Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/IWRtUViTJaVVIHL1u4VqQBDrllY.roa
File: IWRtUViTJaVVIHL1u4VqQBDrllY.roa (raw, json)
Hash identifier: O6al1QCOHpb+50KeiZ+o65UnAEqmI9L3MfmJCYI6jzY=
Subject key identifier: 21:64:6D:51:58:93:25:A5:55:20:72:F5:BB:85:6A:40:10:EB:96:56
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1327
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IWRtUViTJaVVIHL1u4VqQBDrllY.roa
Signing time: Fri 01 Sep 2023 09:24:33 +0000
ROA not before: Fri 01 Sep 2023 09:24:33 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 2001:cd8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4903 (0x1327)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:33 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=21646D51589325A5552072F5BB856A4010EB9656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:24:c4:74:36:0c:4e:9e:9c:1b:1e:63:ad:
89:7f:c9:9c:e2:dd:84:74:8c:2a:f8:84:2f:f2:c2:
da:d3:c1:e8:24:1e:0e:9c:6f:09:76:3c:c4:45:f9:
6c:1a:90:4b:30:13:3d:49:89:6b:68:8c:df:df:e7:
5f:ae:ce:e5:f8:52:95:d2:d1:fa:8f:e4:18:a8:80:
36:6d:61:c9:0e:8a:14:e6:f4:47:fc:bf:38:1a:06:
00:5d:e9:45:03:0a:cf:3c:5e:23:0d:d4:15:65:0d:
2f:c3:3a:87:d3:05:5e:51:6b:4b:56:1e:8e:d3:5a:
9b:22:e9:ec:d2:84:8c:e1:7a:a6:1d:b3:4d:c1:b2:
60:49:4a:88:a3:c1:b9:90:ce:64:31:0a:eb:d2:3f:
0b:0b:45:43:bb:05:a3:01:62:da:5d:04:65:30:a7:
cb:0e:7e:75:4a:2a:75:68:c1:12:15:30:b9:3e:4f:
74:a3:59:a4:05:4b:50:cd:27:bd:c7:33:7b:24:f2:
60:ab:ab:9b:14:10:3c:1c:66:de:96:2d:61:f5:17:
bd:32:8c:4d:1c:d5:ad:ce:11:1d:0a:e8:d8:f9:f7:
15:c8:89:0a:39:1e:94:26:ed:c4:30:c2:3d:89:e1:
2b:8e:f6:f7:ad:03:27:ca:25:10:df:26:70:ea:8e:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:64:6D:51:58:93:25:A5:55:20:72:F5:BB:85:6A:40:10:EB:96:56
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/IWRtUViTJaVVIHL1u4VqQBDrllY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:cd8::/32
Signature Algorithm: sha256WithRSAEncryption
c9:cf:97:36:d7:fa:1c:60:42:7e:e7:34:aa:f2:8c:0d:6c:da:
a2:c3:a4:07:8d:33:8c:f4:11:bf:db:51:cc:da:be:26:b7:f2:
aa:9c:ba:98:76:ff:2d:03:cb:68:21:5b:94:d3:5a:52:a5:9a:
ac:b6:0e:cd:c8:0f:3e:f6:2f:69:36:2d:94:a9:60:d5:85:21:
36:86:7c:f8:fc:78:10:91:77:92:76:8f:05:7e:5f:49:15:08:
c8:42:e8:d0:a8:fb:5e:d1:8b:aa:1f:39:96:33:3c:60:f5:ac:
5a:a9:d6:fb:3f:cb:1d:78:94:53:e0:68:1c:6a:20:7e:f8:f7:
0a:bd:3f:4b:f6:15:4c:7f:6b:99:61:db:c7:29:c3:bc:27:eb:
6b:df:1e:48:a6:f9:2c:35:f8:71:9e:ff:26:52:18:d3:87:4a:
ab:7f:37:ab:c1:a0:d4:2f:d1:9b:ab:a4:66:c2:b8:04:c1:3c:
23:2e:fc:6e:21:b7:13:b5:b6:17:a2:5d:c9:ed:27:bc:21:65:
50:57:ef:3c:a3:d4:d3:5b:c2:1a:3c:e7:31:1b:f1:a9:62:21:
9b:0a:ea:44:51:a7:46:98:b1:85:17:7b:66:fe:53:43:c1:b8:
c3:37:96:54:04:40:30:9f:de:d1:bb:7e:77:88:3c:a2:f2:39:
2a:ea:bc:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:42:30 2025 by rpki-client