Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6DRYUqAEi3Jiwu0BybginHKVQyE.roa
File: 6DRYUqAEi3Jiwu0BybginHKVQyE.roa (raw, json)
Hash identifier: ELNyyxoJDIXqaDQbwgkdpiorpRMZXMhNTUuEZNBvXkk=
Subject key identifier: E8:34:58:52:A0:04:8B:72:62:C2:ED:01:C9:B8:22:9C:72:95:43:21
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1865
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6DRYUqAEi3Jiwu0BybginHKVQyE.roa
Signing time: Mon 10 Feb 2025 14:07:55 +0000
ROA not before: Mon 10 Feb 2025 14:07:55 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 211.78.128.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6245 (0x1865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:55 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E8345852A0048B7262C2ED01C9B8229C72954321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:63:61:98:a9:56:4b:d9:a2:cf:58:3b:5c:
4f:63:d3:84:81:cd:22:2b:82:00:04:c5:01:d9:f2:
47:66:13:4a:ab:89:91:93:3e:52:27:22:a6:b0:7f:
e8:b9:99:87:41:d2:15:48:af:0d:69:99:fb:1f:bb:
b4:36:67:60:b5:b4:d0:4c:0c:d8:aa:ce:99:11:b8:
c0:b7:d9:58:da:cf:27:6b:0f:c1:8a:de:e9:c4:74:
65:34:78:15:e1:fc:4e:36:13:e4:fd:34:a4:e0:6a:
a9:9b:64:71:2b:57:43:bf:8c:63:ac:45:a3:27:6e:
de:1b:2d:2a:99:68:81:60:42:b0:1f:3c:a2:32:d0:
68:13:86:ef:89:2d:46:46:13:9f:c3:3d:20:12:a0:
60:ba:5c:8b:7d:d6:50:af:83:5d:d9:58:98:3f:78:
49:87:c1:c2:3f:49:c6:de:8a:87:74:68:61:d2:b1:
c2:1d:16:95:a2:b8:31:e0:2a:92:3e:5a:f4:cd:a1:
16:85:2c:2d:d0:7b:82:94:c1:65:49:4d:65:e9:34:
a6:dc:69:60:d7:d1:84:8d:a3:d8:f2:63:a1:3b:2c:
83:71:08:63:48:ab:8b:66:d5:db:6e:c3:20:c2:74:
e6:6e:f2:7d:fa:23:d7:05:0f:ef:bc:cf:14:9e:bf:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:34:58:52:A0:04:8B:72:62:C2:ED:01:C9:B8:22:9C:72:95:43:21
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6DRYUqAEi3Jiwu0BybginHKVQyE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.78.128.0/19
Signature Algorithm: sha256WithRSAEncryption
63:ef:d5:4a:5f:f0:85:1f:03:39:b9:71:eb:ad:51:85:65:84:
81:78:e5:d7:ee:53:e1:8a:d8:56:e6:68:59:d3:25:f9:4c:53:
f0:9c:94:c2:32:6e:85:85:dd:6b:8f:8a:1e:b7:3d:8b:aa:b5:
41:ae:10:c2:04:c8:86:0b:07:6b:b6:5b:26:f4:0f:69:3a:5b:
ff:9e:b6:7e:91:0c:2c:da:73:fa:e6:18:0c:f9:f7:d7:a9:3b:
d4:a4:51:64:b1:7e:13:59:ca:9b:b0:bb:f6:7d:1c:f1:7f:ed:
b5:16:be:1b:4a:ce:15:77:69:7a:f6:42:9e:86:cb:8d:f3:77:
cc:f6:14:2e:40:46:7a:19:98:5c:c6:98:6d:b9:a0:f2:f0:64:
a5:ce:7e:dd:a8:17:0f:ab:5f:93:3b:23:a9:0b:6b:30:3e:a1:
98:f6:fb:24:4a:08:64:e3:20:6e:b2:51:35:dd:17:f9:21:d5:
a2:09:cb:e4:d0:ef:7d:79:27:7c:8a:38:29:bc:c5:7a:25:94:
75:4c:03:42:ea:40:66:84:b3:42:49:0a:ba:2c:c2:26:12:a0:
63:ec:2c:3c:f1:79:e0:f5:b4:8d:32:2d:bb:32:a7:2e:91:84:
a0:c3:b0:c3:a5:76:34:69:8c:18:e2:46:0e:ae:95:01:fd:4c:
c1:c8:00:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:28 2025 by rpki-client