Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RVNbhsBelRyfBPqyhgJTHXZk_cw.roa
File: RVNbhsBelRyfBPqyhgJTHXZk_cw.roa (raw, json)
Hash identifier: gqtHQntSs1KRLTvztn/R40Tv9dGN9Bh/aSDqpdHEQ7Q=
Subject key identifier: 45:53:5B:86:C0:5E:95:1C:9F:04:FA:B2:86:02:53:1D:76:64:FD:CC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RVNbhsBelRyfBPqyhgJTHXZk_cw.roa
Signing time: Thu 15 Sep 2022 02:42:45 +0000
ROA not before: Thu 15 Sep 2022 02:42:45 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 218.210.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:45 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=45535B86C05E951C9F04FAB28602531D7664FDCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1d:39:fa:9d:d9:4b:0c:a3:9b:07:92:9c:7d:
ec:70:e2:83:6e:18:e6:73:c3:af:4d:7b:95:bf:2d:
d5:1e:02:95:c3:8c:61:75:87:30:21:b0:7d:ad:18:
dd:15:a2:a3:85:69:37:62:de:90:5e:7b:32:cf:3d:
3d:62:e4:00:11:6a:d8:c2:d3:cf:f7:91:0e:db:8e:
4d:cd:b8:d3:47:3f:3e:ce:8a:b4:94:fc:9b:56:37:
2d:25:57:70:a9:51:f6:02:d1:a5:94:85:99:c6:6a:
85:2d:3a:49:69:88:7c:bb:c0:93:1e:35:f4:c9:6e:
29:6f:ff:c6:43:81:9c:fc:e1:50:e9:db:08:87:0a:
37:e4:d1:db:55:76:e9:49:38:e8:92:49:03:ad:69:
e7:eb:10:ba:1a:54:80:4a:05:a8:e7:b6:55:7a:eb:
7f:31:ba:44:f4:e4:49:cf:71:dd:a8:82:4a:e4:ef:
a0:9f:47:65:fe:f9:72:d2:63:a6:13:fc:8b:00:9a:
b5:ff:f8:8b:8c:09:a5:b6:b0:8e:4a:30:89:35:a5:
b0:2a:10:8d:2e:bb:68:61:1a:4e:ef:92:3e:d8:81:
b7:be:47:0a:d7:89:26:d4:d0:1f:71:fb:d7:50:70:
63:6f:aa:74:3c:55:b7:a0:30:8e:fb:6b:2d:2f:f1:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:53:5B:86:C0:5E:95:1C:9F:04:FA:B2:86:02:53:1D:76:64:FD:CC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RVNbhsBelRyfBPqyhgJTHXZk_cw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
58:8e:20:2e:9d:17:65:fe:d1:59:56:55:11:c5:d3:d8:cc:ea:
66:6a:e9:e6:3d:64:5c:12:d5:5c:b0:f6:ac:e2:8c:86:9c:f3:
dd:81:9c:cc:30:03:12:cd:6d:3a:e1:40:ca:1d:d1:75:e9:ae:
98:78:f8:e0:5d:b9:2c:6d:c5:18:37:06:e1:c5:35:25:80:eb:
6c:ab:82:5f:47:e4:d4:88:fa:eb:1c:e4:48:82:11:7d:a6:59:
57:de:6e:67:de:57:6b:90:f6:ec:90:ae:8d:52:b6:29:83:27:
6e:50:c6:78:43:de:87:51:23:33:f1:fb:a9:35:1b:44:61:62:
3e:69:19:10:18:0b:b0:17:57:1c:eb:7b:a6:42:76:df:9f:94:
cb:ff:92:e8:dd:08:1f:8b:e3:99:ae:79:22:90:3d:e0:8e:ab:
4f:a2:aa:45:c8:6c:e9:ea:69:5e:8d:ea:58:80:a1:87:71:9e:
78:95:f1:e8:91:5f:fd:26:7a:34:fb:0d:bc:82:e6:7d:f6:67:
eb:21:e3:68:07:ed:a3:ac:60:21:72:a3:62:f4:18:5a:71:c6:
e2:79:bb:dd:db:d7:6d:c1:63:22:9a:e4:9f:94:b4:4e:9b:f5:
9a:d5:97:8b:49:8a:ff:44:32:04:b6:0d:2a:92:1b:62:ce:0a:
c4:87:89:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:17:04 2025 by rpki-client