Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/-tjLOJ_JzcudCYm4i6iBdrTi-aM.roa
File: -tjLOJ_JzcudCYm4i6iBdrTi-aM.roa (raw, json)
Hash identifier: yK4BALN1VcTXwNYPVOeJvFc21jtzEFL7W4MU1J1kPBU=
Subject key identifier: FA:D8:CB:38:9F:C9:CD:CB:9D:09:89:B8:8B:A8:81:76:B4:E2:F9:A3
Certificate issuer: /CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Certificate serial: 5911
Authority key identifier: B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/-tjLOJ_JzcudCYm4i6iBdrTi-aM.roa
Signing time: Mon 26 Aug 2024 05:23:26 +0000
ROA not before: Mon 26 Aug 2024 05:23:26 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 103.46.188.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22801 (0x5911)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4320FD78DFB6A4D1C92322F794966B8525DFDD2
Validity
Not Before: Aug 26 05:23:26 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=FAD8CB389FC9CDCB9D0989B88BA88176B4E2F9A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:d8:6a:6e:0a:ab:06:a8:51:d0:ab:d6:d5:
46:39:d8:7e:6e:80:14:44:14:fc:0d:a6:2f:4a:7c:
4a:ac:00:b6:77:80:e5:fc:ec:14:7f:57:bf:6e:4d:
8b:58:66:4f:ba:83:a2:e5:28:17:09:65:74:34:40:
35:65:5c:93:7c:c4:95:ab:c7:e8:39:22:4a:98:37:
f0:e3:9a:f1:84:f3:82:80:6a:5e:a2:52:fc:c2:86:
6f:26:ed:ac:94:27:05:af:49:34:44:cd:45:bb:26:
95:cb:d2:b6:52:1c:11:e9:5c:ae:50:d7:81:83:e1:
ac:85:d4:a8:9e:06:41:ce:dd:6a:96:9e:07:57:e8:
fb:ad:30:bf:c4:f3:0f:e0:2e:f6:be:e0:4e:76:d6:
2d:11:34:f1:55:6d:3d:e2:5c:46:7b:ae:4b:f2:b3:
86:30:1c:33:4f:54:1a:94:3a:d7:9d:66:f1:c4:29:
53:06:00:2a:dc:b1:af:23:de:fb:71:32:45:2f:ef:
a8:d9:2a:dc:01:e9:22:50:3e:e6:92:8c:32:92:e6:
24:78:d9:9b:d6:32:95:e9:cf:33:14:26:a2:d7:21:
be:16:de:1b:cc:2d:6b:07:56:cf:92:61:20:66:c3:
01:40:2b:72:94:c7:30:f5:e9:5a:ca:4d:ad:9d:fc:
ea:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D8:CB:38:9F:C9:CD:CB:9D:09:89:B8:8B:A8:81:76:B4:E2:F9:A3
X509v3 Authority Key Identifier:
keyid:B4:32:0F:D7:8D:FB:6A:4D:1C:92:32:2F:79:49:66:B8:52:5D:FD:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/tDIP1437ak0ckjIveUlmuFJd_dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/tDIP1437ak0ckjIveUlmuFJd_dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NTCCATV/-tjLOJ_JzcudCYm4i6iBdrTi-aM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.46.188.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:2c:a3:29:c4:c8:93:e5:b9:96:23:c1:8e:a2:c7:ff:6f:4b:
2a:ee:62:e1:c5:a9:b2:46:31:64:f9:5c:5b:8d:ac:0a:3d:48:
