Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/8h8LYAtmccXIuB42K5RbjIrf0KU.roa
File: 8h8LYAtmccXIuB42K5RbjIrf0KU.roa (raw, json)
Hash identifier: 5zEJxAd3dYrbb3qUKqexnoEUW5QnQ6w1veXHpWrJ7MM=
Subject key identifier: F2:1F:0B:60:0B:66:71:C5:C8:B8:1E:36:2B:94:5B:8C:8A:DF:D0:A5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13AE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8h8LYAtmccXIuB42K5RbjIrf0KU.roa
Signing time: Fri 01 Sep 2023 09:25:17 +0000
ROA not before: Fri 01 Sep 2023 09:25:17 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 175.183.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5038 (0x13ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:17 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=F21F0B600B6671C5C8B81E362B945B8C8ADFD0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cd:ab:53:a6:0b:a5:ae:ed:ef:8a:37:92:50:
18:ce:d6:ed:bc:5d:b5:e0:61:c9:97:ff:bc:a3:57:
fd:08:94:a1:53:b7:85:02:ae:5e:d3:28:6d:56:2c:
15:98:dc:d5:eb:b0:8c:ad:8b:1a:16:bc:d8:a3:ca:
16:a9:ea:12:5a:a1:0b:ce:2c:bf:e8:34:58:8c:75:
8e:08:b3:17:7c:41:01:a1:9c:23:7e:7b:35:9a:d1:
90:c2:86:dd:6e:9c:61:ae:fa:e9:c3:4a:a5:d4:85:
e3:4f:95:28:02:52:02:ef:5d:ca:e7:8c:32:6f:e0:
a4:bd:53:b2:29:e7:01:5b:d2:40:66:3a:8b:6b:d7:
68:3f:f1:1c:0c:37:67:5e:70:10:79:86:32:3b:f8:
e7:57:5d:51:99:67:38:d9:33:55:ce:0b:59:84:b7:
4c:98:05:28:89:4d:f6:e8:8f:a4:f0:e6:31:85:b6:
71:40:2d:52:ef:2f:8d:38:5f:55:6d:ca:86:40:06:
67:d8:aa:52:56:04:00:aa:c9:95:a7:46:67:62:e9:
25:68:a0:40:5b:d3:52:0a:1e:e0:9d:13:fd:84:f2:
a6:a4:62:ff:eb:cf:a2:3f:2b:97:03:f5:dd:3e:fa:
22:37:13:a2:6c:75:7e:e4:a0:64:f6:ae:de:4b:3c:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1F:0B:60:0B:66:71:C5:C8:B8:1E:36:2B:94:5B:8C:8A:DF:D0:A5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/8h8LYAtmccXIuB42K5RbjIrf0KU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.0.0/17
Signature Algorithm: sha256WithRSAEncryption
4e:c6:24:de:ba:24:e7:eb:4d:53:51:6e:e7:43:0b:a7:8b:7e:
dc:bd:e7:1d:26:04:15:42:37:79:6c:c5:cf:30:56:2e:89:f0:
5c:35:d6:79:eb:d5:cb:b7:9e:88:6e:0a:8c:0d:23:93:f6:10:
b7:15:45:cf:8c:7c:94:9b:fc:d1:03:06:8f:08:09:ca:80:29:
ff:ef:d2:7b:9d:94:58:0f:bf:0b:01:bb:a5:e2:0d:f0:fc:ac:
9b:33:b8:16:0d:2d:7d:c3:d8:83:5b:9c:fb:46:02:77:55:28:
46:76:6b:2f:49:fc:8a:57:36:04:ac:a1:c2:e3:66:f4:08:ae:
e1:1b:c3:78:57:25:5c:3b:cc:af:ea:df:d9:af:53:ff:1d:dd:
3d:f5:1c:14:97:80:f4:2c:8d:b1:75:4a:69:ad:28:15:f5:20:
3b:c6:b8:b5:dd:7b:3f:08:9e:6c:f8:43:cd:ed:73:95:59:60:
c4:56:4c:56:65:86:8a:7b:1a:c1:63:2f:0d:43:dd:36:b2:fb:
61:ff:74:d6:6f:7e:a9:9a:7e:99:0e:44:d0:41:fa:8c:b1:36:
12:77:21:71:37:67:30:8a:8a:fb:f5:b1:93:a7:0c:18:8d:b8:
9a:ac:35:a6:55:46:2e:ba:20:b8:64:2d:a2:aa:6d:04:53:e9:
37:ac:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:38 2025 by rpki-client