Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/35npDP5Nug3AeWrCHKKko2IrYEE.roa
File: 35npDP5Nug3AeWrCHKKko2IrYEE.roa (raw, json)
Hash identifier: 8YllciDaglJkVOJTJ+jLlmFR6tQ/T+TFAZ7V1bBw6Ns=
Subject key identifier: DF:99:E9:0C:FE:4D:BA:0D:C0:79:6A:C2:1C:A2:A4:A3:62:2B:60:41
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 107F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/35npDP5Nug3AeWrCHKKko2IrYEE.roa
Signing time: Wed 01 Feb 2023 10:28:38 +0000
ROA not before: Wed 01 Feb 2023 10:28:38 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 136543
IP address blocks: 115.30.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4223 (0x107f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:38 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=DF99E90CFE4DBA0DC0796AC21CA2A4A3622B6041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:e2:51:74:f1:c9:8b:b6:4b:52:2c:93:fe:
a6:45:0d:fb:62:60:8c:d3:0d:04:3d:03:bf:de:15:
b3:f0:5d:90:9c:f9:d6:c1:8f:40:06:01:f0:b7:9d:
28:33:f5:d7:71:86:3a:72:9c:c8:a5:15:da:f5:af:
41:32:94:3f:81:b6:fe:bd:44:8b:2a:aa:7f:f2:4d:
af:6d:f9:39:c6:e1:c1:b1:05:2c:d5:88:ea:f7:91:
ab:79:d8:d4:05:1c:7a:4a:e3:df:c6:e6:57:9b:e3:
14:38:b8:66:02:1c:d9:7b:c6:f4:8a:2b:3a:c8:f9:
b9:7e:66:b0:03:e1:b0:04:b4:5c:3b:e3:72:90:f3:
a2:7d:70:77:86:64:28:1d:e2:fa:f8:de:a4:9f:6e:
c7:9d:11:11:cc:87:ff:6d:7d:19:e5:6e:4e:44:c1:
62:a0:af:7c:a5:8c:75:b8:08:9e:aa:8d:2a:af:95:
a6:f5:49:86:83:1e:49:78:62:89:7b:a8:74:f5:ad:
90:83:05:99:99:5a:a8:3f:4e:f5:63:4b:76:78:c5:
76:f4:98:df:bf:05:43:e7:36:66:9c:79:20:05:20:
83:77:29:19:01:d2:70:49:38:79:43:52:2b:a6:3d:
64:04:f7:50:83:6f:7e:9e:d4:a4:12:1d:ef:f6:24:
4b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:99:E9:0C:FE:4D:BA:0D:C0:79:6A:C2:1C:A2:A4:A3:62:2B:60:41
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/35npDP5Nug3AeWrCHKKko2IrYEE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.65.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:6c:1c:95:a1:d9:41:3a:93:34:64:58:ec:71:98:76:33:a4:
37:dd:9c:5f:19:89:03:18:16:64:89:35:b8:db:ec:c7:0d:1b:
08:39:8a:39:3c:d8:48:5b:3e:e5:e0:c0:16:af:ff:4f:ed:18:
4b:7f:6a:c0:82:a3:89:ac:2b:15:1a:41:ad:53:f0:e7:51:7d:
62:74:3a:16:7c:aa:f0:21:a4:b2:80:5d:17:8a:3c:35:ff:80:
fe:88:ac:11:4a:1a:33:d0:a2:d7:60:c9:0b:ce:99:52:50:9f:
2b:ab:0e:1d:45:1f:6f:90:e2:35:44:51:0b:0b:01:9b:b1:5c:
44:8c:b0:c7:8c:24:52:66:fe:7e:f4:98:bd:51:ae:4a:6b:7a:
36:26:ff:d3:7f:af:a6:73:1a:83:7b:2d:66:f3:a1:a6:aa:c0:
e8:75:8c:2c:c9:ca:6a:b1:ab:4b:a2:13:e6:94:58:b6:df:9b:
c5:6a:c3:be:18:16:07:09:d7:f6:9a:88:8b:2f:dc:bf:19:9c:
66:cf:9d:93:8e:d5:3a:e4:f7:25:0a:fe:82:c7:b5:59:cb:25:
e9:88:3c:c4:94:80:0c:c2:a8:89:1d:8a:9d:67:c3:9b:2a:89:
f2:33:94:5b:db:ff:a9:5c:63:0f:eb:f5:55:42:ff:32:8f:72:
18:0f:c9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:24 2025 by rpki-client