Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5CXRzDcQG_GnzfJ65Vpa0uWR97Q.roa
File: 5CXRzDcQG_GnzfJ65Vpa0uWR97Q.roa (raw, json)
Hash identifier: nu1IwlrKyNFe/w/79aynsb1PqhC+TfEVetIv4t0wH9Y=
Subject key identifier: E4:25:D1:CC:37:10:1B:F1:A7:CD:F2:7A:E5:5A:5A:D2:E5:91:F7:B4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 139B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5CXRzDcQG_GnzfJ65Vpa0uWR97Q.roa
Signing time: Fri 01 Sep 2023 09:25:12 +0000
ROA not before: Fri 01 Sep 2023 09:25:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 123.51.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5019 (0x139b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=E425D1CC37101BF1A7CDF27AE55A5AD2E591F7B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0c:0f:23:e6:24:6c:1b:5e:f5:c8:b3:ce:e2:
c0:76:31:47:ef:49:10:92:53:d4:c8:df:e1:5c:3d:
50:6a:34:a6:8e:e6:55:2e:bd:3d:4e:b8:ef:1b:01:
a7:4c:25:32:76:c4:f6:4a:de:de:25:f5:21:80:d2:
45:ec:ae:d5:86:f1:d4:9c:10:2e:ad:45:3e:2b:1d:
6f:6f:63:7c:9d:08:77:66:ab:0a:7e:df:d8:48:3e:
1f:0f:2e:c9:f8:7f:f1:91:4b:38:65:ab:df:39:8d:
89:ad:7b:d1:10:57:d2:b3:db:27:f2:3f:4f:dc:a0:
7b:72:de:08:f6:be:fb:d6:73:df:8d:b6:b4:8e:f7:
f3:28:a5:ff:de:12:71:3b:77:04:56:62:c3:e7:7c:
a0:d2:92:35:1c:3d:ea:1f:a5:d8:3a:5b:fc:ce:b5:
96:12:11:e1:61:30:8c:8a:7d:8d:5d:d8:89:9a:47:
73:01:3b:4e:ae:9c:e7:a1:cc:f8:13:5a:dc:1b:89:
3e:f3:a7:3a:a6:33:29:93:b7:e3:4f:71:57:91:de:
63:b2:8e:81:8c:25:13:ce:ba:5f:99:c4:90:06:93:
f4:23:82:bf:ea:79:ba:66:23:43:4f:bd:c8:ab:1c:
07:f3:96:2a:b3:24:94:50:6a:f5:fe:15:2f:c3:d2:
ac:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:25:D1:CC:37:10:1B:F1:A7:CD:F2:7A:E5:5A:5A:D2:E5:91:F7:B4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5CXRzDcQG_GnzfJ65Vpa0uWR97Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.51.128.0/17
Signature Algorithm: sha256WithRSAEncryption
1f:4b:c4:fe:85:55:28:67:b0:ca:9a:f9:40:86:4a:5b:32:8f:
fc:b7:73:93:d8:49:47:56:ef:f6:c3:a4:94:0b:ed:77:73:5a:
19:95:f5:a4:88:b9:f2:a9:98:40:38:77:4c:00:9e:59:a5:0b:
52:8b:60:2e:2e:1d:02:72:79:5c:74:be:29:b3:40:f1:20:e1:
2d:e8:b5:a2:4d:d7:35:6d:e0:16:58:fb:73:7b:8d:09:f0:4a:
45:f4:75:8d:69:d1:f7:e0:c9:eb:9b:78:41:86:fb:ad:ee:03:
b7:e0:85:f9:dd:f9:aa:57:e6:f6:0d:2b:b4:08:ae:49:1d:05:
ec:7c:57:98:b9:d3:1c:2f:3c:73:83:5e:0e:60:2a:f7:2b:47:
87:4d:a1:5b:0d:64:b9:52:ce:de:4d:25:ae:77:9f:54:1f:05:
9c:47:06:60:e1:25:99:6c:24:70:6d:c4:3a:e4:1f:61:b9:72:
ee:3f:50:bc:ca:77:20:dd:82:02:2d:c0:61:ba:0e:ac:5f:20:
b5:23:df:82:9f:e4:a6:e0:90:68:ad:c0:63:d9:91:f0:20:83:
06:3b:7c:46:19:73:53:dd:c8:f2:3e:81:54:ad:6f:4c:6e:62:
9c:06:48:4c:a5:c5:df:fb:61:07:f4:10:76:21:53:b2:5d:9b:
3c:35:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:41 2025 by rpki-client