Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/6sIvrxCchI7ZPT9HIRNiIEip60U.roa
File: 6sIvrxCchI7ZPT9HIRNiIEip60U.roa (raw, json)
Hash identifier: m6bDKfbfzaiTkGLDbqkZsa4gLvCGnPjIQfjTAd/CKiQ=
Subject key identifier: EA:C2:2F:AF:10:9C:84:8E:D9:3D:3F:47:21:13:62:20:48:A9:EB:45
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17C0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6sIvrxCchI7ZPT9HIRNiIEip60U.roa
Signing time: Mon 10 Feb 2025 14:07:14 +0000
ROA not before: Mon 10 Feb 2025 14:07:14 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 38851
IP address blocks: 122.147.160.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6080 (0x17c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:14 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=EAC22FAF109C848ED93D3F472113622048A9EB45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ac:a7:23:5c:94:0a:ab:92:98:1b:75:a1:a0:
9e:4c:bf:63:47:38:18:48:c2:c0:58:b6:bc:a2:80:
58:90:56:4e:ab:20:63:ed:f7:a0:e0:d2:1c:3a:c0:
96:57:aa:cc:46:4d:5d:9b:b7:c5:44:3c:b8:61:10:
45:c2:a7:0e:cd:18:61:36:28:52:a0:25:ac:ad:f0:
3d:4d:7e:5b:af:ec:1b:93:ae:30:08:3e:1f:48:5e:
d2:6a:46:78:00:b7:ed:7b:ef:1b:e4:f5:54:89:4d:
71:4f:b1:b9:43:cc:f1:9b:b7:1b:52:b7:6f:c0:63:
22:0a:2b:4b:7c:a0:13:8f:5b:af:32:d0:de:2f:1e:
38:a8:58:ad:d4:38:33:53:bf:77:2b:ad:51:00:b0:
05:ab:85:f3:47:83:2e:50:dc:3e:9a:2e:f6:ca:c0:
95:7e:ba:07:f8:70:44:4c:33:08:6a:a0:f4:60:8e:
4f:d5:6e:e9:df:a8:1c:b3:ff:22:e2:1b:f8:2f:a1:
ff:88:6d:82:2c:61:98:66:42:28:36:55:39:ed:fa:
4c:86:ca:88:19:e6:ba:00:45:f0:28:f5:d3:2d:bd:
e5:9b:70:eb:3c:be:d9:08:5a:3b:5b:9a:64:4f:9f:
a2:00:6d:d9:25:bd:d1:33:8e:80:eb:f7:02:14:cc:
81:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:2F:AF:10:9C:84:8E:D9:3D:3F:47:21:13:62:20:48:A9:EB:45
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/6sIvrxCchI7ZPT9HIRNiIEip60U.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:78:d2:18:5e:4d:ae:88:84:c7:9d:07:ac:c1:26:e3:cf:55:
71:aa:81:d5:f2:3d:52:7d:fa:4c:21:31:e9:63:07:7b:43:88:
95:98:4d:73:f9:88:17:cc:43:3b:ed:b2:1f:83:b2:cb:cc:77:
4b:e4:8a:28:be:ff:f8:a5:db:6e:1f:0c:32:7d:6d:3f:70:a2:
9f:ee:39:0d:bb:63:2a:46:ba:1f:63:8d:c9:17:53:5c:d8:cc:
1d:42:a7:a1:2d:1f:e8:ab:ed:a2:92:e6:d2:22:47:b6:6c:cb:
74:f0:e7:e5:95:1b:44:b3:80:2a:7c:1f:79:a6:c7:52:23:2d:
41:2e:ed:95:51:49:2c:a2:5b:be:dd:89:1d:71:43:d4:29:57:
8f:f1:a2:8f:c5:42:75:de:ef:e3:d2:0a:8f:7e:6e:9d:d5:f2:
46:25:42:f2:62:fb:8d:95:1c:f6:fd:e8:da:06:b2:b6:9d:f4:
91:c0:85:9f:3a:20:14:f5:e7:40:a9:64:fe:9f:f4:41:fe:2d:
47:6a:bc:fc:74:92:b1:68:f5:00:f3:33:22:9a:5e:43:94:81:
81:52:64:e6:4e:11:90:16:a9:29:7d:67:1e:82:2f:f4:5f:f3:
fe:78:8b:b0:0f:41:81:4c:58:0b:97:90:f3:1d:ce:1a:54:c3:
34:5a:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:23:31 2025 by rpki-client