Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/zBcC_CEICp3ljsMuQTc_nXKK4R4.roa
File: zBcC_CEICp3ljsMuQTc_nXKK4R4.roa (raw, json)
Hash identifier: xD63CMlE2fHDiwuRTomNgmovBl+I7rxxiunBSLdzFqE=
Subject key identifier: CC:17:02:FC:21:08:0A:9D:E5:8E:C3:2E:41:37:3F:9D:72:8A:E1:1E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 181C
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zBcC_CEICp3ljsMuQTc_nXKK4R4.roa
Signing time: Mon 10 Feb 2025 14:07:35 +0000
ROA not before: Mon 10 Feb 2025 14:07:35 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 61.56.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6172 (0x181c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:35 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=CC1702FC21080A9DE58EC32E41373F9D728AE11E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:87:d0:de:e7:e6:83:b5:02:fa:ad:23:2f:73:
c6:aa:ce:38:5f:37:50:0a:eb:05:b3:eb:13:14:7a:
ab:08:39:44:be:c5:60:4e:fc:82:9c:23:4d:f9:aa:
06:d0:31:6d:db:87:5b:f1:19:61:c0:56:a4:f2:06:
c2:e6:2d:b6:38:8d:0c:c7:e6:fe:fa:31:8d:2a:44:
dd:23:2d:37:a0:ac:7e:cc:87:32:f6:70:df:12:5b:
5a:86:a6:ea:87:d5:15:aa:69:8f:55:d6:65:91:60:
80:61:5c:4a:62:92:93:3e:31:8b:29:d2:cd:61:04:
43:ae:21:f7:19:d0:5b:54:9a:71:2a:0d:cc:56:ec:
eb:36:26:9b:af:1c:15:29:63:ae:08:76:9a:4b:27:
99:a1:d4:a4:11:82:5a:14:fd:39:f1:9a:4b:29:a3:
5a:a1:51:9c:b1:a7:6f:be:8a:b4:c8:66:dd:8a:f7:
4a:57:49:58:f4:f1:47:fb:8c:ba:54:32:9f:8c:68:
e5:61:a3:9c:e7:16:83:82:d4:89:ad:3e:4c:ea:cf:
4e:72:c8:c0:03:67:e9:f4:25:34:9a:a7:1e:87:8e:
93:c5:7e:4f:9d:c3:11:b7:b6:44:f3:86:7e:88:e2:
8b:c4:04:2a:b3:2f:52:02:38:a4:63:b4:6d:37:81:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:17:02:FC:21:08:0A:9D:E5:8E:C3:2E:41:37:3F:9D:72:8A:E1:1E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/zBcC_CEICp3ljsMuQTc_nXKK4R4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.192.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:ab:d8:f7:11:36:5c:74:10:af:0f:a1:4e:7a:4c:13:04:c0:
fa:2f:ed:70:4f:1f:df:1e:2e:5c:d9:5e:bb:dd:f7:b5:b7:6e:
bf:2c:ce:d9:97:f8:d5:30:34:33:84:14:fd:8f:71:cb:1f:03:
6c:20:6b:9f:eb:ed:78:eb:1f:df:af:31:74:d8:e2:69:d3:22:
53:ba:a4:cd:50:db:3d:af:95:3b:85:7e:c0:43:49:c0:e3:a1:
f9:0c:94:43:37:bb:0b:aa:1f:a6:07:b4:66:e2:60:bc:db:5f:
66:f1:d7:ab:c3:17:57:0b:25:1e:7e:a2:2b:10:2e:2f:86:6c:
69:82:e5:e1:35:09:9d:b4:77:2d:e0:c1:7e:ae:81:83:9f:1b:
67:ee:ff:fb:ca:89:d0:33:6e:7c:ae:59:95:75:05:aa:f6:f9:
9e:38:bf:fa:6e:bd:c5:90:ee:c0:7e:3d:b5:98:b0:a1:f6:8f:
de:41:12:08:59:ee:e8:1f:7e:f7:24:ea:41:9b:c1:89:f5:4a:
4a:25:08:14:00:a2:f2:4a:6c:80:1f:08:7c:b0:51:e3:a5:8b:
ef:34:e9:c6:31:f6:21:0c:12:72:8d:3a:db:ab:90:9b:91:94:
fe:5e:17:37:a7:1b:9b:a0:eb:00:30:e6:9b:d9:4d:9e:c2:e5:
43:ab:26:66
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICGBwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3MzVaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKENDMTcwMkZDMjEwODBB
OURFNThFQzMyRTQxMzczRjlENzI4QUUxMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIh9De5+aDtQL6rSMvc8aqzjhfN1AK6wWz6xMUeqsIOUS+xWBO
/IKcI035qgbQMW3bh1vxGWHAVqTyBsLmLbY4jQzH5v76MY0qRN0jLTegrH7MhzL2
cN8SW1qGpuqH1RWqaY9V1mWRYIBhXEpikpM+MYsp0s1hBEOuIfcZ0FtUmnEqDcxW
7Os2JpuvHBUpY64IdppLJ5mh1KQRgloU/Tnxmkspo1qhUZyxp2++irTIZt2K90pX
SVj08Uf7jLpUMp+MaOVho5znFoOC1ImtPkzqz05yyMADZ+n0JTSapx6HjpPFfk+d
wxG3tkTzhn6I4ovEBCqzL1ICOKRjtG03gWgXAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUzBcC/CEICp3ljsMuQTc/nXKK4R4wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvekJjQ19DRUlDcDNsanNNdVFUY19u
WEtLNFI0LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBT04wDAN
BgkqhkiG9w0BAQsFAAOCAQEAjqvY9xE2XHQQrw+hTnpMEwTA+i/tcE8f3x4uXNle
u933tbduvyzO2Zf41TA0M4QU/Y9xyx8DbCBrn+vteOsf368xdNjiadMiU7qkzVDb
Pa+VO4V+wENJwOOh+QyUQze7C6ofpge0ZuJgvNtfZvHXq8MXVwslHn6iKxAuL4Zs
aYLl4TUJnbR3LeDBfq6Bg58bZ+7/+8qJ0DNufK5ZlXUFqvb5nji/+m69xZDuwH49
tZiwofaP3kESCFnu6B9+9yTqQZvBifVKSiUIFACi8kpsgB8IfLBR46WL7zTpxjH2
IQwSco0626uQm5GU/l4XN6cbm6DrADDmm9lNnsLlQ6smZg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:00:59 2025 by rpki-client