Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/OXyFNsB-qf69HFuw6jxDQuUJB0Q.roa
File: OXyFNsB-qf69HFuw6jxDQuUJB0Q.roa (raw, json)
Hash identifier: O6antgmEqgCYLgHWuC+ZHV3cv4LQHSEvMlmEhGOu6BQ=
Subject key identifier: 39:7C:85:36:C0:7E:A9:FE:BD:1C:5B:B0:EA:3C:43:42:E5:09:07:44
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/OXyFNsB-qf69HFuw6jxDQuUJB0Q.roa
Signing time: Thu 15 Sep 2022 02:43:43 +0000
ROA not before: Thu 15 Sep 2022 02:43:43 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 122.147.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:43 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=397C8536C07EA9FEBD1C5BB0EA3C4342E5090744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:b0:bb:15:47:3c:93:2a:14:ff:98:41:bd:
15:57:1c:36:3a:56:72:2c:43:b3:af:09:cb:49:91:
b1:d1:13:16:38:54:bd:38:15:06:0c:57:c9:f3:5e:
5f:af:e8:b9:78:b4:fb:e0:1b:42:39:65:3b:83:0a:
01:60:86:76:29:3e:09:4d:c3:39:a1:4b:e2:ab:2f:
be:5f:bb:68:b5:a8:10:90:0b:4b:21:12:2e:5f:f6:
9d:cf:74:1e:71:c8:33:39:32:68:cd:55:80:8d:cf:
ee:ec:50:52:e7:4d:ab:ff:ba:57:c6:9a:b7:c5:f4:
1f:58:b3:81:d2:76:5e:a2:b9:5a:25:34:a5:95:64:
59:41:f1:92:e6:9e:33:a6:86:ac:9d:88:dd:0d:02:
34:e0:d4:94:8f:83:9a:ab:49:09:91:32:1c:43:06:
a0:3f:36:a7:fc:6f:cb:7a:53:e6:32:ec:43:1a:5f:
e3:0f:d5:76:a0:16:1d:df:6b:7d:c6:eb:5d:95:48:
c2:80:ca:bd:20:f4:60:42:55:8b:fc:d2:43:17:57:
cd:2c:82:82:54:4a:97:6a:fe:3c:79:bc:0c:7a:b6:
0d:a7:8b:34:b3:e8:1d:8a:50:d6:5d:15:2e:1d:22:
82:50:93:82:26:a0:50:43:7e:00:0f:51:ae:28:2e:
5d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:7C:85:36:C0:7E:A9:FE:BD:1C:5B:B0:EA:3C:43:42:E5:09:07:44
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/OXyFNsB-qf69HFuw6jxDQuUJB0Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.16.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:e9:18:3c:fa:de:9a:c1:85:89:ff:51:f5:7d:03:f7:1e:a4:
f1:77:d3:90:35:1d:1c:c7:93:b0:25:7b:a0:d2:e0:87:6f:de:
2e:45:02:5c:bd:e6:0d:ef:d5:f1:b6:87:b7:65:79:49:08:a7:
b2:b0:b8:1e:da:09:b2:8a:ae:7c:cc:1b:6f:2c:05:ee:69:79:
f9:a6:45:03:c2:37:30:27:a6:45:24:e2:12:a9:af:fb:3a:26:
3b:bb:1c:c6:31:14:81:fb:9b:56:4f:4e:bc:e5:c7:2a:e5:ed:
db:88:b7:37:7a:17:87:56:13:af:f6:63:9f:e4:da:db:5d:75:
e9:e2:05:e9:45:86:99:4e:0a:c8:b4:39:d7:a9:00:0e:1c:d3:
9a:1d:46:25:da:f9:79:93:6a:70:81:2c:fc:d0:62:42:38:6c:
62:66:39:db:6c:05:7e:f2:ab:d5:01:e6:49:35:34:1e:f1:57:
6f:f5:75:30:c1:43:fa:68:4e:9d:d7:33:a3:44:4c:81:e0:aa:
6a:73:d4:0e:db:27:2b:8b:52:f6:11:f0:7d:17:e5:67:f6:9b:
95:90:b6:8f:ad:47:89:d2:14:11:c3:6a:ae:85:ac:f1:88:fd:
57:c4:54:e5:34:9d:bb:cf:dd:6c:dd:88:6c:6e:cb:c0:ef:b8:
f7:ef:ba:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:47 2025 by rpki-client