Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/MjI7Ui6MHUD358zdyeQMx8qctcQ.roa
File: MjI7Ui6MHUD358zdyeQMx8qctcQ.roa (raw, json)
Hash identifier: L2e9fGF+nD3x454Zqe+bpnUL3B0zNin72BNqPm6nmHY=
Subject key identifier: 32:32:3B:52:2E:8C:1D:40:F7:E7:CC:DD:C9:E4:0C:C7:CA:9C:B5:C4
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08AC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MjI7Ui6MHUD358zdyeQMx8qctcQ.roa
Signing time: Tue 29 Sep 2020 09:52:18 +0000
ROA not before: Tue 29 Sep 2020 09:52:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 218.210.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:18 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=32323B522E8C1D40F7E7CCDDC9E40CC7CA9CB5C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:3e:b8:73:af:69:7a:eb:f9:e9:6c:3a:62:
ad:0c:d7:2d:68:43:63:c6:cf:df:0d:d2:70:6a:9a:
9b:b8:5a:91:be:63:64:f4:75:6a:0f:71:16:5f:01:
f4:19:18:4c:d3:c7:8c:b7:0c:e4:01:e4:bb:8c:14:
b5:8d:be:71:79:51:0c:58:70:ef:5f:a5:97:db:87:
79:ff:5e:3c:f3:f3:c6:d2:ee:9e:9f:66:97:67:a8:
ce:bf:0b:03:a2:4b:b3:aa:31:27:a2:3d:76:86:fc:
f5:15:7f:34:06:a2:d8:fe:bb:79:c2:be:58:4d:d9:
c4:83:5f:bb:4a:57:1d:40:c4:f1:d5:34:32:f6:3f:
e7:54:84:ad:49:22:9f:0b:cc:59:31:e3:4f:0d:7e:
7f:21:37:62:5f:d1:8d:d8:cc:53:6b:42:fc:09:83:
b1:06:df:72:e1:84:49:f6:4a:88:6a:8a:4e:56:91:
28:58:ff:62:6f:57:e3:da:e3:be:d1:e9:b3:25:8d:
94:97:92:7e:42:1b:ae:06:10:14:ca:c3:5e:56:6c:
96:2f:a1:01:8f:05:87:55:9f:57:a7:50:36:bf:ed:
6e:3d:4c:72:53:12:2f:be:d8:34:16:9a:88:a6:20:
92:4d:4b:a0:f6:0c:2a:d3:e1:12:8c:b8:6a:e7:0e:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:32:3B:52:2E:8C:1D:40:F7:E7:CC:DD:C9:E4:0C:C7:CA:9C:B5:C4
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/MjI7Ui6MHUD358zdyeQMx8qctcQ.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/15
Signature Algorithm: sha256WithRSAEncryption
82:a5:9e:fe:0c:cd:d0:3a:b1:06:5e:5f:83:4d:71:09:10:65:
07:ec:be:57:06:ba:c9:5c:4c:e2:54:47:2d:6e:ad:14:1e:a1:
55:fc:8d:9e:23:62:2f:e2:2c:55:f1:53:3e:48:0e:b9:6c:8b:
b6:24:64:6f:8b:b8:d1:36:2b:ca:9b:d8:e7:60:c5:72:6a:df:
1d:a5:8c:6e:16:11:fb:1d:d9:cf:ee:61:17:96:30:a2:67:15:
06:71:05:45:ce:69:29:83:69:c7:8e:d6:50:7e:67:a4:0f:1c:
27:04:8d:76:04:96:89:8b:82:81:ba:4b:d4:96:33:7f:06:55:
cb:49:4e:b5:00:4c:87:e8:ca:86:bd:19:57:79:dd:80:47:00:
41:03:e5:db:15:88:74:fb:25:34:f9:cd:c6:51:8a:7d:24:da:
5e:42:6c:47:b9:bf:6f:b6:3f:69:29:e1:d2:ff:99:92:36:5e:
20:a4:77:d9:79:9d:ca:4b:af:cd:96:1f:66:39:31:2c:e2:6e:
68:e1:93:ef:bd:9a:d7:bf:f1:40:95:0e:af:01:45:f7:5d:db:
ec:fd:7d:98:68:61:21:4d:36:ee:a1:61:d2:17:2a:e3:fa:a8:
67:d7:73:f1:4e:0a:ed:95:6b:b8:80:23:51:91:65:04:e5:9a:
3e:08:ae:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:14 2025 by rpki-client