Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/GC-rmuBJ36xvuPkBYqX55dC5aE8.roa
File: GC-rmuBJ36xvuPkBYqX55dC5aE8.roa (raw, json)
Hash identifier: OJc/vvB62sq1uw6fdLiSJBm2KZ+zo2o6NxQzKGME4KE=
Subject key identifier: 18:2F:AB:9A:E0:49:DF:AC:6F:B8:F9:01:62:A5:F9:E5:D0:B9:68:4F
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5987
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/GC-rmuBJ36xvuPkBYqX55dC5aE8.roa
Signing time: Mon 10 Feb 2025 14:10:36 +0000
ROA not before: Mon 10 Feb 2025 14:10:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 43.227.24.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22919 (0x5987)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Feb 10 14:10:36 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=182FAB9AE049DFAC6FB8F90162A5F9E5D0B9684F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b8:e6:28:63:9e:0c:ad:73:2e:f2:28:14:f6:
8f:de:4d:86:4e:bb:a4:2a:22:de:1a:3f:fa:36:d1:
ea:2d:14:e7:84:4e:b9:36:d5:cd:4e:55:6b:89:a6:
42:c9:39:53:d6:b7:46:a4:84:e9:3b:fc:51:61:9e:
6b:03:d8:9f:99:ad:24:54:b6:b4:e5:9e:33:f5:ff:
6f:f9:c2:47:8e:01:3e:dd:a7:cb:9e:a5:a0:2e:c4:
93:99:8c:d2:4c:dd:ea:14:75:34:8d:0a:ce:e8:25:
26:58:7a:75:ee:78:d5:3c:18:30:99:47:05:09:1f:
b5:ff:fa:4e:00:33:b5:95:2d:d0:48:da:ba:e7:fc:
15:7e:f8:63:32:bc:58:44:b9:c4:1d:3f:4e:a3:03:
8a:4b:0b:e4:26:f6:d3:fd:fb:d7:1f:44:5e:6b:92:
eb:d0:81:77:7e:c0:84:43:2e:d5:aa:b4:fe:5d:a8:
b2:03:c0:ed:17:58:a9:08:f2:7a:e2:24:68:45:25:
dc:f6:33:3e:c1:d8:91:dc:34:cf:3a:74:58:e5:c7:
7a:18:49:0a:32:7c:93:c9:93:4b:b8:a6:4c:a3:a3:
da:70:07:97:b5:16:69:39:0b:0e:3a:68:38:74:aa:
3c:fd:2b:2a:83:61:50:40:6c:8e:15:a5:91:79:72:
4a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2F:AB:9A:E0:49:DF:AC:6F:B8:F9:01:62:A5:F9:E5:D0:B9:68:4F
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/GC-rmuBJ36xvuPkBYqX55dC5aE8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.227.24.0/22
Signature Algorithm: sha256WithRSAEncryption
83:e9:4d:37:05:a3:a1:78:e5:e7:8e:24:d0:16:d7:43:32:6d:
99:51:72:fb:e6:c9:a8:d2:f7:c6:ec:b4:9e:c2:88:39:d6:69:
a0:b7:f1:ff:1f:d0:26:19:d7:e7:a9:f6:79:19:2c:59:58:b2:
7e:95:b5:f3:86:de:8b:8c:14:eb:0b:9f:2c:60:e6:95:6e:bc:
d7:63:5a:c3:64:de:99:79:ad:08:03:37:2d:16:16:a6:37:c5:
80:98:1e:a5:fd:34:72:ce:7c:4a:3d:6a:73:39:83:de:75:df:
ab:3e:e3:a0:e6:1a:a2:16:d0:66:42:5a:44:32:fb:ea:42:7d:
c2:d6:ba:f4:c5:8f:e8:5c:11:54:75:be:9e:6f:22:c9:12:34:
a1:ec:b2:44:cc:19:fb:1b:b6:03:48:ec:bc:64:03:37:d2:ce:
d4:54:8b:74:43:32:d6:7d:8d:88:ec:5c:be:c1:a5:a7:5d:72:
10:3b:79:1c:82:5f:00:74:e4:c1:9d:e9:17:f7:1c:b9:f0:f4:
07:90:d7:38:cf:47:38:c2:06:cf:0d:76:4a:05:34:67:2e:76:
5e:41:4c:a4:4a:0c:e2:e8:64:32:48:62:cb:b7:52:9e:0f:31:
14:60:68:f6:58:3a:0c:65:09:fa:81:25:74:11:35:69:81:db:
4f:79:85:64
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICWYcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz
MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNTAyMTAx
NDEwMzZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDE4MkZBQjlBRTA0OURG
QUM2RkI4RjkwMTYyQTVGOUU1RDBCOTY4NEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnuOYoY54MrXMu8igU9o/eTYZOu6QqIt4aP/o20eotFOeETrk2
1c1OVWuJpkLJOVPWt0akhOk7/FFhnmsD2J+ZrSRUtrTlnjP1/2/5wkeOAT7dp8ue
paAuxJOZjNJM3eoUdTSNCs7oJSZYenXueNU8GDCZRwUJH7X/+k4AM7WVLdBI2rrn
/BV++GMyvFhEucQdP06jA4pLC+Qm9tP9+9cfRF5rkuvQgXd+wIRDLtWqtP5dqLID
wO0XWKkI8nriJGhFJdz2Mz7B2JHcNM86dFjlx3oYSQoyfJPJk0u4pkyjo9pwB5e1
Fmk5Cw46aDh0qjz9KyqDYVBAbI4VpZF5ckpvAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUGC+rmuBJ36xvuPkBYqX55dC5aE8wHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv
eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU
Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvR0Mtcm11QkozNnh2dVBr
QllxWDU1ZEM1YUU4LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AivjGDANBgkqhkiG9w0BAQsFAAOCAQEAg+lNNwWjoXjl544k0BbXQzJtmVFy++bJ
qNL3xuy0nsKIOdZpoLfx/x/QJhnX56n2eRksWViyfpW184bei4wU6wufLGDmlW68
12Naw2TemXmtCAM3LRYWpjfFgJgepf00cs58Sj1qczmD3nXfqz7joOYaohbQZkJa
RDL76kJ9wta69MWP6FwRVHW+nm8iyRI0oeyyRMwZ+xu2A0jsvGQDN9LO1FSLdEMy
1n2NiOxcvsGlp11yEDt5HIJfAHTkwZ3pF/ccufD0B5DXOM9HOMIGzw12SgU0Zy52
XkFMpEoM4uhkMkhiy7dSng8xFGBo9lg6DGUJ+oEldBE1aYHbT3mFZA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:25 2025 by rpki-client