Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/QR0Q3R_XEUUqnw5n_aHGm2rrnSc.roa
File: QR0Q3R_XEUUqnw5n_aHGm2rrnSc.roa (raw, json)
Hash identifier: jAa2Y14oBEwF0KbvHYrPlsWg0VAXWYAbelqdL+Gq3bQ=
Subject key identifier: 41:1D:10:DD:1F:D7:11:45:2A:9F:0E:67:FD:A1:C6:9B:6A:EB:9D:27
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1340
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QR0Q3R_XEUUqnw5n_aHGm2rrnSc.roa
Signing time: Fri 01 Sep 2023 09:24:42 +0000
ROA not before: Fri 01 Sep 2023 09:24:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 136543
IP address blocks: 115.30.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4928 (0x1340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=411D10DD1FD711452A9F0E67FDA1C69B6AEB9D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:22:1d:79:bb:8a:9b:b3:4e:13:a6:28:ed:
c2:0c:b3:a6:70:45:25:71:d5:45:f1:fa:e1:37:34:
02:51:81:2e:e3:e5:7d:1f:ce:27:9d:4d:f2:66:9e:
3b:4c:d9:0c:68:e4:ae:8d:ca:89:72:f4:05:c4:ed:
32:9d:57:e8:80:c5:ec:39:39:30:58:8b:5c:5c:9d:
e2:88:10:32:1a:ea:eb:92:87:65:50:8a:83:86:e6:
82:0f:39:fb:ce:e3:85:5d:a6:05:12:b0:a6:a8:96:
d9:0c:dd:40:0c:17:1f:a9:c8:a3:ae:5d:ae:b0:e5:
4c:66:26:dc:47:22:ce:6c:e4:ea:8a:f1:f8:d8:e5:
40:0c:82:47:e6:f1:cc:96:64:fb:f2:c8:bc:b2:c2:
ef:bb:93:3c:4f:df:7a:50:17:46:56:e4:c7:ff:83:
61:97:3e:93:36:8c:89:ca:6e:60:53:df:cb:c5:5f:
c7:be:c6:bb:47:54:dc:aa:d1:9c:bb:9a:fa:15:3e:
49:bb:c6:ba:78:c4:7c:e5:38:e4:e6:69:35:b3:59:
20:53:20:ed:fc:55:9d:d0:eb:38:bd:28:42:d4:c0:
b3:52:3e:1d:21:fe:46:45:1d:76:82:25:5a:4c:ac:
01:df:26:b1:5a:52:36:ef:dd:83:0a:26:bc:95:e2:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1D:10:DD:1F:D7:11:45:2A:9F:0E:67:FD:A1:C6:9B:6A:EB:9D:27
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/QR0Q3R_XEUUqnw5n_aHGm2rrnSc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
115.30.65.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3c:c9:26:b4:e6:93:ad:e4:19:6b:b2:c7:d9:75:b7:01:54:
56:72:37:42:2b:fa:5e:f1:29:95:dd:58:ff:2a:19:9f:0e:b7:
99:34:4c:7e:2c:91:06:be:ed:34:98:44:57:13:ff:98:c9:98:
a0:df:29:78:aa:ea:18:07:6f:57:f7:90:f7:88:e8:40:9f:88:
09:31:8f:61:f7:83:e4:83:97:20:98:8b:43:28:28:90:89:d4:
3c:d5:95:49:c5:1d:0a:ca:a6:53:0e:5e:d1:4d:21:ee:0c:96:
3a:59:1e:36:15:cc:fd:9d:70:e2:9a:1c:95:09:e1:95:8d:77:
6f:bd:da:8e:a0:fa:ca:eb:ad:11:1d:a7:33:d2:98:2b:31:6e:
fc:95:0b:be:46:f2:27:2f:39:f1:df:17:ee:37:90:d0:31:0e:
51:cb:df:c9:73:da:bf:80:3c:56:4a:2d:c5:90:f6:c3:0b:35:
72:e3:6a:93:5f:3e:9b:f9:7f:fa:e0:7e:cc:fb:73:bb:f7:93:
78:16:32:5c:93:01:ce:01:bf:d0:14:5e:8d:bd:1e:43:b1:69:
9a:0e:d8:67:a0:48:c4:ce:cf:fb:42:2a:4d:42:af:e6:92:33:
8d:d5:d2:7b:e7:12:1e:2c:1e:1a:38:d1:a4:ec:af:76:b4:49:
d6:12:c8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:03 2025 by rpki-client