Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BQbQ7W7jowxifsfXnaxASXjtkF0.roa
File: BQbQ7W7jowxifsfXnaxASXjtkF0.roa (raw, json)
Hash identifier: m9S6UnOBUYu1XmLxghCrMFf09YLMm+owlxK2bzZsoa4=
Subject key identifier: 05:06:D0:ED:6E:E3:A3:0C:62:7E:C7:D7:9D:AC:40:49:78:ED:90:5D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1302
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BQbQ7W7jowxifsfXnaxASXjtkF0.roa
Signing time: Fri 01 Sep 2023 09:24:22 +0000
ROA not before: Fri 01 Sep 2023 09:24:22 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 211.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4866 (0x1302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:22 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=0506D0ED6EE3A30C627EC7D79DAC404978ED905D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:1b:e5:4b:da:91:85:b0:5a:c8:04:a8:7e:
23:cb:10:44:ad:68:d3:ef:e6:c1:d1:11:00:37:43:
15:c7:8c:51:aa:68:b1:81:c8:cb:4a:6a:3f:3c:08:
e1:39:64:a2:18:26:49:c9:75:6c:b2:10:bb:e8:19:
43:5f:f3:47:98:42:1b:a8:8d:10:36:82:0f:c7:bb:
9a:b7:0d:63:4c:1d:7e:9d:d3:9c:ee:a9:64:69:48:
20:af:79:bd:22:1f:73:55:9d:1e:ac:3d:91:f2:2b:
d2:27:0f:8d:95:19:45:69:77:33:53:72:48:ed:1c:
6a:67:19:b7:83:21:b1:09:32:68:1f:5b:a2:87:2c:
8d:a2:02:86:cf:a4:e0:af:d5:1d:3c:65:e7:0c:67:
15:05:b5:74:d5:21:14:ea:9b:24:29:de:e4:25:a0:
5d:9d:fb:2c:12:d7:45:32:53:72:79:19:64:75:1b:
c9:76:d9:b7:8a:88:34:3c:b4:a1:f0:d8:4b:dd:7e:
2c:47:45:8b:c7:84:5d:c3:2a:bc:6e:8c:84:36:cf:
d4:75:4f:d3:6d:5b:a1:e9:72:64:37:32:9d:f7:98:
00:94:bf:63:a0:82:45:98:eb:b7:6a:23:02:9c:4b:
a0:d1:94:99:2c:aa:6f:75:e8:85:a2:89:91:c7:8f:
ab:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:D0:ED:6E:E3:A3:0C:62:7E:C7:D7:9D:AC:40:49:78:ED:90:5D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BQbQ7W7jowxifsfXnaxASXjtkF0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a8:b2:b0:cd:4c:6f:ce:13:1e:95:45:b1:08:68:0a:12:cd:58:
76:f4:29:15:05:43:8d:f2:c1:a1:b8:a8:db:a2:48:23:53:2b:
62:a2:3d:52:b6:89:a1:ff:4c:73:85:77:5d:3e:99:5d:da:75:
61:3e:88:47:e4:53:3a:01:36:7a:1f:ab:4e:f7:76:45:87:a6:
2f:35:18:dc:8f:47:e8:ab:23:4e:ea:cd:71:aa:6d:27:bc:59:
6e:5b:7c:1e:ed:a4:58:c0:ce:8f:7b:09:91:12:13:0c:bf:f6:
e0:4b:b3:d0:bc:c0:30:27:d8:00:d7:e7:7f:8a:bc:80:ec:a0:
6f:a3:d0:86:53:8a:f5:8d:9a:97:ee:e4:42:bb:40:18:fe:bf:
cf:03:0a:be:60:8e:9e:52:f1:69:39:37:b6:10:99:6c:97:33:
fa:4f:f9:71:f6:b9:fe:88:ce:fd:f3:34:d7:f1:02:81:c1:cd:
0d:44:e7:2b:4e:33:ee:34:c0:17:b3:3a:98:ac:7f:59:b7:14:
b9:7a:1b:79:95:7c:6f:9b:9c:5e:60:4c:a3:d6:84:1b:5b:78:
a0:69:d7:30:8d:eb:4f:5c:50:a5:3d:ef:6a:61:a4:40:3d:2a:
da:6d:e3:92:eb:18:3c:b5:a8:dd:ae:51:66:6e:5c:85:f8:ef:
05:d0:90:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:37 2025 by rpki-client