Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/NJuZtgB9FvdFXgS_8s0WugLHbx4.roa
File: NJuZtgB9FvdFXgS_8s0WugLHbx4.roa (raw, json)
Hash identifier: admmxz+2lsdcx2S9c4kSF48f8Fndj7LMKPJ/t0Qsb4E=
Subject key identifier: 34:9B:99:B6:00:7D:16:F7:45:5E:04:BF:F2:CD:16:BA:02:C7:6F:1E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1629
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NJuZtgB9FvdFXgS_8s0WugLHbx4.roa
Signing time: Mon 26 Aug 2024 05:21:50 +0000
ROA not before: Mon 26 Aug 2024 05:21:50 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 211.74.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5673 (0x1629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:50 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=349B99B6007D16F7455E04BFF2CD16BA02C76F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:29:9a:2e:6b:07:fa:7a:07:1f:ea:55:e4:
6e:77:77:03:56:4b:70:41:b5:6b:b1:1c:0d:e1:52:
87:9b:71:2e:02:22:c5:3d:c2:2a:38:b8:62:59:ca:
8a:a0:7f:f3:b6:58:5c:a9:ff:f3:f1:b2:32:20:d6:
77:78:37:e2:2f:92:e4:f3:d1:74:04:c2:75:b3:87:
b9:df:f3:6a:c0:25:22:82:27:38:47:ec:94:6d:d2:
99:23:42:49:46:d5:2e:da:e7:fb:36:55:29:4e:f7:
68:c4:76:24:98:ca:df:bd:7d:d1:6c:d1:d3:59:17:
61:be:8b:41:ea:e5:14:3f:db:7f:ce:0c:3d:1c:a2:
43:e2:e8:c8:67:4d:75:ae:da:da:68:8b:0b:43:25:
c3:a2:01:3f:19:c0:22:73:3b:f8:0e:3d:ea:db:5b:
8f:7d:ba:a6:c1:a6:12:b4:f0:8e:eb:04:f7:47:7e:
cf:5b:a0:03:87:b1:32:b0:4f:e5:d6:65:e2:fa:bb:
ba:b1:f8:03:57:34:af:6f:04:3f:fa:21:90:de:21:
90:ff:f2:cb:16:5d:8b:d0:cd:d2:59:35:7e:d0:c0:
1c:39:ac:b8:99:69:8c:ab:98:b1:00:87:18:3d:fa:
54:e1:83:5b:6e:5c:c8:b2:29:3f:5d:9a:83:5c:19:
d4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9B:99:B6:00:7D:16:F7:45:5E:04:BF:F2:CD:16:BA:02:C7:6F:1E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/NJuZtgB9FvdFXgS_8s0WugLHbx4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.74.128.0/17
Signature Algorithm: sha256WithRSAEncryption
24:27:62:4a:09:3a:cb:db:60:00:89:17:43:04:3e:13:1d:82:
98:3f:fe:62:2f:0b:c7:b5:1e:96:10:ce:89:34:b7:9d:33:39:
2a:16:85:d2:d1:b0:40:85:b6:4e:06:9a:21:b4:67:be:36:45:
3d:ed:a9:88:ef:97:64:08:80:5c:eb:b9:93:fb:67:9f:6a:b0:
27:bb:50:38:24:83:92:35:f3:09:dd:ed:cc:8d:90:9a:b3:c5:
d8:b3:bd:c4:89:a2:16:52:b1:05:81:da:e3:9a:63:1b:ad:87:
31:60:62:a0:89:73:0e:1b:c8:82:5f:86:fe:d0:65:23:ed:72:
d2:d5:93:c3:92:ad:b1:1b:ba:dd:5e:5b:3c:69:60:fd:72:a3:
35:7b:73:44:9f:45:e9:f6:ef:1d:54:4e:2d:45:74:e6:94:19:
24:ef:95:4d:4b:cf:a5:8c:57:90:1b:15:88:4a:4e:14:96:30:
b4:9f:6a:4d:c8:20:b0:73:52:1f:8b:1e:d3:5c:32:dd:e2:4d:
b1:14:33:52:5b:47:a9:b5:7a:a8:f1:ef:d1:d2:a9:d9:20:6e:
79:8b:50:ad:4a:f0:f5:3a:4c:69:a7:16:94:7d:68:b7:0d:7f:
bd:76:d4:e8:34:aa:61:81:b1:3f:62:8c:00:c1:59:28:c8:9f:
3d:07:d9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:33 2025 by rpki-client