Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/5hfbR064C3MVDNzLFozcA5LUe-k.roa
File: 5hfbR064C3MVDNzLFozcA5LUe-k.roa (raw, json)
Hash identifier: l1ldhdDeXcwUPSYI3oPMnS7gO4X12cbNDczDSbkaP5E=
Subject key identifier: E6:17:DB:47:4E:B8:0B:73:15:0C:DC:CB:16:8C:DC:03:92:D4:7B:E9
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5hfbR064C3MVDNzLFozcA5LUe-k.roa
Signing time: Thu 15 Sep 2022 02:43:24 +0000
ROA not before: Thu 15 Sep 2022 02:43:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 175.183.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:24 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=E617DB474EB80B73150CDCCB168CDC0392D47BE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ad:2c:38:75:8e:30:90:ee:25:6f:84:71:90:
da:4f:3f:96:38:d7:ab:63:b9:38:cd:97:1f:c4:a4:
cf:09:89:2f:3d:ed:ce:c9:8b:4c:52:be:77:ad:c5:
ef:0d:9c:e1:d1:85:64:6f:49:ed:52:21:08:c6:b4:
35:4d:f7:15:bf:9f:96:71:ab:28:36:1d:e9:56:38:
c6:92:67:1e:66:42:62:02:12:ad:be:48:bd:72:75:
2e:ab:76:19:b1:ec:35:ef:4d:4e:71:a8:e9:87:aa:
a1:29:00:d7:5e:0e:4f:3b:85:63:67:8d:0e:84:87:
bd:3b:a0:f4:c6:86:d8:ef:c9:6a:83:f2:a5:87:b0:
99:fa:fc:30:9e:58:13:50:7e:e4:0a:9f:34:cc:f0:
18:15:1d:c4:25:12:16:84:5b:19:e6:5b:35:58:bd:
29:73:79:69:2c:52:03:db:e8:87:98:a0:b9:9e:96:
ba:52:38:af:e6:7e:69:ac:61:59:0f:05:3c:1d:cd:
d9:71:a9:8f:ea:7f:8e:4e:ed:fb:6a:10:6e:40:b0:
ab:fd:08:61:5f:4f:05:e8:a6:ce:cd:8d:01:bb:ce:
b4:73:65:8c:88:51:c5:ce:f7:48:8a:57:39:23:03:
a8:ed:a8:84:2e:94:66:58:ce:dd:78:52:01:d5:16:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:17:DB:47:4E:B8:0B:73:15:0C:DC:CB:16:8C:DC:03:92:D4:7B:E9
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/5hfbR064C3MVDNzLFozcA5LUe-k.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.136.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:c2:65:30:c2:5e:de:f4:9a:30:ca:e9:a9:e1:a0:3d:9f:ea:
a0:cc:ba:65:42:46:56:3e:76:e8:d5:04:af:43:a3:b6:86:ed:
30:2b:36:ea:30:72:0d:d3:26:7b:91:fc:bd:5e:9b:49:d7:fd:
97:86:13:73:0a:0e:4b:d6:fb:c9:d0:20:1d:60:6d:16:d1:3d:
9d:40:7a:63:57:9d:75:a2:01:f0:5a:a3:8e:fc:de:32:69:e6:
ce:4f:03:1f:d5:ad:09:4f:b3:ab:f5:88:47:49:76:80:28:25:
d7:35:50:2a:80:2e:57:73:d0:1c:11:76:82:ae:d7:55:65:37:
7c:b3:a1:3a:e9:1c:96:70:92:42:cc:4d:a4:f1:ad:57:7f:18:
ad:aa:4f:0d:26:c2:c4:b0:7a:a2:a6:f8:48:e1:1b:00:69:34:
d0:27:b1:e4:10:61:7a:fb:05:66:13:d7:f9:1e:95:4e:ad:50:
f0:3f:8a:c6:7b:b8:6a:2d:5a:7b:3e:7d:d2:0c:a5:f5:74:aa:
32:8e:65:20:fb:d9:a8:cc:8e:20:d6:f9:b4:6d:85:8c:50:93:
35:fc:b7:8d:44:b2:b8:cf:24:6f:ae:2e:84:5a:29:72:b7:1a:
b4:88:b8:af:ea:e9:55:eb:de:7d:52:99:8b:7d:b3:6b:31:7b:
63:51:ff:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:02 2025 by rpki-client