Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/9f258HYZYUKT5RioZ_wzWrCa7KU.roa
File: 9f258HYZYUKT5RioZ_wzWrCa7KU.roa (raw, json)
Hash identifier: 0Uios95ZGr4kLDDPPCYzxBcOgjxUQwb3h8BgoS7vzuQ=
Subject key identifier: F5:FD:B9:F0:76:19:61:42:93:E5:18:A8:67:FC:33:5A:B0:9A:EC:A5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1855
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9f258HYZYUKT5RioZ_wzWrCa7KU.roa
Signing time: Mon 10 Feb 2025 14:07:49 +0000
ROA not before: Mon 10 Feb 2025 14:07:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 115.30.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6229 (0x1855)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=F5FDB9F07619614293E518A867FC335AB09AECA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:d8:21:fb:40:21:16:a8:59:4d:0c:85:b5:
2a:d5:24:18:c7:8f:cd:cc:d5:88:8f:39:d0:3f:2f:
f1:85:cb:a3:0c:9a:5e:fd:e1:78:11:1b:0a:0b:b6:
e1:aa:81:00:fb:3c:1a:ef:f5:65:a0:ca:04:1b:44:
cc:1a:2a:33:c3:c8:2b:ec:f9:0f:8d:4c:91:77:9e:
28:8d:e7:ed:6a:79:dd:b7:d3:c4:08:d7:39:c9:38:
22:93:e9:0e:2c:24:5a:58:95:52:05:31:6e:5a:ca:
84:21:bb:9f:99:a3:31:d4:ee:89:47:79:89:4f:ab:
4f:d3:fe:1a:18:8d:60:5b:09:32:d3:d2:30:6a:53:
04:67:d4:02:ca:9c:33:fe:8f:b7:8c:44:72:e6:6c:
e8:ed:da:dd:b3:68:a6:5e:8a:f0:5d:b9:b6:32:e7:
bb:24:6f:56:7e:60:ee:01:e2:41:14:a0:3e:73:1e:
80:fa:47:96:db:43:b1:00:b0:9b:63:20:28:8f:2f:
23:b4:24:a5:db:e5:26:81:91:fd:16:42:55:5d:3f:
bb:12:21:9f:11:8c:7b:80:5a:30:6e:c9:d4:62:3f:
7a:92:94:2e:96:48:ee:26:07:39:5f:5f:e3:51:a6:
e1:b0:60:df:c9:e2:3b:19:d5:9c:0a:5d:74:85:cb:
9f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FD:B9:F0:76:19:61:42:93:E5:18:A8:67:FC:33:5A:B0:9A:EC:A5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/9f258HYZYUKT5RioZ_wzWrCa7KU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.64.0/18
Signature Algorithm: sha256WithRSAEncryption
37:91:86:95:e6:00:b2:eb:5b:7c:1d:0c:92:66:b7:8d:ce:60:
20:69:e2:8f:fd:70:9d:be:42:61:22:e8:3e:dd:88:82:f5:51:
8d:7f:01:7c:4e:a9:ba:69:9e:b1:34:0b:96:30:16:c7:0c:79:
30:b4:d5:c1:cc:9c:ad:90:60:42:57:42:8e:0e:b4:0c:38:cb:
65:ae:cd:ac:0a:7a:18:6f:4e:de:8a:42:f4:0a:e1:10:6b:4d:
73:d6:fa:6a:51:8e:fa:4a:bd:5e:63:9f:94:a5:80:e6:aa:e0:
c9:91:6a:1a:b0:de:15:43:4c:1c:8d:91:c1:f8:28:07:df:8e:
30:b4:a5:8a:36:e4:3d:5c:e9:d2:fa:bc:e0:2d:ba:da:2e:45:
bf:c0:66:c9:99:da:d5:2e:64:47:9d:dd:02:bc:67:88:77:2f:
1c:6b:73:e9:53:b3:2d:c7:18:6b:98:db:e4:31:2f:6f:a6:6f:
67:6b:57:d8:da:d2:f9:cb:f3:a5:0d:c8:d8:71:27:ad:d9:a4:
cd:4e:75:35:7d:20:69:80:93:48:82:c1:3e:96:41:08:35:d1:
34:c0:b8:93:3f:b3:d8:fa:07:1b:23:eb:fe:68:ba:ff:00:32:
94:d6:f9:25:26:a2:78:56:9c:14:18:b4:70:3b:c7:c2:a3:5f:
86:4e:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:07:58 2025 by rpki-client