Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/0RVEjYy4fdzZrqCTeLcrLtYq7U8.roa
File: 0RVEjYy4fdzZrqCTeLcrLtYq7U8.roa (raw, json)
Hash identifier: bOZeQMy7QfyLxG2fpjpVyIqBjc1FhwRnUIzYv2skcHk=
Subject key identifier: D1:15:44:8D:8C:B8:7D:DC:D9:AE:A0:93:78:B7:2B:2E:D6:2A:ED:4F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0DF0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0RVEjYy4fdzZrqCTeLcrLtYq7U8.roa
Signing time: Wed 29 Sep 2021 02:43:01 +0000
ROA not before: Wed 29 Sep 2021 02:43:01 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 61.56.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3568 (0xdf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:01 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D115448D8CB87DDCD9AEA09378B72B2ED62AED4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:b9:4a:fa:30:c5:76:59:f3:bf:5e:27:a4:
ed:ef:4f:78:e7:fe:86:90:9e:bc:41:11:a8:ac:94:
9c:52:91:c6:4f:5f:b9:09:82:6d:42:07:29:6f:9d:
70:82:90:2e:0f:bc:7a:44:61:6c:3b:0f:cf:f0:a1:
87:46:4f:19:de:3d:79:ef:a7:63:35:ab:99:e3:72:
4f:63:f3:bb:8b:21:e7:a8:7f:ba:af:a8:e8:ad:09:
d6:6b:4d:4c:ad:af:ce:3b:39:90:5c:6b:6d:67:db:
69:dc:6f:c5:e7:0f:c2:1b:a8:1b:c9:4c:26:87:3a:
d8:f5:af:f0:10:f4:52:ee:2b:39:5f:01:0a:e1:3e:
87:61:8d:76:ba:c8:aa:64:35:5c:ca:56:89:9f:77:
de:f2:e0:14:98:1f:30:e8:08:68:1e:c7:fd:93:5a:
de:64:87:8d:34:af:9f:1d:21:a0:e3:7e:d2:cd:fd:
57:bf:47:0c:09:70:98:7c:60:1a:6c:27:af:70:96:
e4:88:2c:d2:79:fc:c6:9c:1b:0a:62:3b:66:91:8b:
ed:4b:70:ea:7b:da:c7:63:04:99:58:ac:df:7b:c7:
84:45:a1:1e:b9:f4:40:db:63:18:d6:f1:54:59:6b:
be:0b:91:d8:f3:c0:76:56:74:e1:a9:bd:88:29:3b:
ac:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:15:44:8D:8C:B8:7D:DC:D9:AE:A0:93:78:B7:2B:2E:D6:2A:ED:4F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/0RVEjYy4fdzZrqCTeLcrLtYq7U8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.192.0/19
Signature Algorithm: sha256WithRSAEncryption
78:a6:f0:f4:4f:35:5d:8d:23:e8:89:9d:cf:b2:ba:69:31:90:
c8:3a:4f:95:f2:d2:b1:1a:75:6e:37:a1:f4:56:19:d5:19:09:
c7:30:1d:8f:fb:ad:1f:24:e9:c1:d4:fa:c8:52:ac:10:36:8c:
41:45:ff:ce:e5:c6:65:3f:9b:24:fb:05:69:c7:e3:4c:29:47:
75:60:3b:33:0e:8b:d3:03:86:fd:35:a0:15:4d:d8:a5:5e:4c:
df:19:3f:59:53:d8:e2:c5:ec:6c:56:a0:2b:04:55:bf:25:14:
c6:71:2c:32:51:de:d2:9e:51:e2:8c:29:66:2d:3e:a2:af:21:
1a:bd:a6:c7:ba:5b:8d:f6:7e:dc:6e:44:be:26:96:3a:5e:e4:
6f:0e:30:98:77:9c:48:ee:8a:ff:32:39:e5:b4:1a:60:86:cc:
41:6e:29:61:7b:ec:c0:b5:a0:f2:41:37:e0:ba:45:4c:0b:a3:
2a:7a:db:5c:b9:15:bf:e6:67:f7:31:01:dd:10:ab:55:6d:62:
00:52:c5:64:92:dd:f5:38:7a:b9:62:89:57:cf:29:24:99:f7:
f1:d4:8c:cc:75:30:15:ed:86:85:c3:97:c9:b4:83:f2:6c:03:
8f:a3:87:e3:43:58:77:e8:1a:e3:f2:d5:75:21:77:d5:45:aa:
03:02:16:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:14 2025 by rpki-client