Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wu4KZvAIV4CjrEDpNi3RKgx2-xs.roa
File: Wu4KZvAIV4CjrEDpNi3RKgx2-xs.roa (raw, json)
Hash identifier: Wxx5AUnm0Rfwu8bmeQcnj6FEGxAqnnLg46tmRMhGC5s=
Subject key identifier: 5A:EE:0A:66:F0:08:57:80:A3:AC:40:E9:36:2D:D1:2A:0C:76:FB:1B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 183E
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wu4KZvAIV4CjrEDpNi3RKgx2-xs.roa
Signing time: Mon 10 Feb 2025 14:07:43 +0000
ROA not before: Mon 10 Feb 2025 14:07:43 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 220.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6206 (0x183e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:43 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5AEE0A66F0085780A3AC40E9362DD12A0C76FB1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:dc:58:54:37:22:9a:0b:31:e0:d1:33:58:
c0:de:40:ae:d3:d6:d0:ec:b2:6d:30:1f:12:eb:2d:
10:eb:f8:94:85:56:c3:9f:f1:81:cb:95:1e:5e:26:
98:5f:e8:ba:d9:dc:37:8d:97:fe:cb:34:5c:18:47:
24:21:06:93:03:a0:69:ce:3e:54:da:de:8c:0f:20:
e9:8e:a1:f7:9f:46:bf:56:3b:b0:e5:73:52:60:ae:
c9:63:43:09:45:5e:61:1e:dd:c2:df:36:fb:7b:8c:
98:e6:7d:28:95:55:f3:41:12:17:3e:42:1f:d5:28:
0b:38:76:92:57:a6:87:e7:f0:de:88:86:d4:9e:cc:
5e:66:78:89:12:54:d0:c8:ed:b3:4b:15:93:c1:62:
3a:be:42:8a:d2:fe:83:91:bd:35:8e:b3:1f:cc:3f:
65:49:83:65:fb:2d:ea:6e:ea:83:0c:8b:42:23:32:
bd:16:af:f8:4e:87:a5:72:de:9e:e9:99:e3:37:80:
e0:d6:07:cb:70:9e:6a:6e:ea:0d:c0:7d:dc:a9:03:
f8:25:64:8f:74:62:70:03:49:7c:fc:4f:ea:16:23:
04:98:7a:57:0a:20:3e:07:5e:07:e9:dc:ce:ad:53:
94:54:ac:45:3d:1f:07:19:85:f3:e8:4d:7a:a7:39:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EE:0A:66:F0:08:57:80:A3:AC:40:E9:36:2D:D1:2A:0C:76:FB:1B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Wu4KZvAIV4CjrEDpNi3RKgx2-xs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:0e:5e:74:6c:e4:07:fa:6c:2f:5a:f9:7d:f6:01:2d:96:e6:
66:85:13:3a:b5:94:bf:45:25:ec:18:22:19:ec:70:a1:ec:ea:
53:47:91:2d:7d:ed:88:5b:fd:23:ac:29:ef:f4:92:72:23:a9:
c4:f0:92:78:14:6f:18:93:37:6d:86:ea:dc:97:a9:89:a1:d0:
9b:68:7c:2a:f9:d5:fc:a3:00:9d:96:d4:06:39:be:0b:ec:cd:
7e:9f:cd:ca:9c:f8:c0:72:06:8e:3f:28:eb:99:0b:ac:28:a6:
2c:63:fd:5c:d7:97:cd:01:05:f3:04:bc:09:07:c0:9c:d0:5b:
b3:60:30:29:79:50:57:fa:7c:09:bc:91:93:af:3e:87:38:20:
97:50:93:47:da:bb:8a:c5:d5:17:fa:2a:09:8d:d2:56:87:2e:
a1:44:2e:a1:e6:f4:3a:99:3f:53:21:b6:f1:22:fe:2b:86:bc:
90:52:da:a1:7d:76:44:e5:a8:c6:da:15:a0:d9:52:bf:17:2b:
de:1c:8b:b1:4b:11:90:b3:7a:68:b4:37:12:86:32:3c:d9:46:
19:62:88:be:ae:fe:67:01:76:7d:76:2b:32:61:9f:9d:05:4c:
fd:24:fd:b0:cf:a3:8c:a7:8a:35:ba:3b:7c:ef:94:22:77:99:
45:ec:71:4a
-----BEGIN CERTIFICATE-----
MIIEzTCCA7WgAwIBAgICGD4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTAyMTAx
NDA3NDNaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKDVBRUUwQTY2RjAwODU3
ODBBM0FDNDBFOTM2MkREMTJBMEM3NkZCMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMw9xYVDcimgsx4NEzWMDeQK7T1tDssm0wHxLrLRDr+JSFVsOf
8YHLlR5eJphf6LrZ3DeNl/7LNFwYRyQhBpMDoGnOPlTa3owPIOmOofefRr9WO7Dl
c1JgrsljQwlFXmEe3cLfNvt7jJjmfSiVVfNBEhc+Qh/VKAs4dpJXpofn8N6IhtSe
zF5meIkSVNDI7bNLFZPBYjq+QorS/oORvTWOsx/MP2VJg2X7Lepu6oMMi0IjMr0W
r/hOh6Vy3p7pmeM3gODWB8twnmpu6g3AfdypA/glZI90YnADSXz8T+oWIwSYelcK
ID4HXgfp3M6tU5RUrEU9HwcZhfPoTXqnOX51AgMBAAGjggHpMIIB5TAdBgNVHQ4E
FgQUWu4KZvAIV4CjrEDpNi3RKgx2+xswHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV3U0S1p2QUlWNENqckVEcE5pM1JL
Z3gyLXhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDANzkMA0G
CSqGSIb3DQEBCwUAA4IBAQA2Dl50bOQH+mwvWvl99gEtluZmhRM6tZS/RSXsGCIZ
7HCh7OpTR5Etfe2IW/0jrCnv9JJyI6nE8JJ4FG8Ykzdthurcl6mJodCbaHwq+dX8
owCdltQGOb4L7M1+n83KnPjAcgaOPyjrmQusKKYsY/1c15fNAQXzBLwJB8Cc0Fuz
YDApeVBX+nwJvJGTrz6HOCCXUJNH2ruKxdUX+ioJjdJWhy6hRC6h5vQ6mT9TIbbx
Iv4rhryQUtqhfXZE5ajG2hWg2VK/FyveHIuxSxGQs3potDcShjI82UYZYoi+rv5n
AXZ9disyYZ+dBUz9JP2wz6OMp4o1ujt875Qid5lF7HFK
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:58:53 2025 by rpki-client