Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Q5kvtp0KdrKXVYuBepYY0EXPIqk.roa
File: Q5kvtp0KdrKXVYuBepYY0EXPIqk.roa (raw, json)
Hash identifier: vSVP9ju9e9cdCO/NiWiiYfRcyLSdrrFjKnxaOvyIq00=
Subject key identifier: 43:99:2F:B6:9D:0A:76:B2:97:55:8B:81:7A:96:18:D0:45:CF:22:A9
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0B80
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Q5kvtp0KdrKXVYuBepYY0EXPIqk.roa
Signing time: Sun 07 Feb 2021 06:22:57 +0000
ROA not before: Sun 07 Feb 2021 06:22:57 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 60.245.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2944 (0xb80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:22:57 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=43992FB69D0A76B297558B817A9618D045CF22A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:20:b6:6e:82:21:7f:c6:23:46:7d:97:2d:
7d:08:52:2d:3e:18:b4:c4:a5:dd:e7:75:1f:35:f1:
00:36:4c:a4:2b:a8:88:e4:34:13:53:d2:84:da:11:
7b:23:e2:a6:c7:de:4a:7f:ee:24:9c:9c:aa:ab:e2:
e2:bb:d9:20:e1:a2:d4:3b:d4:b8:72:ce:bb:7c:df:
78:1f:52:f2:66:08:fb:e4:3d:2c:3e:a8:8a:09:cf:
27:5e:4b:7f:ac:fc:9d:8b:7c:d4:57:13:e0:f4:96:
cb:89:fa:aa:d3:74:5a:94:42:03:69:72:94:97:66:
c3:d5:4d:44:fa:6e:80:dd:37:d4:5f:ed:78:35:9a:
f0:fa:b1:3d:26:a0:da:10:c5:a4:4f:e1:37:fd:dd:
92:06:d0:f9:3b:f1:b5:dd:aa:02:b8:c2:37:78:f1:
79:33:cc:e8:40:c4:5f:bf:bd:9e:18:1d:39:60:09:
da:7d:95:f8:ed:89:19:9a:33:d6:6b:99:8e:3d:88:
be:4b:b3:66:27:2e:60:00:30:e2:d8:f1:e3:4b:44:
d5:e7:9a:25:6f:42:f8:28:f0:22:2f:03:56:d5:31:
f0:af:2d:73:ee:e5:d4:5e:c4:5c:5c:1f:c4:83:52:
49:82:cd:f0:90:d8:40:12:a4:f1:f0:5e:b1:a2:eb:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:99:2F:B6:9D:0A:76:B2:97:55:8B:81:7A:96:18:D0:45:CF:22:A9
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Q5kvtp0KdrKXVYuBepYY0EXPIqk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.64.0/19
Signature Algorithm: sha256WithRSAEncryption
22:e4:e3:5d:ae:9e:e9:6c:2f:f1:10:88:68:70:49:07:fb:e7:
bd:33:46:2e:c0:5e:5f:36:7d:1c:e5:63:5b:09:82:4c:70:de:
f0:35:b8:50:a5:1a:ad:e6:1a:07:ab:0b:4e:7b:e2:f2:7f:6e:
4d:25:1f:67:8f:e8:95:de:6f:f5:4d:20:9d:fe:de:89:f8:cd:
bc:dd:e2:5f:4d:d4:79:53:f4:68:21:23:97:0c:f0:70:a2:37:
56:a9:08:c0:02:b2:cf:ee:83:a6:f5:7e:7a:ad:db:a6:4f:0e:
54:17:e5:94:58:65:61:a1:f0:68:a0:46:95:79:c1:40:de:55:
98:e5:e9:21:b1:c9:aa:c7:c5:72:e0:9a:00:38:9e:94:8e:10:
0d:49:68:8c:46:f7:3d:bc:ac:7b:e9:79:d3:c1:57:86:6b:2b:
61:40:bf:20:7a:b8:46:fc:7f:43:04:ad:9f:6b:52:11:cb:0d:
24:06:61:85:d3:03:cb:f8:c9:58:c1:e5:f3:c0:c8:c5:0e:71:
72:58:5f:96:14:26:28:d4:42:d6:e6:cf:ba:93:6a:4d:4c:1f:
dc:5c:3e:94:53:96:2b:2f:ad:de:26:9a:8f:ef:e9:ab:c6:16:
71:55:c8:7d:fc:0d:9d:c8:7a:bf:70:69:bf:da:28:1c:e0:e4:
f0:e7:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:28 2025 by rpki-client