Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/WvSQlDb7L9tHzZ3PuXY6ki0toL0.roa
File: WvSQlDb7L9tHzZ3PuXY6ki0toL0.roa (raw, json)
Hash identifier: /RdqIy5oxxvrVxdmCyUGu9Tks5iU0LuLdy27bbpYrPY=
Subject key identifier: 5A:F4:90:94:36:FB:2F:DB:47:CD:9D:CF:B9:76:3A:92:2D:2D:A0:BD
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1A57
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WvSQlDb7L9tHzZ3PuXY6ki0toL0.roa
Signing time: Fri 22 Aug 2025 08:53:58 +0000
ROA not before: Fri 22 Aug 2025 08:53:58 +0000
ROA not after: Sat 22 Aug 2026 08:14:28 +0000
asID: 18419
IP address blocks: 210.244.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6743 (0x1a57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 22 08:53:58 2025 GMT
Not After : Aug 22 08:14:28 2026 GMT
Subject: CN=5AF4909436FB2FDB47CD9DCFB9763A922D2DA0BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:fa:cd:f1:4f:9e:84:8b:c0:46:96:91:68:
72:ad:59:1c:d5:83:93:47:03:89:9b:7b:3e:1d:fc:
69:7a:dc:1f:d6:43:9e:d7:be:47:ab:60:b9:e4:62:
e4:4e:83:56:cc:b3:6e:cc:e9:c3:86:55:e1:ae:0e:
ad:37:e9:8e:5a:9e:59:c6:40:ca:94:22:c5:02:6b:
89:9c:b4:d1:87:2e:1f:b1:91:75:ac:ca:e0:ff:1c:
c1:14:b7:b7:63:dc:55:eb:52:18:27:bd:4f:ce:93:
21:54:7c:71:93:96:34:9b:c4:23:0b:ac:6b:b5:95:
c3:1a:17:e9:e5:10:2d:ab:96:97:37:e7:94:6f:1f:
83:61:19:4d:8e:47:01:91:af:39:b7:c1:5e:31:07:
01:18:20:0b:ca:20:9b:32:d6:11:06:85:3d:6d:d7:
2a:9a:27:bb:77:75:80:50:27:09:50:f4:8b:02:27:
4b:1a:b5:85:47:87:e3:48:59:2f:55:26:65:ba:21:
fe:ad:2f:12:34:0e:ef:f2:41:78:f2:47:27:e1:19:
8b:fa:20:5b:32:8b:ae:cc:fb:ad:96:a1:c2:0b:92:
1a:54:81:c4:61:b4:ab:f7:2a:ad:b6:73:72:31:c4:
aa:f3:0e:46:34:4a:fe:d4:4e:df:c3:fd:10:28:61:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F4:90:94:36:FB:2F:DB:47:CD:9D:CF:B9:76:3A:92:2D:2D:A0:BD
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/WvSQlDb7L9tHzZ3PuXY6ki0toL0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.97.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:b3:dd:cb:cc:ce:91:b8:ba:0f:cf:14:81:67:ea:7b:7b:64:
22:53:40:5f:17:fb:61:b3:8d:3d:8d:5a:bf:c5:e6:5a:e0:de:
93:a7:77:8d:3b:de:00:62:45:19:2b:fd:39:e1:be:d1:27:37:
6e:79:4f:9a:17:b7:e3:41:22:5d:76:d1:9c:2c:f9:05:b6:a1:
fa:d6:d0:82:d9:b6:69:ad:e8:e1:e3:68:b7:cc:d9:14:64:ad:
8d:c3:2b:e6:9d:9f:30:b6:b5:9f:87:8c:c9:f7:d0:0f:9a:fd:
