Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8JXgqWltGTihBLsb_MsvP8I7LuU.roa
File: 8JXgqWltGTihBLsb_MsvP8I7LuU.roa (raw, json)
Hash identifier: TfFgzM1pR8hqRpK8GIv8I4gpOszImqRNnyIUFD3G7bM=
Subject key identifier: F0:95:E0:A9:69:6D:19:38:A1:04:BB:1B:FC:CB:2F:3F:C2:3B:2E:E5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1387
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8JXgqWltGTihBLsb_MsvP8I7LuU.roa
Signing time: Fri 01 Sep 2023 09:25:06 +0000
ROA not before: Fri 01 Sep 2023 09:25:06 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131602
IP address blocks: 218.210.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4999 (0x1387)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:06 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F095E0A9696D1938A104BB1BFCCB2F3FC23B2EE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f4:31:e1:f9:8b:57:81:5a:50:97:dc:27:bf:
c8:53:0d:06:46:3f:bd:f8:36:24:6a:11:5e:e5:54:
71:f7:d0:52:c2:d8:7d:37:a1:c0:fa:16:b0:97:f3:
e4:6c:7a:05:f0:72:fe:4c:d7:41:74:0d:24:c2:8d:
36:a5:92:22:72:48:c4:25:c7:a2:30:53:b4:13:84:
04:8b:14:94:c9:70:5c:79:84:63:00:95:9d:1e:e3:
8e:dc:60:93:20:4a:91:0e:97:06:96:bf:fc:8b:f6:
f6:d2:04:20:a8:af:c2:7e:72:bb:0b:75:22:05:7e:
80:e0:95:91:7c:95:69:86:33:ff:42:d8:ef:e1:0e:
38:70:6a:5b:43:b2:01:91:c8:10:bf:73:0e:da:3c:
90:94:0e:bb:ed:ac:ce:e7:77:47:a0:0d:56:c7:b7:
db:7e:35:6a:44:17:66:5e:b0:5e:20:b0:9a:30:4b:
5f:be:fb:05:a9:5c:42:23:a0:b0:ea:60:32:65:29:
6b:07:c8:f6:02:7d:53:3e:cf:2a:ff:64:13:ba:c9:
72:d9:e5:0b:cd:0b:25:52:79:71:0c:07:c0:c1:8c:
2f:f0:e8:0f:41:30:72:d0:4a:31:bc:33:16:00:61:
66:92:e5:e1:8a:4f:11:35:c5:25:1d:de:87:c0:33:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:95:E0:A9:69:6D:19:38:A1:04:BB:1B:FC:CB:2F:3F:C2:3B:2E:E5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8JXgqWltGTihBLsb_MsvP8I7LuU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.32.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:01:76:db:ea:a2:0f:6d:43:b3:30:f3:0f:94:7a:88:24:19:
c5:a3:8c:1e:62:06:43:24:cc:1c:99:f6:9c:99:4e:12:ee:2f:
4c:93:89:bb:56:8c:38:9b:40:72:21:d4:60:b9:6e:80:4c:46:
c0:b8:d3:f4:83:8d:a3:07:4f:f6:00:a1:17:55:15:25:70:80:
d6:d3:1c:c7:ab:96:51:91:1d:df:2f:f8:ec:ab:7c:00:30:55:
f9:1d:a4:90:0a:da:28:09:83:02:f8:69:a1:cf:c9:f2:a8:a0:
41:7c:7c:a2:01:a5:74:9b:1f:35:46:e7:70:58:b2:0c:02:c6:
97:54:b9:62:25:23:5f:e6:d0:4b:95:5f:07:ce:7a:4c:e9:f4:
27:d3:fb:c6:11:6f:1c:6f:64:ed:d0:50:56:21:5d:ab:6a:82:
80:b8:6a:83:10:f0:ae:04:17:36:e3:26:e9:1f:de:88:d8:d2:
74:f6:cf:86:bc:44:e6:e8:1f:0c:b9:b9:32:68:d9:7e:ed:39:
df:68:16:06:a8:08:27:6f:dd:9b:de:ae:e1:74:a0:ab:56:a8:
27:0c:b2:ba:b2:2a:b0:54:bf:7f:d3:96:71:73:21:4a:0a:af:
d7:fd:00:7a:4b:eb:0f:d6:81:19:88:74:e6:ad:7c:a9:9b:81:
32:e8:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:15 2025 by rpki-client