Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7RPCmECVU6f1Il6DtljybyWeBKY.roa
File: 7RPCmECVU6f1Il6DtljybyWeBKY.roa (raw, json)
Hash identifier: 0mwO8xp87yNYCCvq8BbpDL2/9HUUk/OFzYg1LSXMUW4=
Subject key identifier: ED:13:C2:98:40:95:53:A7:F5:22:5E:83:B6:58:F2:6F:25:9E:04:A6
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1030
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7RPCmECVU6f1Il6DtljybyWeBKY.roa
Signing time: Wed 01 Feb 2023 10:28:15 +0000
ROA not before: Wed 01 Feb 2023 10:28:15 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 122.147.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4144 (0x1030)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:15 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=ED13C298409553A7F5225E83B658F26F259E04A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:62:b6:e5:c6:25:01:7d:46:1f:5a:67:ab:
5f:d3:2b:5c:d0:5c:f0:1d:15:5b:6f:cb:d3:dc:b7:
55:8a:72:df:81:e6:96:91:37:2c:4c:a4:a2:99:d5:
74:88:77:51:52:d7:af:2b:45:9d:05:9d:ee:9c:6f:
60:3a:ba:cb:76:36:19:f8:a0:1b:9b:db:65:4a:2f:
6e:e8:5f:00:70:84:69:20:c8:64:39:ec:6f:c7:87:
23:52:d8:fd:76:2d:ff:9a:eb:f0:d9:df:8c:80:d5:
65:52:b1:2d:18:3e:c2:e9:a5:72:11:fe:e9:81:da:
71:a4:a7:f6:17:b3:15:dc:c8:50:f7:93:22:c1:fd:
e6:5b:f5:3e:2b:65:e1:38:b4:39:6c:9e:5e:5c:77:
6a:9c:af:a6:7c:c2:5c:e9:e4:c5:4a:ba:7c:f8:5e:
ee:78:24:fa:c8:77:9a:0b:29:7c:cf:40:2c:7d:b9:
98:e8:47:6e:0b:21:ac:90:c0:e9:0a:f1:10:fa:c8:
c0:b5:52:d7:69:e9:86:76:48:53:96:f9:6d:b7:8b:
48:6d:f6:c9:f7:87:ca:b2:68:02:93:9f:49:a3:f0:
b2:49:bf:8c:df:27:41:11:1b:32:98:9c:fa:1b:b0:
68:9b:61:b3:18:b9:56:ec:c7:6f:c8:a7:21:3c:93:
9f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:13:C2:98:40:95:53:A7:F5:22:5E:83:B6:58:F2:6F:25:9E:04:A6
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7RPCmECVU6f1Il6DtljybyWeBKY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.16.0/21
Signature Algorithm: sha256WithRSAEncryption
54:5d:3d:73:5e:92:af:f4:ae:77:b5:ed:02:1b:c3:fb:c5:68:
fb:79:ce:7a:7d:10:bb:ec:d1:d3:e3:69:94:59:ed:4c:12:5a:
ce:bf:37:04:21:a4:52:6b:27:04:6c:d8:e7:85:65:d7:44:db:
e1:b8:60:ff:55:80:74:c0:07:0c:09:56:35:8e:76:5e:ca:90:
5a:c1:63:0f:db:53:e1:23:1c:c4:ce:62:cd:b6:21:4d:a6:54:
11:16:c1:5d:83:67:6d:20:a6:6b:19:1a:b5:1b:88:3d:27:b8:
fc:bc:7a:d1:b3:7d:cc:c4:30:a2:8c:0d:df:50:97:84:6f:85:
44:e6:22:27:b5:02:9d:a3:8e:30:2a:5e:36:01:e4:07:7f:c0:
a8:a2:d7:18:95:27:d0:01:fb:fd:fb:8f:a6:19:cd:4b:7c:a4:
90:a9:09:db:8c:81:c3:90:58:e4:49:cb:b9:da:d1:e5:b1:a9:
72:30:fc:43:51:29:d7:d9:61:6c:0f:46:8b:2c:ba:65:3a:5a:
05:3e:39:48:a5:9b:19:e5:75:a5:49:75:9e:ca:ff:cf:1c:a7:
ec:9c:08:0c:d7:25:7d:ef:a8:e8:41:bd:8e:4a:79:29:cb:34:
ea:f0:80:56:22:bc:eb:0c:26:e3:cd:95:bb:55:88:f4:a6:7f:
f9:dd:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:30 2025 by rpki-client