Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/7WHpLkBMLZnFaZkiEQHhQrLefhk.roa
File: 7WHpLkBMLZnFaZkiEQHhQrLefhk.roa (raw, json)
Hash identifier: Oq7dK7EmHwID6D5pbDmgAExebcyM9dDi/lhEujRF0N4=
Subject key identifier: ED:61:E9:2E:40:4C:2D:99:C5:69:99:22:11:01:E1:42:B2:DE:7E:19
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 132D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7WHpLkBMLZnFaZkiEQHhQrLefhk.roa
Signing time: Fri 01 Sep 2023 09:24:35 +0000
ROA not before: Fri 01 Sep 2023 09:24:35 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 60.245.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4909 (0x132d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:35 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=ED61E92E404C2D99C56999221101E142B2DE7E19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:41:af:0f:51:64:7e:6a:d4:1a:01:f9:52:
96:80:cf:be:f9:f9:77:96:ef:fe:82:97:e0:18:a2:
b4:cb:57:86:b3:dc:3b:58:88:48:1b:70:01:e5:82:
60:f1:17:fe:e6:1c:91:12:8e:10:64:c5:c8:f7:46:
ae:2a:6e:47:f7:09:15:63:54:44:84:7e:0b:27:e5:
2f:2d:40:86:45:a1:ab:03:fb:69:43:25:c4:d1:33:
b5:05:fc:20:df:a8:4f:c7:d5:a4:c0:37:93:43:32:
24:23:21:7d:fe:ad:f2:56:31:21:58:81:b9:24:5f:
dd:ce:d6:66:2f:1c:2f:23:17:ac:f2:8e:11:88:63:
7d:05:a5:bf:50:c6:b2:b2:47:e3:15:27:6d:00:f7:
14:b4:0e:5e:7c:4d:7f:25:55:e0:6e:8c:d2:0d:4a:
20:4f:e7:43:ef:0e:43:24:d8:c7:fc:34:97:85:85:
c4:ea:74:19:35:84:8d:e5:56:b6:db:29:4f:6b:c7:
f2:b3:33:5a:72:d0:cc:49:da:28:a6:43:80:f3:58:
f2:ee:58:cc:21:67:86:25:5d:3b:6d:e0:18:57:38:
81:4a:09:e8:0e:ce:4c:1f:db:f0:a6:0f:41:29:11:
90:2c:63:b2:bf:2a:fb:14:c5:07:e0:16:5e:2b:5d:
77:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:61:E9:2E:40:4C:2D:99:C5:69:99:22:11:01:E1:42:B2:DE:7E:19
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/7WHpLkBMLZnFaZkiEQHhQrLefhk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.64.0/19
Signature Algorithm: sha256WithRSAEncryption
23:70:c7:e6:fc:2c:a7:76:fa:d9:f9:69:9a:87:b2:c1:bc:9b:
0b:28:43:50:fb:b3:bd:83:be:7c:38:51:16:d6:69:15:82:74:
11:1e:57:2f:a6:c2:ca:8b:11:a5:cc:0e:8f:b7:90:8d:72:5a:
6a:b6:74:57:4c:78:92:dc:03:10:aa:8a:cf:f1:bf:12:9a:e4:
b8:63:45:9c:1e:10:12:8e:ce:3e:e8:78:28:b7:57:97:10:1b:
fd:bf:6a:af:83:3e:db:31:d4:b7:18:f8:42:cc:14:3b:1c:2c:
cd:bf:66:5b:e2:61:e4:f6:60:d3:71:d2:24:a1:f7:6c:e5:5a:
b9:2c:e3:71:14:6c:25:00:ad:81:da:c9:30:f7:2e:c0:f4:0a:
11:d9:29:6d:7d:86:43:ae:da:3d:58:d8:0a:68:dc:a6:ff:73:
f5:1c:ca:c4:2b:28:e7:8b:24:7a:17:67:f4:aa:d3:9e:f3:11:
f6:33:e1:03:a7:f0:91:8a:1e:ff:ab:c1:31:ec:6c:46:11:ea:
56:65:82:ed:12:95:cb:ac:4b:af:45:39:5c:35:b4:a8:98:68:
5b:6f:bc:f4:d3:39:dd:a3:a5:a3:e2:f9:51:37:34:61:00:70:
ca:9f:72:69:b4:80:b0:dc:2d:83:6a:77:f6:8d:07:23:e9:46:
d7:81:f6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:56 2025 by rpki-client