Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7sSlEDI9XiSOcJO9R9OGEd9qvXQ.roa
File: 7sSlEDI9XiSOcJO9R9OGEd9qvXQ.roa (raw, json)
Hash identifier: Gqs/mJ9PihVtY3tMEWPVRXnMa67ip4wwp9+IwzgF+1I=
Subject key identifier: EE:C4:A5:10:32:3D:5E:24:8E:70:93:BD:47:D3:86:11:DF:6A:BD:74
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1841
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7sSlEDI9XiSOcJO9R9OGEd9qvXQ.roa
Signing time: Mon 10 Feb 2025 14:07:44 +0000
ROA not before: Mon 10 Feb 2025 14:07:44 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 122.147.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6209 (0x1841)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:44 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EEC4A510323D5E248E7093BD47D38611DF6ABD74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:e6:b9:d6:af:30:a4:23:50:3e:e4:da:28:
e6:36:af:af:7b:d2:ef:54:ea:ac:34:73:01:24:13:
e9:ae:e7:31:27:15:5d:92:ee:4b:28:81:26:47:72:
ce:36:56:55:18:dd:d0:60:aa:aa:2b:01:ac:38:69:
96:11:6a:41:f9:2b:74:56:1d:9f:e6:bc:25:e6:d7:
eb:5d:a7:62:8d:f9:ab:4d:e7:1b:b6:d6:74:79:89:
ca:2b:2d:2f:21:c3:63:f4:4e:3c:59:0f:88:6e:06:
f9:82:86:db:5b:b9:9c:0e:72:e8:7e:a4:f6:4b:c0:
03:b8:c8:ce:8a:fd:48:7a:0a:18:e8:60:fa:f9:71:
ae:90:71:37:76:25:f4:45:43:86:2b:27:7b:4a:fd:
ac:ce:7f:2c:d2:7d:09:3e:f3:f0:8b:b8:61:49:bf:
e2:dc:9c:04:6a:b7:03:d1:15:2a:dc:01:de:fa:ff:
35:ca:1a:4a:f5:db:0c:fb:fa:9f:b2:32:0d:9a:ee:
93:62:ca:91:27:22:45:fd:da:44:5d:c6:1d:a2:5c:
4b:c3:99:c9:42:13:8a:1b:c9:ec:4f:ed:b5:c1:26:
9b:a3:03:f9:7d:62:c5:b1:b0:21:c6:ed:60:f2:0b:
37:6c:89:09:5d:40:4b:51:f5:35:18:35:a8:5f:c8:
19:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:A5:10:32:3D:5E:24:8E:70:93:BD:47:D3:86:11:DF:6A:BD:74
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7sSlEDI9XiSOcJO9R9OGEd9qvXQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.160.0/19
Signature Algorithm: sha256WithRSAEncryption
62:a4:cb:ce:95:65:91:e9:84:b4:5a:a7:d4:30:c8:2a:9e:54:
bc:68:63:1f:ae:cb:8e:de:c5:9f:33:66:27:b0:46:a1:79:69:
99:6a:c8:2e:67:c2:81:2e:f0:76:1b:c4:df:be:04:00:dc:d1:
da:b7:9e:1d:73:fa:8d:23:e4:64:6f:1e:6c:ea:4e:45:df:38:
14:5a:fd:c1:ca:ce:52:47:fc:14:0e:30:ca:d0:b0:e3:50:76:
42:11:44:25:b6:69:e3:d7:25:18:f0:16:56:38:d4:b4:fe:db:
2c:88:75:1d:c1:2a:60:7e:53:f0:c9:cd:20:0b:56:53:b6:0f:
43:a8:0b:1f:7f:b1:8d:ed:22:b1:5e:df:79:ed:18:83:dc:f5:
32:c5:3c:64:8d:d3:24:d9:2c:8c:6f:81:a1:e6:e8:10:c7:d2:
7f:8a:1a:1b:b0:9c:c3:80:e7:c8:da:ea:39:b2:b9:98:a7:28:
b3:6f:e5:20:d3:d3:46:e5:4e:c5:ee:55:d5:db:91:32:67:db:
63:11:11:71:12:d1:26:71:c9:a6:61:a6:b3:2b:81:a4:d0:15:
35:58:ef:3d:fc:f0:9e:1d:0c:35:ca:d3:f7:47:2b:f5:f1:f1:
09:68:9e:08:f0:48:ed:42:dc:4f:3c:ef:ae:17:19:6a:1f:2e:
1b:0f:39:9a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICGEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3NDRaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEVFQzRBNTEwMzIzRDVF
MjQ4RTcwOTNCRDQ3RDM4NjExREY2QUJENzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNPea51q8wpCNQPuTaKOY2r6970u9U6qw0cwEkE+mu5zEnFV2S
7ksogSZHcs42VlUY3dBgqqorAaw4aZYRakH5K3RWHZ/mvCXm1+tdp2KN+atN5xu2
1nR5icorLS8hw2P0TjxZD4huBvmChttbuZwOcuh+pPZLwAO4yM6K/Uh6ChjoYPr5
ca6QcTd2JfRFQ4YrJ3tK/azOfyzSfQk+8/CLuGFJv+LcnARqtwPRFSrcAd76/zXK
Gkr12wz7+p+yMg2a7pNiypEnIkX92kRdxh2iXEvDmclCE4obyexP7bXBJpujA/l9
YsWxsCHG7WDyCzdsiQldQEtR9TUYNahfyBkvAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQU7sSlEDI9XiSOcJO9R9OGEd9qvXQwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvN3NTbEVESTlYaVNPY0pPOVI5T0dF
ZDlxdlhRLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBXqToDAN
BgkqhkiG9w0BAQsFAAOCAQEAYqTLzpVlkemEtFqn1DDIKp5UvGhjH67Ljt7FnzNm
J7BGoXlpmWrILmfCgS7wdhvE374EANzR2reeHXP6jSPkZG8ebOpORd84FFr9wcrO
Ukf8FA4wytCw41B2QhFEJbZp49clGPAWVjjUtP7bLIh1HcEqYH5T8MnNIAtWU7YP
Q6gLH3+xje0isV7fee0Yg9z1MsU8ZI3TJNksjG+BoeboEMfSf4oaG7Ccw4DnyNrq
ObK5mKcos2/lINPTRuVOxe5V1duRMmfbYxERcRLRJnHJpmGmsyuBpNAVNVjvPfzw
nh0MNcrT90cr9fHxCWieCPBI7ULcTzzvrhcZah8uGw85mg==
-----END CERTIFICATE-----
Generated at Mon Jun 23 18:31:14 2025 by rpki-client