Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/VVjaPxR0BaVO1IvvGOAx6rJbwh8.roa
File: VVjaPxR0BaVO1IvvGOAx6rJbwh8.roa (raw, json)
Hash identifier: V3ZvoZkQ9cj2T38LjPIIDCLvz+UMmUpiw4QXqRtkSeg=
Subject key identifier: 55:58:DA:3F:14:74:05:A5:4E:D4:8B:EF:18:E0:31:EA:B2:5B:C2:1F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1781
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VVjaPxR0BaVO1IvvGOAx6rJbwh8.roa
Signing time: Mon 10 Feb 2025 14:06:58 +0000
ROA not before: Mon 10 Feb 2025 14:06:58 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 113.196.152.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6017 (0x1781)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:06:58 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5558DA3F147405A54ED48BEF18E031EAB25BC21F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:98:bd:ee:02:9b:00:cd:c6:8b:af:8b:9f:51:
b6:0b:7f:3e:44:83:d7:8d:5b:2f:67:79:10:50:73:
4b:03:47:b6:01:df:01:a8:cb:99:eb:a2:ad:12:98:
1a:a9:af:9f:62:5c:ca:b3:14:65:c2:2d:4f:e5:46:
c9:9b:a9:94:59:95:e3:f7:7a:8c:a3:2f:34:f0:c8:
16:4e:28:1f:cc:7c:ca:04:d4:3f:84:6c:08:c3:ca:
0a:00:a3:e4:18:6a:30:b3:21:4e:be:a2:a3:6a:c0:
3e:7e:f3:97:fe:18:b5:7e:5d:2c:87:76:95:2d:73:
45:bc:6a:47:06:84:fa:8c:fe:68:db:3d:9d:1e:dc:
9e:9d:11:4e:20:dd:b2:60:29:8b:d0:ca:3b:9d:72:
0c:20:e7:ea:3a:97:3e:5b:a2:93:c7:2b:fe:85:49:
00:85:dc:7e:ef:e9:c3:77:99:30:dc:9b:80:e6:17:
33:a1:a4:0c:e4:0f:bf:34:b2:33:1f:5a:be:a7:57:
e7:42:a0:34:43:00:a8:ee:b9:2e:d7:48:ed:44:d6:
4c:f1:1a:a2:15:26:b4:89:0a:ce:ea:f8:30:fe:f8:
79:4e:fd:d8:15:82:ce:f8:94:c5:52:0d:28:c0:0c:
7e:b8:58:56:ea:6a:e1:dc:e1:e2:15:91:66:f0:a1:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:58:DA:3F:14:74:05:A5:4E:D4:8B:EF:18:E0:31:EA:B2:5B:C2:1F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/VVjaPxR0BaVO1IvvGOAx6rJbwh8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.152.0/21
Signature Algorithm: sha256WithRSAEncryption
bc:63:1e:81:3e:76:af:2f:07:22:37:01:2e:c4:3b:ad:2c:51:
bb:fc:f7:bc:cd:d5:51:cf:1c:53:49:a8:d2:08:1e:9f:ca:e8:
79:32:f1:10:93:f7:7b:4d:bc:53:56:19:53:3c:4b:25:8d:2d:
06:db:ee:28:83:54:65:f0:83:d3:be:7c:85:a1:96:c4:e6:29:
77:a6:90:9c:80:09:f2:cb:ed:01:f5:0d:be:db:2e:bb:7a:42:
8f:15:a8:f9:e2:83:4d:15:bc:13:f0:42:b0:8e:25:79:fa:49:
95:de:e4:36:42:e0:56:df:5b:16:83:4e:6d:a3:9d:47:1a:43:
47:0d:45:8a:ce:19:14:a5:38:d2:78:c9:4d:e1:0e:ce:42:e9:
85:86:2d:dc:4b:d3:f1:b9:13:19:73:50:d9:e7:da:23:21:05:
9c:c9:49:bd:96:eb:d7:b8:8d:2c:2a:7a:79:33:e9:87:7e:1d:
4b:8a:4f:6f:75:7b:72:6f:47:6c:bd:43:56:6c:f9:f8:32:6a:
b9:d3:21:a6:6d:f1:27:a1:7e:b5:e9:70:bd:59:d8:07:83:70:
ee:f6:d6:43:d7:75:0d:1a:be:14:2d:a5:76:40:4c:74:da:6f:
15:0f:e6:1e:0e:e9:86:7c:0d:b7:54:25:70:cc:69:6f:74:06:
43:2e:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:57:38 2025 by rpki-client