Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/t1DywcujBAu1qRErfWFV458ksDQ.roa
File: t1DywcujBAu1qRErfWFV458ksDQ.roa (raw, json)
Hash identifier: 0vQmzVDmUI2W/dfWijtnCehj/1mrReBtpDe/hN5UuvU=
Subject key identifier: B7:50:F2:C1:CB:A3:04:0B:B5:A9:11:2B:7D:61:55:E3:9F:24:B0:34
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 16C6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t1DywcujBAu1qRErfWFV458ksDQ.roa
Signing time: Mon 26 Aug 2024 05:22:36 +0000
ROA not before: Mon 26 Aug 2024 05:22:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131602
IP address blocks: 123.205.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5830 (0x16c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:36 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=B750F2C1CBA3040BB5A9112B7D6155E39F24B034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:33:5f:3b:d7:19:36:3c:6e:5d:40:01:a3:80:
d4:90:e2:b5:1a:a1:c3:c8:2c:aa:ba:10:78:39:03:
e2:b0:a4:8b:a8:8e:59:4b:f1:10:1a:7a:0d:ea:89:
7d:db:0f:fc:1f:88:6a:bd:5f:11:59:ba:87:7a:9e:
18:49:3d:28:98:1d:81:dc:b5:b7:83:7b:e6:89:dc:
8f:61:3e:6f:5e:34:bc:94:26:ff:79:8b:94:35:c1:
ba:31:ee:e2:13:18:94:27:de:bf:21:04:28:26:18:
8d:94:82:17:42:a7:74:36:f5:5a:89:6c:4d:48:96:
ff:40:e1:40:60:18:36:fb:23:0e:45:97:60:77:6b:
8f:0f:92:0f:c8:5f:85:11:56:2a:a1:b6:c0:97:d0:
30:30:e1:4b:05:58:21:1e:aa:83:83:04:e2:ad:e4:
42:5f:72:6f:b6:54:6f:ee:45:58:22:f5:0e:92:1e:
56:3e:04:1a:23:5f:0a:a3:fc:86:cf:60:c1:8b:f9:
04:ed:1f:6e:01:20:ba:79:6f:1f:76:9f:fd:f8:a9:
3e:b8:6a:b4:92:94:75:f3:b4:03:ab:34:a3:09:49:
7e:4a:9c:5e:8e:ee:ca:34:bc:d6:56:09:8c:16:1d:
d8:9f:18:99:12:58:1e:6e:2d:e0:77:40:7c:54:d3:
13:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:50:F2:C1:CB:A3:04:0B:B5:A9:11:2B:7D:61:55:E3:9F:24:B0:34
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/t1DywcujBAu1qRErfWFV458ksDQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:7e:e7:47:8b:21:d8:a0:29:2d:e4:3a:14:92:2b:cc:67:9a:
2f:6d:bb:0e:20:ef:e1:5e:33:58:b6:c5:e0:da:68:95:43:1c:
a6:b5:70:bd:4f:a4:e3:42:d0:99:cd:03:04:36:2b:3f:90:10:
39:12:7c:ab:94:16:08:c7:36:28:68:87:4d:b2:fb:91:cb:68:
58:53:64:34:15:10:7e:ea:c8:89:4f:98:10:21:5c:70:d4:c0:
33:b8:2c:c7:3b:c3:97:5b:c3:6d:24:c1:32:3e:75:f6:6a:58:
3b:94:23:d2:25:de:6c:45:28:aa:e6:23:a4:d0:66:85:15:a6:
b9:d2:60:a6:f6:2e:eb:72:f7:54:17:55:37:3d:0a:03:dc:33:
e4:fd:d7:f9:d6:9f:6d:9d:7a:af:4e:d4:70:d1:28:3a:7d:ca:
f3:97:65:1e:04:9c:24:10:b3:05:02:27:0c:9b:2c:88:e4:9c:
20:74:ab:ac:51:9a:a2:ce:4f:6d:21:9e:0b:22:fd:1f:f7:3e:
08:58:39:a1:c5:71:09:3b:2f:db:cf:33:68:6d:1f:0a:eb:d3:
b6:45:75:59:64:14:2e:30:67:c8:50:cd:12:45:ce:02:54:93:
18:a2:b9:b1:99:3d:a7:13:b5:13:6e:e8:90:ec:b5:0e:1d:98:
17:93:eb:25
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICFsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNDA4MjYw
NTIyMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEI3NTBGMkMxQ0JBMzA0
MEJCNUE5MTEyQjdENjE1NUUzOUYyNEIwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2M1871xk2PG5dQAGjgNSQ4rUaocPILKq6EHg5A+KwpIuojllL
8RAaeg3qiX3bD/wfiGq9XxFZuod6nhhJPSiYHYHctbeDe+aJ3I9hPm9eNLyUJv95
i5Q1wbox7uITGJQn3r8hBCgmGI2UghdCp3Q29VqJbE1Ilv9A4UBgGDb7Iw5Fl2B3
a48Pkg/IX4URViqhtsCX0DAw4UsFWCEeqoODBOKt5EJfcm+2VG/uRVgi9Q6SHlY+
BBojXwqj/IbPYMGL+QTtH24BILp5bx92n/34qT64arSSlHXztAOrNKMJSX5KnF6O
7so0vNZWCYwWHdifGJkSWB5uLeB3QHxU0xMVAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUt1DywcujBAu1qRErfWFV458ksDQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvdDFEeXdjdWpCQXUxcVJFcmZXRlY0
NThrc0RRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBHvNgDAN
BgkqhkiG9w0BAQsFAAOCAQEAf37nR4sh2KApLeQ6FJIrzGeaL227DiDv4V4zWLbF
4NpolUMcprVwvU+k40LQmc0DBDYrP5AQORJ8q5QWCMc2KGiHTbL7kctoWFNkNBUQ
furIiU+YECFccNTAM7gsxzvDl1vDbSTBMj519mpYO5Qj0iXebEUoquYjpNBmhRWm
udJgpvYu63L3VBdVNz0KA9wz5P3X+dafbZ16r07UcNEoOn3K85dlHgScJBCzBQIn
DJssiOScIHSrrFGaos5PbSGeCyL9H/c+CFg5ocVxCTsv288zaG0fCuvTtkV1WWQU
LjBnyFDNEkXOAlSTGKK5sZk9pxO1E27okOy1Dh2YF5PrJQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:03 2025 by rpki-client