Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/1FYNG3TURz6I1x3q9T92N2vly9M.roa
File: 1FYNG3TURz6I1x3q9T92N2vly9M.roa (raw, json)
Hash identifier: Gqjf8xtOLnUcoxMFs9/bjiTvFCPEy18xbXnSKZv9m5c=
Subject key identifier: D4:56:0D:1B:74:D4:47:3E:88:D7:1D:EA:F5:3F:76:37:6B:E5:CB:D3
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1FYNG3TURz6I1x3q9T92N2vly9M.roa
Signing time: Thu 15 Sep 2022 02:42:44 +0000
ROA not before: Thu 15 Sep 2022 02:42:44 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.51.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:44 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=D4560D1B74D4473E88D71DEAF53F76376BE5CBD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:5a:21:dd:95:a9:b1:56:0b:3f:d8:12:e7:
9f:7b:49:24:7d:8f:ec:70:3f:9d:e9:52:c6:83:e0:
bc:3e:11:ef:77:11:17:41:26:63:58:53:83:e7:16:
ef:ff:54:fb:8c:eb:5b:67:01:42:5e:a6:73:91:b0:
40:59:cd:06:e8:83:dc:dd:f3:0e:72:cf:66:1a:23:
c0:8a:b1:2d:c6:c0:58:e2:7d:ef:cf:09:82:40:3e:
eb:2c:93:dc:3c:51:5e:f1:ff:fa:c1:f2:0f:ce:46:
e9:99:fa:f2:9c:85:b3:ad:ac:99:1f:05:9c:fe:b8:
6d:ab:dd:33:57:83:f5:9d:21:57:d5:da:97:46:b8:
c7:ec:ae:24:7d:ef:55:aa:af:d7:9d:50:f9:80:a3:
58:cf:4c:06:9c:a8:b0:18:df:f4:87:6d:d9:52:58:
ce:78:c2:08:62:db:ff:af:48:68:11:f5:25:8e:da:
da:94:ce:97:ec:e7:b3:ba:f1:34:86:f4:82:74:6d:
63:4b:54:2d:cc:42:05:65:28:be:c1:1c:45:d5:72:
b2:a8:9a:46:df:90:cf:d1:78:99:5c:65:d1:93:7c:
ed:3d:df:5e:18:65:c9:07:24:47:91:d0:6c:e1:25:
ec:d2:83:b5:fd:35:65:00:05:b9:4d:ab:e6:e5:1b:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:56:0D:1B:74:D4:47:3E:88:D7:1D:EA:F5:3F:76:37:6B:E5:CB:D3
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/1FYNG3TURz6I1x3q9T92N2vly9M.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
60:7d:53:33:e1:04:77:88:8a:aa:d2:5b:ba:02:47:43:ff:4f:
52:f5:23:28:35:b2:e1:4d:91:f0:12:b8:cf:84:94:22:4f:f7:
55:19:2e:6d:de:c8:d4:be:82:fd:47:39:de:5b:b9:e1:35:c5:
4c:c9:08:34:1c:6f:d8:08:d8:29:63:97:cb:6d:63:cc:49:7f:
fc:ca:3e:f9:19:93:e2:44:56:fa:1b:80:eb:7c:e5:0d:6a:64:
20:62:86:75:56:5c:0c:b5:54:d0:0a:d3:e6:49:f9:bf:6c:8c:
a9:f5:87:55:a3:85:7c:7f:ee:44:ed:1f:ee:c9:17:ae:fd:20:
00:b2:b8:b8:1d:d1:0f:57:bd:f0:59:d7:02:ba:3d:da:67:2c:
b3:be:15:43:14:09:7b:81:f8:f8:1c:54:31:e1:37:c5:fd:46:
e6:24:7c:7c:1c:2b:cf:6e:31:0f:80:71:44:43:79:44:ef:68:
40:5a:58:a8:c1:cd:59:db:3b:da:d1:ab:fc:24:7f:a1:bf:d6:
75:01:83:f2:f6:9e:cc:83:ba:67:46:c1:09:a9:00:9b:a1:79:
2e:d2:9f:c5:f5:72:4f:15:8c:13:3f:0d:33:78:39:bf:34:c5:
88:22:4b:32:5a:44:a3:42:8b:e9:03:b4:92:76:0c:77:02:fd:
6a:81:6f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:06 2025 by rpki-client