Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/KMqD9WjkEzypTbBZHlSsrXVTADE.roa
File: KMqD9WjkEzypTbBZHlSsrXVTADE.roa (raw, json)
Hash identifier: WEDPKrawLxoCVD473xvX8tkHbDQoE7FxxAe6/AMJPhU=
Subject key identifier: 28:CA:83:F5:68:E4:13:3C:A9:4D:B0:59:1E:54:AC:AD:75:53:00:31
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1647
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KMqD9WjkEzypTbBZHlSsrXVTADE.roa
Signing time: Mon 26 Aug 2024 05:21:59 +0000
ROA not before: Mon 26 Aug 2024 05:21:59 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 123.205.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5703 (0x1647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:59 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=28CA83F568E4133CA94DB0591E54ACAD75530031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:fb:39:25:8f:08:26:55:61:cd:9c:7e:a2:
7e:f1:f2:95:06:27:f1:56:b6:5b:3c:88:ce:39:da:
5f:94:22:d5:a3:59:6a:33:4f:74:e8:d7:6f:b6:a3:
7c:e0:16:f0:7f:d8:82:2c:80:fe:6d:c4:12:10:0e:
0f:36:70:a8:6a:72:0c:64:1e:17:47:fd:b5:ee:dc:
6e:70:e6:3d:ad:d4:8b:2c:86:b0:ec:26:52:eb:e0:
f3:7e:e7:55:23:39:28:3a:74:05:fd:c0:81:81:ea:
0e:c0:3c:a0:2c:28:06:e6:61:20:f0:74:00:a0:b4:
b5:dd:48:8c:38:e1:25:86:f6:c9:04:56:d0:1e:6b:
1b:1e:43:a7:42:3b:e7:68:cd:59:95:aa:b6:91:84:
5e:8b:24:9b:bb:fe:39:cd:1c:28:f7:62:91:ab:a4:
b7:72:cb:6f:ad:9e:f1:ce:17:90:d2:80:3d:a8:b3:
b3:20:82:86:5d:7c:7e:29:c9:96:0c:a8:ab:b2:21:
a3:67:91:a6:36:96:6f:1a:3a:c4:60:98:e9:54:ef:
02:ac:dd:32:5a:56:1e:45:ba:13:db:0c:c0:23:57:
c3:47:72:b1:5b:ae:29:33:ae:c2:94:74:d3:d2:9a:
0a:83:63:57:2c:68:65:df:64:50:3a:10:5c:52:67:
ad:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CA:83:F5:68:E4:13:3C:A9:4D:B0:59:1E:54:AC:AD:75:53:00:31
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KMqD9WjkEzypTbBZHlSsrXVTADE.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.58.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:50:8f:8d:ee:3b:b4:cb:e3:35:c1:1c:0c:16:db:6d:83:3a:
da:b3:49:42:55:dc:a2:ee:50:b5:30:8f:ca:fe:c6:1d:2c:0c:
fc:94:22:b0:62:ed:53:50:95:cd:c8:2d:1b:c4:9e:6d:a3:40:
5c:85:e2:de:30:e4:9a:fa:6e:87:7e:7e:bd:b1:db:28:df:da:
a5:3c:24:29:79:6b:b4:85:fd:13:d3:d5:73:f7:72:35:cd:79:
fb:95:d6:c1:4e:57:42:3c:89:d3:bf:f0:6f:13:d4:82:70:e0:
98:8d:ad:c4:0d:5e:74:93:ab:a8:f8:f0:1e:26:7d:e4:73:d0:
eb:93:65:75:cb:64:a5:14:fd:da:47:ab:df:24:70:5d:4c:c0:
3e:67:ed:4a:12:31:78:c6:f3:a5:c5:3b:31:fd:95:6e:c2:93:
6e:e5:81:04:31:ec:9b:fb:12:87:97:f8:9e:92:ea:f6:39:25:
da:0a:c9:84:34:e3:6d:86:59:9c:97:e3:b1:03:11:69:fd:ad:
f4:18:1e:c7:14:e5:a0:49:32:2d:8e:67:72:39:5b:7c:ae:85:
91:ce:0b:90:cf:3a:d4:1e:21:e3:9b:be:f1:0b:8e:22:bc:1e:
a9:7a:25:27:6e:03:34:5d:54:81:6d:d0:f5:4e:d6:2b:48:bb:
6b:d2:db:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:09 2025 by rpki-client