Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BVOTWIDPIH-7CnKXTlfYQN0l2yY.roa
File: BVOTWIDPIH-7CnKXTlfYQN0l2yY.roa (raw, json)
Hash identifier: HTLhRQLRB9kIPvtkdJ8tHrG8DhffwLKkuclszlecFeU=
Subject key identifier: 05:53:93:58:80:CF:20:7F:BB:0A:72:97:4E:57:D8:40:DD:25:DB:26
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 19E8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BVOTWIDPIH-7CnKXTlfYQN0l2yY.roa
Signing time: Fri 22 Aug 2025 08:53:30 +0000
ROA not before: Fri 22 Aug 2025 08:53:30 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 210.244.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6632 (0x19e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 22 08:53:30 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=0553935880CF207FBB0A72974E57D840DD25DB26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:52:f3:42:a7:57:0c:45:1d:ed:f0:5d:52:
94:e2:1e:8c:22:5b:92:52:94:d0:f5:09:25:a3:17:
c0:91:35:8b:5f:9c:69:62:08:38:ba:e7:45:ee:0b:
b8:bf:65:f0:5e:c1:b2:5d:ca:40:6b:7c:d5:d7:af:
a0:89:f3:f3:bd:45:07:e7:53:c0:f4:5f:4b:6f:e4:
e1:0c:2c:51:4a:2f:8b:b1:de:e5:91:46:af:c7:68:
e3:e9:ee:44:cb:d5:ff:62:ce:81:db:c4:27:83:38:
a6:f5:13:2e:71:cf:7a:b3:f2:e5:cb:38:80:89:bd:
97:94:89:f1:8d:bb:25:43:30:5f:a7:80:52:7b:56:
09:1e:42:70:38:eb:9d:80:7e:48:c0:80:23:6c:c3:
e4:45:53:bf:95:89:2d:03:82:33:67:0b:34:28:6b:
6b:77:7b:70:2e:83:f9:4a:4b:bb:41:88:31:af:25:
25:2b:c9:65:db:fc:0c:29:87:4b:a0:8a:5a:cb:1e:
6b:2d:fa:18:2f:75:39:62:41:d7:fc:49:8f:39:ff:
a9:00:2d:ad:e7:d2:34:0e:be:55:40:e7:60:90:12:
f3:ba:a3:97:45:28:54:38:d3:03:8b:75:17:3d:f4:
f4:84:be:ae:30:d2:68:3f:ca:85:59:e5:1f:44:a9:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:53:93:58:80:CF:20:7F:BB:0A:72:97:4E:57:D8:40:DD:25:DB:26
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BVOTWIDPIH-7CnKXTlfYQN0l2yY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.84.0/22
Signature Algorithm: sha256WithRSAEncryption
89:20:02:db:ea:95:3b:f9:5e:8d:f3:ef:a9:7d:fb:74:c5:cb:
4e:b9:cc:3d:ac:82:87:8c:21:f5:70:46:ce:6f:c1:7e:b7:12:
97:66:9f:b5:a0:02:5a:0f:3f:4f:ef:3b:e5:69:22:e1:76:94:
14:6c:4e:a5:b3:06:77:ff:b1:00:4a:8f:33:bf:5a:b3:e5:85:
c4:7a:5a:ff:5f:bc:3e:c1:e2:f4:02:8a:b9:b2:48:6a:6c:8b:
83:da:ca:78:74:63:f5:83:ed:21:f6:c9:32:60:01:06:79:08:
39:2b:11:5f:9a:ec:86:df:8a:89:2e:47:9b:e1:78:93:ce:18:
57:70:c4:72:19:a9:53:ed:cb:d1:47:aa:09:6a:6f:0a:1b:a6:
ec:b2:eb:04:c0:d6:15:45:68:6d:9c:2e:87:2c:c9:14:1f:4f:
3f:d9:0c:d3:fe:9d:15:ed:5f:4b:32:f1:7b:73:b8:42:80:ce:
e3:eb:da:be:73:52:ed:80:25:ae:75:22:95:14:13:28:06:32:
ac:99:94:e7:a6:0e:b4:39:66:6a:5b:5e:63:c5:03:9e:5c:01:
6c:c9:72:00:aa:1e:ca:30:53:85:d6:2b:ac:65:c8:b7:bc:5c:
65:8a:5e:87:cc:3e:74:b3:67:16:4e:89:94:ca:f9:92:3e:e3:
00:a1:3c:7a
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICGegwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw
ODUzMzBaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDA1NTM5MzU4ODBDRjIw
N0ZCQjBBNzI5NzRFNTdEODQwREQyNURCMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxtlLzQqdXDEUd7fBdUpTiHowiW5JSlND1CSWjF8CRNYtfnGli
CDi650XuC7i/ZfBewbJdykBrfNXXr6CJ8/O9RQfnU8D0X0tv5OEMLFFKL4ux3uWR
Rq/HaOPp7kTL1f9izoHbxCeDOKb1Ey5xz3qz8uXLOICJvZeUifGNuyVDMF+ngFJ7
VgkeQnA4652AfkjAgCNsw+RFU7+ViS0DgjNnCzQoa2t3e3Aug/lKS7tBiDGvJSUr
yWXb/Awph0ugilrLHmst+hgvdTliQdf8SY85/6kALa3n0jQOvlVA52CQEvO6o5dF
KFQ40wOLdRc99PSEvq4w0mg/yoVZ5R9EqY19AgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUBVOTWIDPIH+7CnKXTlfYQN0l2yYwHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvQlZPVFdJRFBJSC03Q25LWFRsZllR
TjBsMnlZLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAtL0VDAN
BgkqhkiG9w0BAQsFAAOCAQEAiSAC2+qVO/lejfPvqX37dMXLTrnMPayCh4wh9XBG
zm/BfrcSl2aftaACWg8/T+875Wki4XaUFGxOpbMGd/+xAEqPM79as+WFxHpa/1+8
PsHi9AKKubJIamyLg9rKeHRj9YPtIfbJMmABBnkIOSsRX5rsht+KiS5Hm+F4k84Y
V3DEchmpU+3L0UeqCWpvChum7LLrBMDWFUVobZwuhyzJFB9PP9kM0/6dFe1fSzLx
e3O4QoDO4+vavnNS7YAlrnUilRQTKAYyrJmU56YOtDlmalteY8UDnlwBbMlyAKoe
yjBThdYrrGXIt7xcZYpeh8w+dLNnFk6JlMr5kj7jAKE8eg==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:50:09 2025 by rpki-client