10:29:e9:f1:76:98:45:d8:8f:2b:0d:0c:ed:e9:33:ce:8e:f3:
36:b9:93:ef:eb:cb:81:37:ba:b2:ed:22:00:d9:6c:2f:1e:5b:
e1:33:f1:fd:47:b4:fb:5d:71:8a:57:56:a4:f6:2f:c0:e5:b7:
e6:5c:9f:28:22:c8:03:94:57:7b:03:ce:70:9e:d7:65:d3:7a:
bb:97:3f:fa:c7:6c:b9:f9:65:1d:4f:f7:33:de:b8:0f:c5:6d:
90:9e:a7:c7:3b:5c:49:c2:6d:06:dc:87:88:91:23:38:bd:91:
6f:ba:a2:2c:d1:f2:48:ee:5d:09:f6:ad:9b:94:fb:06:04:c9:
fd:69:48:f9:f6:e7:b0:ad:c5:5d:f9:5d:88:6b:8e:87:55:b0:
40:f8:af:31:eb:97:c0:55:09:cf:cb:df:f2:9f:ee:7b:9b:99:
84:a8:7f:06:89:34:02:51:32:0f:4a:8d:a9:d3:d5:6a:5b:90:
8b:48:a4:97:f9:94:a1:30:d5:86:47:b4:69:aa:b3:d8:f0:1d:
96:76:33:bc:ed:6a:e8:07:86:eb:0d:c1:3d:e3:9a:44:5f:de:
f2:0b:3e:1a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICWREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQjQz
MjBGRDc4REZCNkE0RDFDOTIzMjJGNzk0OTY2Qjg1MjVERkREMjAeFw0yNDA4MjYw
NTIzMjZaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEZBRDhDQjM4OUZDOUNE
Q0I5RDA5ODlCODhCQTg4MTc2QjRFMkY5QTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1Q9hqbgqrBqhR0KvW1UY52H5ugBREFPwNpi9KfEqsALZ3gOX8
7BR/V79uTYtYZk+6g6LlKBcJZXQ0QDVlXJN8xJWrx+g5IkqYN/DjmvGE84KAal6i
UvzChm8m7ayUJwWvSTREzUW7JpXL0rZSHBHpXK5Q14GD4ayF1KieBkHO3WqWngdX
6PutML/E8w/gLva+4E521i0RNPFVbT3iXEZ7rkvys4YwHDNPVBqUOtedZvHEKVMG
ACrcsa8j3vtxMkUv76jZKtwB6SJQPuaSjDKS5iR42ZvWMpXpzzMUJqLXIb4W3hvM
LWsHVs+SYSBmwwFAK3KUxzD16VrKTa2d/Oo1AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU+tjLOJ/JzcudCYm4i6iBdrTi+aMwHwYDVR0jBBgwFoAUtDIP1437ak0ckjIv
eUlmuFJd/dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTlRDQ0FU
Vi90RElQMTQzN2FrMGNrakl2ZVVsbXVGSmRfZEkuY3JsMGAGCCsGAQUFBwEBBFQw
UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J
Q0NBL3RESVAxNDM3YWswY2tqSXZlVWxtdUZKZF9kSS5jZXIwDgYDVR0PAQH/BAQD
AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp
Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL05UQ0NBVFYvLXRqTE9KX0p6Y3VkQ1lt
NGk2aUJkclRpLWFNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj
LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AmcuvDANBgkqhkiG9w0BAQsFAAOCAQEAfyyjKcTIk+W5liPBjqLH/29LKu5i4cWp
skYxZPlcW42sCj1IECnp8XaYRdiPKw0M7ekzzo7zNrmT7+vLgTe6su0iANlsLx5b
4TPx/Ue0+11xildWpPYvwOW35lyfKCLIA5RXewPOcJ7XZdN6u5c/+sdsufllHU/3
M964D8VtkJ6nxztcScJtBtyHiJEjOL2Rb7qiLNHySO5dCfatm5T7BgTJ/WlI+fbn
sK3FXfldiGuOh1WwQPivMeuXwFUJz8vf8p/ue5uZhKh/Bok0AlEyD0qNqdPValuQ
i0ikl/mUoTDVhke0aaqz2PAdlnYzvO1q6AeG6w3BPeOaRF/e8gs+Gg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:21:38 2025 by rpki-client