Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/-OqWaUHPwoX4xmz0sB6l1iJXuQ8.roa
File: -OqWaUHPwoX4xmz0sB6l1iJXuQ8.roa (raw, json)
Hash identifier: kfqxyQidk1sWIhL61a2Nvl/7JtHsP52BCC83oG0ML4Q=
Subject key identifier: F8:EA:96:69:41:CF:C2:85:F8:C6:6C:F4:B0:1E:A5:D6:22:57:B9:0F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-OqWaUHPwoX4xmz0sB6l1iJXuQ8.roa
Signing time: Thu 15 Sep 2022 02:43:21 +0000
ROA not before: Thu 15 Sep 2022 02:43:21 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 60.245.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:21 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=F8EA966941CFC285F8C66CF4B01EA5D62257B90F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d7:82:4d:ce:e4:9d:c2:14:21:29:f7:97:d4:
56:7d:03:4d:20:17:af:9e:5f:77:84:7e:ff:4c:4a:
24:6e:71:a1:57:39:89:3e:c0:a3:a8:6e:4a:3f:24:
2d:4f:d6:69:c6:35:70:6f:14:76:19:23:a1:6e:66:
63:76:40:0b:08:dd:6e:54:37:e5:e0:74:db:ce:7e:
4a:86:0f:d5:5b:7d:cc:dc:73:84:e1:1e:91:8b:de:
63:2f:82:26:d5:01:50:9e:38:54:71:98:a8:02:8b:
a9:54:34:ee:c2:c0:4a:1b:9a:93:be:a9:98:0b:7b:
5e:62:06:a8:a6:72:30:8e:07:82:c5:18:a6:8e:19:
2a:2a:47:48:41:d9:f2:09:26:c7:2f:ba:9c:a1:58:
59:06:9a:63:65:63:7b:b3:ce:5d:20:15:f4:05:73:
0e:76:c3:8c:4c:63:5c:21:6a:6b:34:3e:f1:ba:ba:
6a:8e:cc:83:76:7e:80:7f:05:ce:e1:2c:8f:43:4e:
59:1a:67:08:b6:b5:dc:dd:5a:89:bf:34:38:cf:6e:
80:fb:9c:d7:0d:dc:cd:4f:bd:f2:44:5b:87:8e:9c:
7b:81:d1:d8:9a:f2:00:81:af:5e:be:87:90:e0:7c:
76:e8:c4:d3:42:89:0b:75:0e:9c:0b:89:40:e7:21:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EA:96:69:41:CF:C2:85:F8:C6:6C:F4:B0:1E:A5:D6:22:57:B9:0F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/-OqWaUHPwoX4xmz0sB6l1iJXuQ8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.64.0/19
Signature Algorithm: sha256WithRSAEncryption
c9:63:56:44:15:29:df:92:00:7d:fc:91:1a:f5:6e:87:dc:a5:
f9:b3:82:a1:eb:e6:91:c4:c4:ea:b3:c9:8f:6c:2a:e8:10:97:
81:4d:fb:44:d5:4b:c8:53:fa:a0:3e:18:c9:d9:2c:a4:50:d0:
a2:40:a5:4b:f1:78:f8:3c:46:13:14:11:23:02:50:d7:49:71:
5f:4b:b5:1e:57:8e:0d:eb:07:69:33:17:4d:7d:43:02:f1:a3:
e9:91:67:5e:7e:9b:e1:c0:b1:db:44:4b:cc:bb:35:73:5c:14:
e9:21:9d:a8:1b:e0:b7:49:5c:50:54:29:62:51:0d:94:95:2d:
2a:48:50:18:ec:40:75:27:b6:8d:f2:a7:94:51:aa:f4:cf:5d:
d6:f7:ce:6f:06:aa:84:7d:79:80:56:7c:64:53:79:27:d7:78:
76:83:f0:64:30:19:51:c7:22:03:a3:59:7e:68:15:86:58:4f:
ed:7e:f0:52:1a:17:f9:28:db:40:d0:94:33:f3:7c:9c:0a:32:
ee:ac:a1:b3:57:b4:46:e8:da:fb:fd:6e:16:ee:ec:cd:21:0c:
1a:6d:89:f4:9f:86:31:df:9d:a8:30:e2:d5:f8:f2:94:59:0e:
0e:47:d8:4d:81:b8:f4:f1:cb:43:84:ab:58:e9:4b:bd:ed:a3:
a5:25:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:27 2025 by rpki-client