Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6CofFNHrN_cPaZNLgvZqaQbu6us.roa
File: 6CofFNHrN_cPaZNLgvZqaQbu6us.roa (raw, json)
Hash identifier: IK3xBhLHbLIXPhWMnQE+Ze18i19rO68PLx843BL7/sw=
Subject key identifier: E8:2A:1F:14:D1:EB:37:F7:0F:69:93:4B:82:F6:6A:69:06:EE:EA:EB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0ECA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6CofFNHrN_cPaZNLgvZqaQbu6us.roa
Signing time: Wed 29 Sep 2021 02:43:59 +0000
ROA not before: Wed 29 Sep 2021 02:43:59 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 123.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3786 (0xeca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:59 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=E82A1F14D1EB37F70F69934B82F66A6906EEEAEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:00:cd:5a:8d:75:15:d1:79:61:d3:a3:58:
c7:50:d2:3d:af:65:ce:fb:ab:66:d9:4a:fc:4d:b8:
55:6f:bf:e6:a5:8e:60:7e:cd:e0:25:3d:ff:c9:fd:
52:ca:da:0e:b4:76:ea:eb:b6:09:a1:45:c5:32:c3:
f2:92:d1:38:3c:50:8e:7f:1f:70:1a:0e:17:12:2f:
1d:47:a3:ea:7c:cc:8a:de:0f:a1:1b:fa:f9:06:86:
f0:ca:6e:f9:c7:3f:6d:02:19:76:72:6b:56:7b:6e:
37:a0:46:ab:70:a4:4a:a0:b3:8f:18:ad:a2:76:85:
b7:f5:3d:18:9a:f2:30:6b:d2:51:aa:9d:9e:da:02:
4f:de:12:a0:fc:2c:6c:4e:75:7a:c0:6f:a3:b8:79:
09:75:c4:75:6e:6a:5d:8c:72:ef:9c:95:0c:e5:9e:
43:10:67:02:00:a6:eb:cd:3a:d6:25:7f:7a:12:57:
f6:ff:bd:5c:7a:9c:cb:b1:ff:78:86:41:76:06:7f:
9c:e7:68:86:c0:62:f6:0d:91:03:fb:9d:35:fb:f6:
38:5c:b6:1f:6f:2b:23:e9:e7:3d:eb:de:68:88:86:
9d:c4:d1:45:bb:4f:f1:e7:47:eb:97:5d:38:97:de:
a5:6a:bb:97:20:79:e4:83:51:d5:b2:2f:2d:43:6f:
a5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2A:1F:14:D1:EB:37:F7:0F:69:93:4B:82:F6:6A:69:06:EE:EA:EB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6CofFNHrN_cPaZNLgvZqaQbu6us.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.204.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:b4:a2:f1:ca:a4:c2:5b:15:80:3d:36:6d:81:18:58:3b:ed:
9a:c7:d3:84:cc:99:a6:0d:60:1b:28:fb:f5:fb:26:79:96:8e:
73:15:ad:6c:bc:69:2f:cb:4f:bc:ab:35:4d:5b:3e:9d:21:17:
e5:2d:bf:73:60:6d:cf:07:26:56:d9:ac:f7:bb:be:75:a7:f7:
bd:1f:b4:22:b4:3a:75:ae:1d:b8:7e:6c:eb:3e:7d:7b:d2:28:
3a:95:45:a9:4b:3e:19:dd:84:df:2d:2c:f7:98:26:e6:1b:1e:
09:b6:7d:79:bd:42:a5:89:fd:10:3c:57:bf:5f:08:31:70:59:
e7:2e:98:87:49:8e:8a:35:0d:9b:4b:aa:7f:bf:28:18:27:4c:
51:7f:65:9d:c0:7e:10:d9:6f:0a:bd:f2:85:a2:ae:83:cb:60:
57:15:20:70:65:1b:33:7f:c9:c0:32:f9:7c:00:51:73:df:0a:
56:f5:86:4c:fd:8b:de:12:b8:87:9e:4c:31:e0:ec:f3:aa:cf:
6f:cb:25:26:64:c2:26:10:57:7d:1f:76:bd:e7:e6:bf:02:db:
e3:5c:e2:bf:9b:ba:bb:15:f6:e3:c7:33:db:8c:48:5a:b4:b0:
11:93:dd:11:e0:2c:95:f6:1d:ed:7c:7d:b0:2f:61:e1:02:08:
cd:e7:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:14 2025 by rpki-client