Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Lf1ypfGm_BaLR85yLrCKS_CXrU0.roa
File: Lf1ypfGm_BaLR85yLrCKS_CXrU0.roa (raw, json)
Hash identifier: vV6a3Quiw6dfrrgEXlV9gw27mqNuG7+1a5uCqkmziKM=
Subject key identifier: 2D:FD:72:A5:F1:A6:FC:16:8B:47:CE:72:2E:B0:8A:4B:F0:97:AD:4D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 186B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Lf1ypfGm_BaLR85yLrCKS_CXrU0.roa
Signing time: Mon 10 Feb 2025 14:07:56 +0000
ROA not before: Mon 10 Feb 2025 14:07:56 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 122.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6251 (0x186b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:56 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=2DFD72A5F1A6FC168B47CE722EB08A4BF097AD4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6c:7d:4d:9b:e3:84:b1:ad:50:1f:eb:ec:79:
ec:1c:16:05:41:94:f0:24:e7:c1:45:4c:e4:58:02:
b4:fb:e5:f0:fc:d7:05:de:56:ea:57:96:f5:e8:aa:
c5:bd:91:b6:6a:51:57:2e:0c:69:b1:31:41:51:6e:
9f:99:3e:4e:5d:ae:1c:7f:c3:40:47:dc:cb:fb:25:
d0:09:9c:e3:3a:e5:66:1b:62:48:71:c3:ab:a3:15:
41:87:a0:08:b7:2c:d9:38:07:a2:84:a3:22:55:12:
2d:d7:10:71:dd:31:7f:ac:10:3d:21:03:4f:08:28:
ce:e1:f9:5d:cb:12:56:ed:fa:0c:88:2f:d8:31:0d:
75:9a:bd:c0:81:db:9b:5d:42:74:42:67:21:d0:19:
01:44:a8:f7:bd:a2:a5:47:f3:de:75:96:d2:7a:2b:
ba:2d:4c:b9:13:0c:29:13:f3:1f:a5:b7:f5:35:0d:
70:ce:d3:e5:32:1f:6e:ee:15:50:91:de:c0:db:62:
78:df:fd:09:b0:90:06:55:d1:12:8f:fa:a7:f0:14:
ff:0d:ea:b7:75:f5:90:b0:e4:27:b8:d4:91:c6:02:
71:3a:09:e7:f3:42:fb:17:52:2e:80:dd:63:1f:8c:
24:51:c3:12:57:68:2d:df:4c:ff:14:5a:68:25:81:
ce:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FD:72:A5:F1:A6:FC:16:8B:47:CE:72:2E:B0:8A:4B:F0:97:AD:4D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Lf1ypfGm_BaLR85yLrCKS_CXrU0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c7:2c:d9:bb:37:d2:78:36:af:b2:67:71:7f:ec:c4:55:62:55:
63:ab:11:39:c8:72:65:63:9e:37:f4:eb:8f:14:b7:42:e8:94:
d8:fb:a5:64:e7:76:ef:29:bb:33:40:e6:91:17:56:9c:16:32:
a6:33:65:0b:76:c8:66:41:65:16:ee:b0:9c:c8:ba:fa:ca:89:
a8:16:01:d4:a9:7c:eb:d5:32:4b:a8:4e:ed:44:be:0c:b7:bd:
b1:89:b0:c2:ea:cb:c5:e8:66:9c:cd:9b:23:c3:e0:8e:f3:cf:
4c:fc:0b:48:99:68:e0:47:be:42:f9:31:60:99:a4:9c:3f:65:
96:e5:21:7e:73:ce:dc:7f:15:1c:7a:23:5e:12:ee:81:98:3f:
96:d2:45:f5:47:d6:63:44:d5:aa:c3:a0:5d:9e:8e:59:f2:63:
b0:6b:ae:80:39:cd:75:d5:cc:11:82:d2:ce:40:7a:0d:84:56:
01:27:6f:3d:62:b6:84:b9:82:33:98:da:9e:1b:c0:08:49:0b:
93:0e:4f:c3:bb:2f:d6:d5:55:40:07:15:74:35:d7:ce:9f:48:
85:dd:7c:4a:21:13:d5:06:36:2e:a4:df:c7:5e:35:7f:20:b4:
d5:22:c0:9e:ab:f8:bd:58:f5:1e:c2:2c:b7:93:48:8a:04:c5:
d2:ea:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:25 2025 by rpki-client