Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/KXs_wLr_9O5XXBchLavMCU6cXvc.roa
File: KXs_wLr_9O5XXBchLavMCU6cXvc.roa (raw, json)
Hash identifier: ss0/WUBlqpzKN5icy6HrafSGEil6oO3ldaXGbTQEiuA=
Subject key identifier: 29:7B:3F:C0:BA:FF:F4:EE:57:5C:17:21:2D:AB:CC:09:4E:9C:5E:F7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08DE
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KXs_wLr_9O5XXBchLavMCU6cXvc.roa
Signing time: Tue 29 Sep 2020 09:52:32 +0000
ROA not before: Tue 29 Sep 2020 09:52:32 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 175.183.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2270 (0x8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:32 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=297B3FC0BAFFF4EE575C17212DABCC094E9C5EF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:a6:27:06:34:8d:28:a2:65:13:81:08:0d:
aa:14:0a:b8:32:f8:d7:7b:2c:97:68:98:36:a0:4e:
b3:f3:70:f1:6d:4f:b0:39:60:88:0d:75:04:dd:bb:
c3:7e:da:04:3b:8a:e0:9d:b5:8a:7d:cb:48:81:04:
31:c9:e2:d6:e4:80:ab:82:c1:64:a1:aa:60:43:f3:
4a:7e:91:a1:15:3b:b1:7a:3d:9f:22:e6:c9:91:4a:
d4:ea:e4:bf:22:60:8f:4e:0c:b7:f4:b5:69:3d:42:
46:83:7a:55:74:6e:ca:5f:a7:4a:72:62:56:58:7d:
f4:1a:3a:9d:0f:4d:90:a1:f9:43:0d:9e:62:7e:d8:
1e:a7:a0:04:8f:d1:5c:8b:9d:dc:52:ef:77:e8:04:
6b:c2:4c:e6:de:cb:d9:09:c1:b6:f8:3f:8d:ce:d8:
5c:a9:83:65:f5:bc:73:a3:88:93:39:f0:4b:3d:54:
20:e2:69:f4:3a:31:1a:e6:37:f3:a9:b6:aa:7f:f1:
e7:8d:25:b2:2d:93:fb:09:eb:07:7b:82:3c:73:8f:
26:fe:c4:b1:f4:28:19:9a:fb:a1:6e:ff:4e:73:5e:
d0:d5:6b:93:ca:68:25:7e:5f:43:f6:9d:39:14:c9:
0d:c7:24:bb:5e:9f:2d:5c:27:b7:b2:63:91:73:4a:
c2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:3F:C0:BA:FF:F4:EE:57:5C:17:21:2D:AB:CC:09:4E:9C:5E:F7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/KXs_wLr_9O5XXBchLavMCU6cXvc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.183.137.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:df:60:38:18:4b:2e:a1:52:97:53:d7:19:7a:14:b4:0a:e9:
0e:4c:b7:2f:6f:c4:0f:10:81:9d:0f:8a:7b:9c:44:a0:bb:97:
46:fe:03:5a:e0:b2:da:5e:41:d2:e1:57:2c:6b:85:6e:7f:ac:
f4:ba:e4:ac:c8:dd:01:1f:36:a8:cd:c1:8e:3e:31:25:7e:1e:
4f:b7:30:ea:db:97:50:88:00:32:2a:15:ec:e9:a2:13:90:ce:
18:72:35:76:d2:3a:b9:5a:86:58:a7:47:dc:83:89:1c:b1:40:
ba:4d:22:28:85:2b:fc:02:3b:c4:f8:ed:82:37:73:1f:0f:ee:
63:cf:02:0b:b6:bf:66:23:41:c5:16:85:63:bf:cf:69:16:e9:
3d:59:e8:ff:0e:db:11:5d:8a:25:f6:7c:62:22:d2:45:a6:b7:
b6:34:89:21:6a:b5:0f:1e:29:05:e3:7c:4d:71:7d:7f:e1:76:
06:27:ba:0a:d8:27:1e:26:35:e3:cc:5e:32:ff:8a:63:27:9c:
e0:a3:96:e7:c3:0e:38:1f:13:7b:91:67:71:fe:79:d6:5f:e9:
3c:80:30:39:b0:f5:44:42:b4:48:81:eb:b1:10:66:b5:89:58:
02:97:f4:16:8f:54:d2:36:eb:85:88:a8:75:a3:27:2c:7d:39:
4c:ac:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:09 2025 by rpki-client