Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/PED-MbIJL6Ckb7xztSKjj_6IxOA.roa
File: PED-MbIJL6Ckb7xztSKjj_6IxOA.roa (raw, json)
Hash identifier: 8eP/JsbRzDwvPwzbA2QbCK15zjMRABNoztQHWFRsMF4=
Subject key identifier: 3C:40:FE:31:B2:09:2F:A0:A4:6F:BC:73:B5:22:A3:8F:FE:88:C4:E0
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 182B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PED-MbIJL6Ckb7xztSKjj_6IxOA.roa
Signing time: Mon 10 Feb 2025 14:07:39 +0000
ROA not before: Mon 10 Feb 2025 14:07:39 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 112.105.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6187 (0x182b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:39 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=3C40FE31B2092FA0A46FBC73B522A38FFE88C4E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:43:27:3d:95:a7:9d:a1:2f:87:c4:d0:01:
fc:56:99:8d:0f:c8:06:55:3a:34:31:30:f8:88:b7:
67:00:b7:e4:0f:af:b4:06:cd:8d:73:8f:da:54:25:
d4:f3:e4:07:fe:f5:f3:da:9a:95:02:a5:f5:57:ab:
51:f5:a4:10:71:09:ef:04:00:ba:77:2c:40:af:48:
34:80:50:be:2f:1f:48:40:71:af:59:de:f3:cc:2f:
76:cf:09:86:ce:f1:e9:0f:61:23:fc:3f:a9:61:ee:
04:11:22:39:a4:f5:cd:93:7b:03:d1:a3:53:de:95:
73:f4:37:81:2d:d6:44:1d:4d:c4:ad:e8:01:24:1f:
54:26:23:5b:ec:a0:58:7e:ab:47:08:1c:12:ac:dc:
a1:2b:5e:05:ab:28:6d:73:fa:cf:b5:6a:5e:c2:4c:
b6:06:05:30:7f:18:aa:b4:5c:ff:f7:a1:42:c7:7d:
dd:04:0a:fd:bb:0d:3e:d3:47:48:4a:33:cf:9c:4d:
e6:cb:f5:ae:51:21:b8:d4:26:9e:3e:c4:de:6b:60:
cb:98:6e:b9:19:7a:b4:d9:62:be:bf:45:88:ad:8c:
63:6e:1f:ad:d9:d3:50:e6:12:42:45:7a:25:d8:6f:
f6:42:7c:d4:05:7c:18:96:fc:e1:df:89:bd:e8:88:
79:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:40:FE:31:B2:09:2F:A0:A4:6F:BC:73:B5:22:A3:8F:FE:88:C4:E0
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/PED-MbIJL6Ckb7xztSKjj_6IxOA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:ec:5e:b0:d8:ab:8b:7c:20:ca:90:5b:19:ab:69:80:4d:4d:
d9:c5:32:d8:ee:d0:39:0d:15:ba:bd:0a:7d:17:d9:1e:bc:7c:
b5:1c:0f:6c:2a:71:d7:6c:95:b0:f6:57:1d:da:5c:8a:5d:07:
de:15:6c:b8:d6:28:7f:4c:a7:6f:55:a8:da:87:5e:0c:63:96:
b6:a4:03:ff:29:70:81:9a:10:4e:02:50:97:12:62:02:e2:86:
ec:d6:bc:df:a6:33:94:4e:a8:2b:b2:85:33:27:7e:59:a6:1f:
c3:76:c8:d6:bd:36:5d:80:87:22:71:53:ef:c7:d2:86:fd:78:
bb:82:31:1d:38:ee:b9:37:d7:26:ec:ba:b5:87:19:4e:63:b2:
f8:49:19:ea:69:77:cb:6f:5e:68:1d:b5:e2:2c:4a:8b:ab:70:
55:0d:1d:b8:f4:e4:43:db:b4:48:9c:f4:5a:37:33:a8:ff:ea:
c3:5a:a8:46:8f:3e:43:c7:2a:36:30:49:ce:bf:3b:b4:e3:50:
37:81:d8:84:b6:43:57:30:3d:6a:92:cb:bb:aa:e9:25:21:8b:
50:75:e8:27:57:d8:eb:36:a2:b2:dd:5a:22:67:76:fd:15:45:
10:14:c3:04:68:c4:86:6f:82:6b:19:74:42:d3:63:ea:f0:60:
bb:86:79:a6
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICGCswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3MzlaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDNDNDBGRTMxQjIwOTJG
QTBBNDZGQkM3M0I1MjJBMzhGRkU4OEM0RTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5OEMnPZWnnaEvh8TQAfxWmY0PyAZVOjQxMPiIt2cAt+QPr7QG
zY1zj9pUJdTz5Af+9fPampUCpfVXq1H1pBBxCe8EALp3LECvSDSAUL4vH0hAca9Z
3vPML3bPCYbO8ekPYSP8P6lh7gQRIjmk9c2TewPRo1PelXP0N4Et1kQdTcSt6AEk
H1QmI1vsoFh+q0cIHBKs3KErXgWrKG1z+s+1al7CTLYGBTB/GKq0XP/3oULHfd0E
Cv27DT7TR0hKM8+cTebL9a5RIbjUJp4+xN5rYMuYbrkZerTZYr6/RYitjGNuH63Z
01DmEkJFeiXYb/ZCfNQFfBiW/OHfib3oiHlvAgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUPED+MbIJL6Ckb7xztSKjj/6IxOAwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvUEVELU1iSUpMNkNrYjd4enRTS2pq
XzZJeE9BLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAHBpMA0G
CSqGSIb3DQEBCwUAA4IBAQCK7F6w2KuLfCDKkFsZq2mATU3ZxTLY7tA5DRW6vQp9
F9kevHy1HA9sKnHXbJWw9lcd2lyKXQfeFWy41ih/TKdvVajah14MY5a2pAP/KXCB
mhBOAlCXEmIC4obs1rzfpjOUTqgrsoUzJ35Zph/DdsjWvTZdgIcicVPvx9KG/Xi7
gjEdOO65N9cm7Lq1hxlOY7L4SRnqaXfLb15oHbXiLEqLq3BVDR249ORD27RInPRa
NzOo/+rDWqhGjz5Dxyo2MEnOvzu041A3gdiEtkNXMD1qksu7quklIYtQdegnV9jr
NqKy3VoiZ3b9FUUQFMMEaMSGb4JrGXRC02Pq8GC7hnmm
-----END CERTIFICATE-----
Generated at Mon Apr 7 11:40:29 2025 by rpki-client