Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/RX8_Es5cOakoA5wysRELKgN-zSI.roa
File: RX8_Es5cOakoA5wysRELKgN-zSI.roa (raw, json)
Hash identifier: j/U5ryTZ6GeGgF2LNMyWZ1HaRFTfvChkI1JKtFOE/Bo=
Subject key identifier: 45:7F:3F:12:CE:5C:39:A9:28:03:9C:32:B1:11:0B:2A:03:7E:CD:22
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 139A
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RX8_Es5cOakoA5wysRELKgN-zSI.roa
Signing time: Fri 01 Sep 2023 09:25:12 +0000
ROA not before: Fri 01 Sep 2023 09:25:12 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 218.210.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5018 (0x139a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:12 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=457F3F12CE5C39A928039C32B1110B2A037ECD22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:f7:01:f9:43:6d:ec:fe:39:5c:1d:08:cd:
ea:23:8e:8e:53:4b:15:50:00:d4:f3:7e:57:eb:1c:
88:19:29:15:b0:e9:7a:55:dd:1c:68:35:82:d7:e6:
e4:78:87:20:ef:85:ce:33:96:51:a3:b1:90:aa:49:
1a:5e:42:5c:45:9d:aa:f3:4d:ab:34:9e:08:7b:07:
fe:7a:c6:c5:d8:79:25:90:2a:97:b9:db:c7:47:52:
1d:cd:ae:23:2a:9b:f5:86:79:40:69:52:76:f9:b1:
53:14:52:8d:71:53:f1:e5:81:e6:96:86:42:77:77:
c0:5f:77:1b:bd:cf:bf:af:d7:13:6d:d2:a5:4c:46:
10:5f:0c:b4:db:22:40:42:cb:20:6b:f1:99:d8:05:
c8:4a:31:cb:cf:5e:2e:1c:e4:1b:f4:7e:fb:a0:03:
ed:8c:e9:06:b8:eb:b6:c4:4c:ca:d2:1f:ce:e4:ba:
cf:cc:57:2b:e2:75:62:e2:10:74:76:37:0f:aa:b0:
99:6c:93:64:3f:6f:51:27:e7:2a:70:4c:07:96:49:
36:e4:8b:c9:d2:23:e1:e9:7e:42:f9:ea:3d:70:40:
e1:cf:1d:44:bf:3a:35:06:eb:44:08:4f:a4:7e:82:
9e:f7:db:ba:62:40:c3:24:bf:2d:a4:96:9d:c2:8a:
03:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7F:3F:12:CE:5C:39:A9:28:03:9C:32:B1:11:0B:2A:03:7E:CD:22
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/RX8_Es5cOakoA5wysRELKgN-zSI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3a:e5:69:32:ff:b9:fa:68:4e:ec:1c:d5:57:09:66:3a:2e:d1:
09:fa:6d:d1:f0:cc:bb:d4:89:6f:b0:ff:4f:50:6a:e4:99:6f:
52:f4:e2:d6:71:4d:d4:fd:b6:01:5d:a3:e2:e5:c4:07:14:1a:
e4:ce:61:e1:38:64:cd:3e:e9:cf:85:fb:f0:3e:e5:f3:a5:fa:
2c:b7:02:be:5e:85:d0:a3:e4:26:52:4f:69:c3:69:64:2f:ea:
88:df:c5:c3:25:f5:27:11:ec:29:3c:3e:c4:b2:56:7a:ac:cd:
5a:39:e6:4f:cc:9f:30:26:50:0f:58:97:d7:b2:92:f2:43:28:
93:ab:08:02:1f:b2:c1:78:ff:69:45:7f:12:f1:80:d7:15:ee:
c2:af:85:2a:7a:55:fe:a0:43:91:d9:41:f5:e3:42:a7:f8:1c:
be:e2:fe:2b:a3:0e:c6:d2:d7:df:ea:1b:40:12:73:35:3a:e7:
dc:8a:57:0a:44:91:7c:ef:0e:28:18:ea:e2:87:1d:40:b1:e3:
a4:c0:be:b4:21:13:e6:b8:aa:64:e5:23:85:ef:55:a2:8a:30:
ea:f1:ca:cc:07:98:27:29:2a:45:b1:21:50:f1:c5:d0:8d:22:
9e:9e:56:39:7f:9d:d2:f7:57:f7:74:59:8d:c9:9e:21:c4:15:
4c:db:a6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:59 2025 by rpki-client