Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/El2eRq71xkh1Q7ah4xnuBcr9las.roa
File: El2eRq71xkh1Q7ah4xnuBcr9las.roa (raw, json)
Hash identifier: crPXpd47JrEc0HI+vYbtQfvw3L/mocTpVAxkPyGT288=
Subject key identifier: 12:5D:9E:46:AE:F5:C6:48:75:43:B6:A1:E3:19:EE:05:CA:FD:95:AB
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1649
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/El2eRq71xkh1Q7ah4xnuBcr9las.roa
Signing time: Mon 26 Aug 2024 05:22:00 +0000
ROA not before: Mon 26 Aug 2024 05:22:00 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 220.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5705 (0x1649)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:22:00 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=125D9E46AEF5C6487543B6A1E319EE05CAFD95AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:af:b3:81:02:ee:b4:c7:12:73:46:d5:b8:29:
14:5a:44:02:2c:8c:d9:e8:4d:8e:d2:eb:0c:58:67:
f8:3c:7a:65:19:ec:37:5c:60:86:4b:fe:2e:a5:9d:
25:f0:cf:32:88:23:ed:d1:cf:9f:33:00:2f:e2:63:
de:b2:22:a6:90:c4:67:0b:e4:a3:d2:f6:03:4b:01:
c1:05:99:ce:03:7f:e7:67:d7:ea:25:52:34:ac:80:
bd:28:a4:48:6f:10:a4:8b:c0:08:3e:08:2a:e2:05:
84:a5:6c:2c:7a:eb:42:a4:a0:4d:60:31:07:12:25:
82:f7:fe:c1:4f:d2:9f:89:99:9d:cd:63:3a:70:bd:
14:93:ba:fa:58:1a:7b:86:a1:c9:00:ed:f0:bd:f3:
7f:4e:17:93:59:3e:ec:64:37:8b:e0:aa:eb:5e:4f:
b3:6f:59:eb:e2:5b:52:60:42:19:4a:5b:6c:b3:dd:
fb:a4:e8:53:e5:e3:c9:40:ab:6a:8d:84:d0:b2:03:
b5:42:d9:f2:7a:0d:fc:f9:57:25:40:86:73:b6:2f:
83:ba:a3:cc:e7:a8:a5:2d:f1:4e:b8:01:f6:25:93:
6a:55:3f:61:da:91:16:df:59:6b:ae:8c:0b:75:d5:
49:e0:46:00:5e:6f:ed:47:45:43:56:0b:ab:c0:8f:
74:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5D:9E:46:AE:F5:C6:48:75:43:B6:A1:E3:19:EE:05:CA:FD:95:AB
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/El2eRq71xkh1Q7ah4xnuBcr9las.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:8d:e1:3f:8e:f3:95:f4:87:0e:6e:a5:aa:90:38:0c:32:37:
d0:73:86:2f:e6:f2:40:93:6c:cc:1d:06:82:c6:9f:a9:da:fc:
b1:37:7f:a6:0c:0b:15:64:bc:42:f5:1c:c3:79:8f:74:47:8a:
e6:71:4f:94:22:41:bc:7e:76:fa:fc:26:06:bd:43:2b:aa:93:
af:f1:a4:a0:c3:6f:5d:5d:c1:41:5e:7e:df:e5:94:12:6b:f9:
67:9c:c6:d7:7f:eb:50:26:11:37:ca:f5:6e:0e:5c:c7:02:ae:
20:3b:85:b8:63:9f:51:54:5c:65:04:d1:65:4a:3b:c1:af:c0:
9e:cd:6e:9a:68:d2:cc:28:aa:9a:78:ab:74:63:cc:b0:9b:cf:
e4:cc:ab:f7:8c:5c:93:40:65:7b:a8:11:fa:d8:76:35:d7:15:
54:6b:7e:34:cb:47:4d:ab:26:48:fb:3d:74:31:2d:8a:cc:a1:
84:61:6c:eb:d2:93:10:f4:93:71:2f:88:19:0b:28:dd:3e:2e:
6b:df:27:e1:76:70:93:25:8b:9e:7d:86:cc:97:53:a6:d3:b0:
67:c8:0a:ba:b1:da:a3:2c:09:24:17:70:d0:c3:40:e3:b0:b0:
60:78:3e:a3:d6:c2:10:f4:61:af:39:ad:e8:d8:13:73:f6:da:
d8:52:ac:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:46 2025 by rpki-client