47:9a:e9:ec:24:8e:f8:51:bc:01:0b:21:fb:74:49:03:d9:8a:
26:b5:c2:28:85:85:42:54:17:df:da:50:65:37:2d:de:eb:ed:
de:60:1b:ba:02:fc:43:53:2b:3c:1e:f0:1d:0f:75:68:79:4a:
cd:d6:25:e8:1f:27:8f:fb:da:d4:42:4f:eb:ea:4a:03:9c:39:
2f:94:d0:97:fb:29:5b:04:80:87:e5:28:f5:6c:4e:47:89:38:
01:dd:84:a6:e0:53:30:e0:57:8f:80:75:6d:9f:26:80:b8:eb:
9b:5f:03:4c:cd:7a:e3:ae:94:66:84:e8:89:94:f7:58:55:2c:
92:0d:25:91:b6:98:56:3a:cd:07:a0:ae:35:62:90:d7:c8:fb:
2e:cb:25:c5
-----BEGIN CERTIFICATE-----
MIIEzjCCA7agAwIBAgICGlcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNkVF
NUI0MTg1N0FEMjNENUJFRTY3MTZFMzFBQTMzNEJGMjU0NUI3MjAeFw0yNTA4MjIw
ODUzNThaFw0yNjA4MjIwODE0MjhaMDMxMTAvBgNVBAMTKDVBRjQ5MDk0MzZGQjJG
REI0N0NEOURDRkI5NzYzQTkyMkQyREEwQkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4xvrN8U+ehIvARpaRaHKtWRzVg5NHA4mbez4d/Gl63B/WQ57X
vkerYLnkYuROg1bMs27M6cOGVeGuDq036Y5anlnGQMqUIsUCa4mctNGHLh+xkXWs
yuD/HMEUt7dj3FXrUhgnvU/OkyFUfHGTljSbxCMLrGu1lcMaF+nlEC2rlpc355Rv
H4NhGU2ORwGRrzm3wV4xBwEYIAvKIJsy1hEGhT1t1yqaJ7t3dYBQJwlQ9IsCJ0sa
tYVHh+NIWS9VJmW6If6tLxI0Du/yQXjyRyfhGYv6IFsyi67M+62WocILkhpUgcRh
tKv3Kq22c3IxxKrzDkY0Sv7UTt/D/RAoYZ2nAgMBAAGjggHqMIIB5jAdBgNVHQ4E
FgQUWvSQlDb7L9tHzZ3PuXY6ki0toL0wHwYDVR0jBBgwFoAUbuW0GFetI9W+5nFu
MaozS/JUW3IwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBaBgNVHR8EUzBRME+g
TaBLhklyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTkNJQy9i
dVcwR0ZldEk5Vy01bkZ1TWFvelNfSlVXM0kuY3JsMGAGCCsGAQUFBwEBBFQwUjBQ
BggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NB
L2J1VzBHRmV0STlXLTVuRnVNYW96U19KVVczSS5jZXIwDgYDVR0PAQH/BAQDAgeA
MIGaBggrBgEFBQcBCwSBjTCBijBVBggrBgEFBQcwC4ZJcnN5bmM6Ly9ycGtpY2Eu
dHduaWMudHcvcnBraS9UV05JQ0NBL05DSUMvV3ZTUWxEYjdMOXRIelozUHVYWTZr
aTB0b0wwLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmljLnR3L3Jy
ZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANL0YTAN
BgkqhkiG9w0BAQsFAAOCAQEAjrPdy8zOkbi6D88UgWfqe3tkIlNAXxf7YbONPY1a
v8XmWuDek6d3jTveAGJFGSv9OeG+0Sc3bnlPmhe340EiXXbRnCz5Bbah+tbQgtm2
aa3o4eNot8zZFGStjcMr5p2fMLa1n4eMyffQD5r9R5rp7CSO+FG8AQsh+3RJA9mK
JrXCKIWFQlQX39pQZTct3uvt3mAbugL8Q1MrPB7wHQ91aHlKzdYl6B8nj/va1EJP
6+pKA5w5L5TQl/spWwSAh+Uo9WxOR4k4Ad2EpuBTMOBXj4B1bZ8mgLjrm18DTM16
466UZoToiZT3WFUskg0lkbaYVjrNB6CuNWKQ18j7LsslxQ==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:57 2025 by rpki-client