4a:c4:61:
7c:23:b0:0b:3f:d1:75:1e:2a:17:21:35:6e:d4:ce:
cc:7f:fc:97:0d:68:1c:03:de:bc:76:72:a5:ed:e4:
8c:29:5a:6e:8b:37:42:00:5b:f9:bf:0e:03:95:86:
0e:5e:20:64:d4:a0:38:0a:4d:21:5d:77:bb:14:40:
e8:d0:6d:81:e8:95:c4:27:6b:e1:8d:dc:1b:6a:d3:
07:bb:49:24:39:e1:c6:4a:48:1c:9d:e8:c4:57:cb:
9d:43:c4:4a:e9:99:36:8b:7c:57:81:f9:8b:7a:f1:
6b:26:9a:9e:8d:ad:7f:63:f3:85:0a:c6:f4:c4:01:
3a:26:fc:e1:9b:43:07:60:71:56:a1:fc:97:d5:35:
b2:b1:0e:b8:2c:d1:75:5c:8c:93:42:f7:f8:c2:cc:
db:4d:87:c2:42:c0:9c:e1:f6:5b:46:b2:7d:e5:aa:
f6:11:d3:76:fc:b4:08:6a:30:77:f2:9b:1d:73:75:
4b:95:ac:de:32:80:4f:b2:63:0b:78:00:f7:44:aa:
a0:e5:5c:4f:c1:db:15:50:d1:87:66:a3:b3:21:0e:
03:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8B:CF:CD:6E:B7:1E:14:13:34:28:91:45:CF:CA:B6:E5:3F:05:5D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sIvPzW63HhQTNCiRRc_KtuU_BV0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.64.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:3f:37:47:82:48:d1:07:bd:bd:1e:66:2f:84:0a:43:ab:95:
15:91:1f:06:1e:c4:c8:07:e2:cd:12:e3:4c:95:fd:f8:1a:88:
0b:54:7d:eb:b9:5b:ec:e4:72:85:eb:41:f9:b5:bf:27:a6:9f:
a5:d3:34:c1:70:82:c5:99:36:09:21:9c:bd:34:26:72:e3:89:
a2:e0:3a:8e:03:60:fa:ad:3f:27:5e:7e:c6:b3:f4:22:11:1d:
19:43:86:94:1a:44:be:d8:92:2f:cb:80:9a:2d:28:dd:ec:fd:
0a:fb:80:80:d6:90:4a:b6:a4:34:0f:bd:a5:a3:09:71:be:9b:
6d:7b:78:23:e2:01:1c:a1:76:bd:a2:f7:09:d6:ad:71:0b:14:
2f:57:7b:af:2a:e2:ec:b0:b3:03:95:d5:95:75:89:c3:cd:46:
74:bd:b2:e4:28:65:8c:c4:9c:c6:94:f5:2b:64:51:10:27:07:
8d:2e:e2:c1:46:39:60:7b:b1:a2:e8:5b:27:f3:41:9d:aa:5e:
ab:fd:f2:6b:09:84:5f:bd:8b:9c:1b:b3:29:72:34:a5:ba:28:
59:f2:41:16:f7:d6:6a:73:e5:1a:44:38:c9:5a:e3:94:a0:f9:
14:2a:cb:6f:b6:47:2d:11:7f:61:18:a4:b1:99:ba:c6:ba:47:
5c:ad:af:e5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICF8owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3MTVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEIwOEJDRkNENkVCNzFF
MTQxMzM0Mjg5MTQ1Q0ZDQUI2RTUzRjA1NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBHYWE+6Q5aFBVeFWU8JUtY9isKApdy8nP+Os+MA+b4sem4b0G
QDlV3krEYXwjsAs/0XUeKhchNW7Uzsx//JcNaBwD3rx2cqXt5IwpWm6LN0IAW/m/
DgOVhg5eIGTUoDgKTSFdd7sUQOjQbYHolcQna+GN3Btq0we7SSQ54cZKSByd6MRX
y51DxErpmTaLfFeB+Yt68Wsmmp6NrX9j84UKxvTEATom/OGbQwdgcVah/JfVNbKx
Drgs0XVcjJNC9/jCzNtNh8JCwJzh9ltGsn3lqvYR03b8tAhqMHfymx1zdUuVrN4y
gE+yYwt4APdEqqDlXE/B2xVQ0Ydmo7MhDgMfAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUsIvPzW63HhQTNCiRRc/KtuU/BV0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvc0l2UHpXNjNIaFFUTkNpUlJjX0t0
dVVfQlYwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBTz1QDAN
BgkqhkiG9w0BAQsFAAOCAQEAez83R4JI0Qe9vR5mL4QKQ6uVFZEfBh7EyAfizRLj
TJX9+BqIC1R967lb7ORyhetB+bW/J6afpdM0wXCCxZk2CSGcvTQmcuOJouA6jgNg
+q0/J15+xrP0IhEdGUOGlBpEvtiSL8uAmi0o3ez9CvuAgNaQSrakNA+9paMJcb6b
bXt4I+IBHKF2vaL3CdatcQsUL1d7ryri7LCzA5XVlXWJw81GdL2y5ChljMScxpT1
K2RRECcHjS7iwUY5YHuxouhbJ/NBnapeq/3yawmEX72LnBuzKXI0pbooWfJBFvfW
anPlGkQ4yVrjlKD5FCrLb7ZHLRF/YRiksZm6xrpHXK2v5Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:33 2025 by rpki-client