Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/CbArG25f6Ah7HymrAFoVpe5jwvI.roa
File: CbArG25f6Ah7HymrAFoVpe5jwvI.roa (raw, json)
Hash identifier: uAKegQ8T6DQn96TKK0rEriMdEitezsc5XBVUffVVk44=
Subject key identifier: 09:B0:2B:1B:6E:5F:E8:08:7B:1F:29:AB:00:5A:15:A5:EE:63:C2:F2
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 131F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CbArG25f6Ah7HymrAFoVpe5jwvI.roa
Signing time: Fri 01 Sep 2023 09:24:30 +0000
ROA not before: Fri 01 Sep 2023 09:24:30 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 218.211.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4895 (0x131f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:30 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=09B02B1B6E5FE8087B1F29AB005A15A5EE63C2F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:89:c7:03:1c:72:6f:72:79:be:7f:40:11:
ec:0c:5c:bf:b6:88:01:e2:97:b7:2f:16:3d:da:02:
f9:d0:76:39:82:d0:8a:a3:13:05:96:8a:a8:07:f5:
b8:e3:be:2f:7a:ac:40:ee:4b:b9:af:73:f5:95:8d:
5f:78:b2:84:2e:ea:94:b2:e4:59:b5:26:f0:53:b2:
7e:43:fd:9c:01:ce:83:ed:aa:e2:ea:b2:dc:91:13:
61:66:75:5a:96:94:38:6b:f8:ff:de:96:6c:c4:48:
80:ff:4d:7c:32:a4:e0:0b:51:89:87:9e:60:ce:32:
52:f9:d2:d6:e3:3d:a2:cd:c8:62:24:ea:bd:c4:e4:
38:05:c3:e0:a4:38:19:53:05:35:c9:52:9e:52:2e:
34:bd:18:0e:d6:4b:60:31:78:b4:21:ee:ee:19:1f:
8d:53:e1:43:96:48:01:ce:06:57:c9:e3:cd:96:03:
e8:2f:5f:31:d5:fe:5e:67:56:ae:8b:4c:44:3b:01:
f3:f1:1a:99:42:f1:d4:82:bf:b6:b6:40:c7:15:30:
54:96:16:2a:df:e9:05:2f:f3:ff:34:a7:ee:a1:cd:
71:91:3c:8f:7b:8b:d5:b8:d9:f4:b5:a3:3b:0d:52:
dd:72:61:6d:0f:82:03:a1:4e:ed:f1:2a:a0:1e:27:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B0:2B:1B:6E:5F:E8:08:7B:1F:29:AB:00:5A:15:A5:EE:63:C2:F2
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/CbArG25f6Ah7HymrAFoVpe5jwvI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.211.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:fe:f6:ce:78:31:38:7a:fd:d1:2d:85:43:8b:e6:42:a0:95:
c9:93:75:29:41:6c:26:92:ed:72:29:22:ad:dc:e4:05:c4:b5:
f2:30:c1:62:2a:ce:d6:a0:70:64:31:88:98:0c:f0:b9:d5:63:
27:57:4e:75:20:a9:cb:87:d9:9a:c3:b0:bb:f6:cd:5c:52:6d:
ab:88:0a:fd:bc:b6:6d:76:2e:be:d8:9a:a3:f5:fe:f9:a3:42:
80:5f:1e:74:75:f7:9d:17:5f:25:03:e6:66:bc:73:f1:5d:57:
f0:bb:44:42:99:a1:9d:d5:f9:7d:02:d5:39:26:62:1b:d7:be:
74:67:b7:ca:26:f9:45:b4:a6:54:7a:3a:ee:3a:7e:56:53:9f:
97:06:04:b6:ae:e9:93:b7:31:1d:54:9a:e8:2d:61:74:93:21:
9f:95:c6:50:c3:14:68:f2:05:c0:e0:4b:6b:4d:83:0c:03:4e:
f0:db:f2:91:36:e1:26:ad:65:eb:65:94:61:72:44:1d:5b:6f:
dc:26:a0:93:47:2f:0b:08:a2:76:aa:bb:1a:5a:ba:ad:5b:8b:
ef:a9:4f:8a:26:e9:07:da:49:f9:ec:00:f7:9e:6f:a5:ec:a7:
7b:84:6e:c0:d9:ff:80:5d:24:6b:a4:d0:3d:11:eb:1c:6c:c1:
14:43:dc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:31 2025 by rpki-client