Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/2HhjR6wcxaqk-PDveJHL6FZ7fm8.roa
File: 2HhjR6wcxaqk-PDveJHL6FZ7fm8.roa (raw, json)
Hash identifier: vmoIQHYHrNs9aJepaLR6SOK3exQ0J7w2qjMCotW2JcU=
Subject key identifier: D8:78:63:47:AC:1C:C5:AA:A4:F8:F0:EF:78:91:CB:E8:56:7B:7E:6F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E23
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2HhjR6wcxaqk-PDveJHL6FZ7fm8.roa
Signing time: Wed 29 Sep 2021 02:43:14 +0000
ROA not before: Wed 29 Sep 2021 02:43:14 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 203.73.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3619 (0xe23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:14 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D8786347AC1CC5AAA4F8F0EF7891CBE8567B7E6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:84:b8:2f:d0:4f:e1:00:5b:91:3b:f8:fb:61:
ac:43:79:3a:4b:bb:92:21:d7:11:5b:66:57:a2:99:
8e:5b:8f:32:ab:33:2d:ab:a8:a3:76:0f:68:15:4b:
fc:41:68:ab:fd:17:cc:ae:5f:e3:6b:1d:73:02:e0:
fe:8d:43:8c:6d:8b:53:b6:8a:d7:b1:f7:c3:b8:c9:
f0:a8:ad:fd:b4:1b:7d:3d:3f:81:2f:8d:55:c1:eb:
9f:02:bf:10:9f:98:43:c2:9b:a8:1e:45:08:10:53:
3c:d6:cd:61:9b:c6:d6:c8:ac:19:64:23:f9:cf:ca:
2a:1f:47:f2:d3:42:b7:f5:d1:91:65:e4:14:fd:6e:
ab:57:99:55:da:af:53:04:da:27:06:66:b4:f7:71:
f6:e0:a5:f2:2c:8c:60:84:d6:9d:bb:52:78:1a:01:
5c:f9:63:2b:f6:c6:1b:20:21:ba:69:88:e1:04:61:
db:df:34:6f:30:2f:90:d8:87:5e:19:b8:fb:9e:7b:
e4:8e:d8:0c:0b:51:0e:d6:c2:9e:29:7b:9c:bc:eb:
8f:be:0e:72:89:3e:23:7a:57:bb:94:d4:bb:c7:47:
6d:81:d0:97:ea:fd:ad:16:26:e0:91:54:5f:4f:d0:
b8:77:bd:be:ec:fd:a3:48:d3:d2:35:34:b4:f0:86:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:78:63:47:AC:1C:C5:AA:A4:F8:F0:EF:78:91:CB:E8:56:7B:7E:6F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/2HhjR6wcxaqk-PDveJHL6FZ7fm8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.73.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:ce:e6:38:e2:97:36:30:c2:b0:54:9a:2b:13:a2:63:68:49:
51:09:d3:35:06:a3:72:38:89:f3:c4:8c:c6:48:52:61:d8:31:
56:33:a6:d2:3e:da:71:ed:3a:ff:fd:41:99:98:6b:44:3b:c2:
d7:f2:a6:a0:f3:11:64:fb:c5:7c:95:fd:61:27:18:f9:67:f6:
85:19:d4:3f:f8:b1:6d:26:72:8c:57:6d:44:3a:78:2c:48:72:
dd:28:2d:03:58:f2:bc:9b:5d:8b:cf:66:33:ec:ae:97:e9:2a:
05:e2:ca:bc:ac:20:bf:fd:5e:a7:51:3b:80:c4:ed:94:53:61:
9e:65:d8:31:64:e0:6a:e2:00:bb:83:30:13:f3:2f:12:26:6e:
50:e3:21:5d:0f:62:c1:09:d5:cf:f7:e8:6a:19:1e:09:31:53:
26:64:c0:63:13:9e:ff:e9:d2:49:c4:4c:fb:6b:e5:a7:f8:eb:
a5:32:ec:92:4a:93:36:c2:46:a3:1c:57:fd:69:24:f8:d5:66:
47:a2:17:ab:23:90:63:fb:3c:39:04:5c:fa:29:d1:2e:bc:f0:
42:df:30:5e:ca:a8:ff:f9:cf:85:2a:d6:c5:db:59:96:6c:0a:
32:b2:f1:ed:21:f4:4b:c6:0c:80:a6:13:5f:91:be:f7:5e:1f:
f7:db:f8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:00 2025 by rpki-client