Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4fveLck3UAbnuv0bc0JH_cx6UiY.roa
File: 4fveLck3UAbnuv0bc0JH_cx6UiY.roa (raw, json)
Hash identifier: dx4u9AKlV9If83eHTvfdAl4YoZGCVH3GQtR0eLeOzlY=
Subject key identifier: E1:FB:DE:2D:C9:37:50:06:E7:BA:FD:1B:73:42:47:FD:CC:7A:52:26
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CBF
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4fveLck3UAbnuv0bc0JH_cx6UiY.roa
Signing time: Sun 07 Feb 2021 11:44:55 +0000
ROA not before: Sun 07 Feb 2021 11:44:55 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 220.229.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3263 (0xcbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:44:55 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=E1FBDE2DC9375006E7BAFD1B734247FDCC7A5226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:e0:e5:65:15:9f:8a:70:e8:c4:e9:c3:79:
ce:7c:f4:f5:07:90:a5:8e:8c:43:05:bb:ae:7e:bf:
43:bf:17:34:01:35:ea:87:b4:17:b4:b1:5d:eb:e6:
64:50:e7:75:44:38:0e:96:9d:c7:be:8d:89:3a:a7:
d6:dd:9f:06:08:44:06:2b:9d:d9:3d:ec:77:8b:a0:
66:8e:17:59:5b:a1:72:f7:1c:f4:75:a6:53:b1:2e:
42:1e:dd:b4:5c:9f:58:54:8f:3a:f6:52:12:e8:70:
cb:67:c0:c7:ff:b9:69:8d:84:85:46:8e:fb:b6:2d:
b4:15:d0:4a:1e:7d:8b:60:27:30:20:a7:c2:ec:e3:
ec:93:9d:91:1e:34:d1:6a:f2:94:08:84:2f:58:1d:
37:a0:46:c3:13:d8:27:70:a5:c0:49:0a:6b:f3:86:
0a:af:87:ed:65:b9:d0:89:72:05:c5:c1:52:c0:7b:
04:5c:0a:d5:2b:26:ed:97:f6:74:91:90:96:c1:d4:
de:2c:69:36:83:bc:65:35:f0:8a:2a:a3:89:df:00:
76:3a:0a:c4:5c:68:7a:e5:0e:9c:94:8b:1d:39:0d:
53:2e:9c:ee:ec:30:c3:d3:7c:8f:8d:88:f3:c5:91:
59:ad:d9:2e:b2:ac:ae:c2:c4:b9:29:a0:42:02:04:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FB:DE:2D:C9:37:50:06:E7:BA:FD:1B:73:42:47:FD:CC:7A:52:26
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4fveLck3UAbnuv0bc0JH_cx6UiY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:32:23:ef:37:2b:f6:ac:3d:3d:4d:74:12:a1:81:15:7b:81:
04:b6:ef:c3:24:f1:6a:ea:bd:9b:af:cb:c8:01:c5:b5:bd:b1:
68:5f:90:67:98:21:e5:c0:76:83:35:82:b7:99:76:fe:bc:b6:
04:a9:f1:53:5e:e6:07:ae:d7:66:aa:95:c8:7d:c9:08:cb:92:
d8:a4:d5:40:18:30:38:41:43:f0:97:25:17:b3:db:13:24:4b:
f7:c9:00:97:05:68:ed:07:75:fe:83:b2:a5:d6:09:f0:a7:00:
5d:b9:a6:9f:e1:f6:a5:cc:ba:3e:82:b1:b6:e5:e1:5f:af:80:
8a:ae:d8:bb:52:63:89:32:7a:3e:1b:bb:41:5c:ea:10:da:45:
d8:75:e0:a0:ff:64:90:e1:4f:f2:66:bb:dd:10:25:d2:de:56:
c0:d0:6f:e1:2b:76:ad:4e:95:63:26:30:0b:97:bd:57:7a:d9:
b4:c7:10:c5:e1:a8:cb:cb:37:c8:00:a2:eb:98:3b:1b:39:7e:
c7:e2:86:21:55:a1:d1:5e:ee:9d:0e:be:22:4f:cb:9e:dc:a6:
25:d3:b3:a3:b5:a0:7f:78:e8:63:70:2d:19:01:20:90:7f:04:
89:af:4f:54:8f:56:b4:91:aa:0b:c1:05:2f:d1:71:1a:f6:ba:
d8:62:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:26 2025 by rpki-client