Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/JfcShfAzoK4aKlDE4hG_gb9281s.roa
File: JfcShfAzoK4aKlDE4hG_gb9281s.roa (raw, json)
Hash identifier: qYd2rnAZo4I84wXC4ziGmWg+yjT+Dq0FDktpAeIAGGk=
Subject key identifier: 25:F7:12:85:F0:33:A0:AE:1A:2A:50:C4:E2:11:BF:81:BF:76:F3:5B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E02
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JfcShfAzoK4aKlDE4hG_gb9281s.roa
Signing time: Wed 29 Sep 2021 02:43:06 +0000
ROA not before: Wed 29 Sep 2021 02:43:06 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9919
IP address blocks: 45.64.228.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3586 (0xe02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:06 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=25F71285F033A0AE1A2A50C4E211BF81BF76F35B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:b2:bb:95:64:ca:af:48:c2:37:b0:51:d0:
c9:58:ff:a9:91:2f:d2:dc:ae:4e:53:a2:11:13:d3:
27:a0:74:97:4d:7b:b1:79:8c:2a:ce:24:e6:1a:ec:
59:b7:6b:56:b0:44:c4:7e:c8:41:67:5f:c2:f9:c0:
2e:2e:06:6f:62:ab:07:86:42:57:e3:3a:4f:98:74:
c9:0a:f0:19:50:3b:82:83:bd:6e:88:5d:00:b4:9c:
ae:e2:eb:4c:ff:f9:7c:94:3c:45:1f:66:85:4b:09:
e6:12:24:54:93:3a:01:54:b3:b0:31:00:95:87:f1:
9c:6c:38:bf:95:58:b0:9a:b2:af:8b:39:17:b5:08:
c9:91:8b:93:85:1d:9c:9e:2e:9c:6a:df:1b:2c:52:
aa:01:b1:bb:6c:0c:4c:6c:6c:cf:bd:7f:4a:91:56:
98:6f:12:1a:78:46:7e:82:21:ad:c8:07:08:79:da:
04:01:f1:13:aa:ec:75:ba:e2:36:57:82:58:7f:4d:
a3:a4:7c:1d:be:9b:44:c8:7d:fc:24:45:fc:6d:54:
22:db:9b:ad:8d:e0:fa:38:9b:60:be:7e:64:29:f1:
8e:34:8e:cd:67:6d:ca:af:89:8d:63:d5:ae:aa:48:
37:ba:2a:f9:92:79:40:ab:52:41:b9:a5:b3:12:95:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F7:12:85:F0:33:A0:AE:1A:2A:50:C4:E2:11:BF:81:BF:76:F3:5B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/JfcShfAzoK4aKlDE4hG_gb9281s.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
45.64.228.0/22
Signature Algorithm: sha256WithRSAEncryption
be:c5:b8:a0:42:14:e8:bf:d0:60:70:7b:b7:de:d7:fc:cc:43:
b1:72:75:9d:c1:85:c6:10:c2:52:af:08:64:6b:9b:77:d8:6e:
26:c5:79:62:3f:80:ed:b4:4d:c6:82:86:f5:ed:85:ce:a6:2b:
da:20:92:78:3b:12:5d:67:22:54:3c:6e:ed:f1:58:79:64:b7:
ed:99:17:56:28:1c:62:eb:42:45:37:00:7e:f1:20:ec:53:2c:
72:4b:ca:a1:2d:9b:2f:c6:7b:9d:0e:b8:8f:0e:ce:0d:5e:3a:
40:25:d9:ba:4b:12:ae:a6:7d:89:d4:db:4a:5a:09:e6:c6:d4:
21:26:19:21:07:f0:e5:b6:fe:0e:26:94:26:c2:dc:53:12:19:
f4:fc:e1:a6:24:ff:39:9a:6d:36:f9:8d:7b:00:d7:71:28:2a:
3b:c2:db:a1:1f:5b:f1:35:61:98:76:d6:9d:ba:2b:ac:fa:ee:
93:f4:94:23:30:d0:d0:e7:14:49:5f:91:c4:e7:0a:ca:1d:21:
bc:e1:5c:a4:2c:04:4a:44:b0:86:1c:66:13:91:aa:65:f6:fa:
64:1b:6e:6b:f7:75:c7:72:83:49:7b:ef:d7:72:94:74:ba:b9:
b3:00:23:31:c1:4a:8e:ec:ae:c3:5b:1c:d8:04:5b:50:09:29:
71:1a:e1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:02 2025 by rpki-client