Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/AqvfMf2Ug0mfauEpEJxVf47XyjQ.roa
File: AqvfMf2Ug0mfauEpEJxVf47XyjQ.roa (raw, json)
Hash identifier: Sh0Opfk9qwAV4xSBQT/7dhajFsuup6+8TItx4sQ8uxM=
Subject key identifier: 02:AB:DF:31:FD:94:83:49:9F:6A:E1:29:10:9C:55:7F:8E:D7:CA:34
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13C8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AqvfMf2Ug0mfauEpEJxVf47XyjQ.roa
Signing time: Fri 01 Sep 2023 09:25:26 +0000
ROA not before: Fri 01 Sep 2023 09:25:26 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 131602
IP address blocks: 123.205.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5064 (0x13c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:26 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=02ABDF31FD9483499F6AE129109C557F8ED7CA34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:74:56:32:a8:93:82:5e:27:16:dd:f4:03:
61:36:a0:44:8a:2e:16:38:15:25:dd:49:6a:f5:72:
ca:24:8a:22:1d:52:5a:bc:14:bf:ef:99:6c:f1:39:
b1:4c:df:1d:57:5e:4e:25:e3:4f:00:34:f2:97:ec:
f7:7e:cf:ff:52:90:fa:7c:aa:09:47:61:58:ff:be:
64:f4:5a:0d:23:0e:dd:76:ec:dd:78:79:fb:39:eb:
a3:db:43:2f:ef:e6:52:22:42:80:10:71:29:9b:9c:
c2:1f:7a:eb:c4:4c:20:71:05:8b:4e:a5:05:a9:fc:
a7:22:ac:2d:af:6e:ae:a2:21:5b:89:08:4c:0b:c0:
43:7c:f4:54:da:6a:34:6b:42:ba:14:21:c6:f4:1c:
bc:da:1d:7e:07:2e:f4:da:5d:2f:9a:d5:80:2b:3b:
93:1e:2b:47:38:ca:31:c1:f8:ce:67:ae:e8:ef:e6:
7c:a2:29:53:a1:bc:75:27:6f:56:ac:13:7c:5a:da:
23:22:2e:86:d5:3d:08:37:e7:bd:1c:df:67:93:36:
b2:ea:b3:1c:7a:30:5d:88:58:db:f2:44:f9:49:7a:
74:1a:9b:b2:b2:d9:3d:4a:eb:78:8a:24:cd:ee:15:
62:87:2e:af:c1:5a:9a:dd:55:90:3c:ec:df:88:84:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:DF:31:FD:94:83:49:9F:6A:E1:29:10:9C:55:7F:8E:D7:CA:34
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/AqvfMf2Ug0mfauEpEJxVf47XyjQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.128.0/18
Signature Algorithm: sha256WithRSAEncryption
88:fd:68:a6:6f:75:11:1e:fd:c8:38:20:c4:e2:a5:82:a8:d1:
e2:55:1a:c3:80:5f:22:33:69:07:f0:ee:2e:36:f0:5a:aa:3b:
41:9c:59:6a:c1:7c:d2:12:6d:66:7b:77:9d:3c:28:87:4a:ba:
54:4c:4a:b5:86:94:38:3c:c9:17:46:02:b3:b5:fb:4d:c3:f4:
71:21:65:6d:c8:76:94:aa:2e:a9:f3:8b:7f:3a:6b:24:56:47:
36:1e:c5:91:81:42:9b:12:4c:c0:cb:2d:5b:a4:c5:88:64:9c:
02:16:2a:f2:3c:a6:d5:f5:68:fb:63:62:5e:02:02:3c:48:26:
dd:a0:53:f8:98:a9:92:cd:a3:bb:09:c0:91:ec:b8:ca:8d:36:
e9:4b:3f:d5:57:8f:d1:81:da:0a:20:0a:e8:72:5d:01:71:7d:
07:8a:31:7c:0a:16:82:1d:d4:c7:82:4a:0b:02:f0:eb:37:bb:
a3:5c:97:3f:96:38:55:7e:4b:11:21:f5:62:5e:a0:60:0c:02:
24:6b:76:a1:89:7e:a6:ca:4a:b4:eb:f6:76:f0:f9:bf:ad:4a:
50:c2:fb:3c:89:af:3d:16:6d:7e:77:44:7f:d0:3b:ca:ea:35:
09:d4:5d:76:1e:56:1d:dd:fe:5e:2f:89:b5:90:32:68:37:d6:
5f:09:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:26 2025 by rpki-client