Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/S4noJWQE-YRfFL0klwrAsL0qk8E.roa
File: S4noJWQE-YRfFL0klwrAsL0qk8E.roa (raw, json)
Hash identifier: Mm7cMZK0b+HX8gpynoIz5z5aQ61E0B1beWTCRUMfhOI=
Subject key identifier: 4B:89:E8:25:64:04:F9:84:5F:14:BD:24:97:0A:C0:B0:BD:2A:93:C1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08AD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/S4noJWQE-YRfFL0klwrAsL0qk8E.roa
Signing time: Tue 29 Sep 2020 09:52:19 +0000
ROA not before: Tue 29 Sep 2020 09:52:19 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 122.147.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2221 (0x8ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:19 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=4B89E8256404F9845F14BD24970AC0B0BD2A93C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:58:f6:19:18:ba:0d:5a:5c:83:ce:e3:a6:0a:
82:ce:47:fb:3b:0b:1b:55:02:41:22:2f:e0:0f:d8:
69:fa:ad:96:0b:5f:69:16:cb:85:92:da:6d:a6:1d:
48:3d:26:67:5b:3b:85:b2:67:d3:e3:8b:4c:8a:87:
eb:0a:54:04:e2:e6:38:13:8e:c7:59:1a:66:d2:5d:
d1:2a:d4:38:7f:7d:b6:ef:97:84:8e:b5:aa:ca:56:
3f:1f:9a:8e:3a:05:54:31:5f:ea:ab:ae:29:6b:e3:
ae:49:3b:07:25:c9:f0:98:71:35:53:cc:6f:50:4b:
8e:03:4b:e5:bf:bf:48:07:e0:98:03:50:a0:b6:22:
83:33:f7:21:0a:64:b4:d5:a5:c7:21:e2:22:dc:ee:
37:ea:5a:01:29:9a:c7:41:77:5d:43:62:39:95:09:
ab:c2:25:47:b8:51:1b:ad:29:34:d8:93:a2:fc:5b:
71:bd:58:b9:85:25:ff:ec:5e:bd:87:47:30:90:81:
8d:0a:09:d3:cb:f2:d0:4c:06:e6:ca:fb:88:56:4d:
b6:44:64:36:1e:66:f5:9d:6a:db:a5:8c:d1:dc:6d:
68:fd:11:54:e8:62:b5:f2:c5:f9:4c:2c:9b:da:83:
82:f6:11:36:ff:41:06:a3:98:9b:ac:19:ce:f9:42:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:89:E8:25:64:04:F9:84:5F:14:BD:24:97:0A:C0:B0:BD:2A:93:C1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/S4noJWQE-YRfFL0klwrAsL0qk8E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:b8:67:fc:85:65:65:2a:1b:d2:9b:f2:c8:90:89:2b:55:d1:
e4:77:52:7d:ba:ec:e7:bd:50:96:78:05:5f:bb:c7:68:27:97:
ee:cb:15:5d:af:da:da:c1:49:c6:2b:2d:65:47:9f:fd:a1:48:
70:77:35:ab:f1:fd:06:3b:73:3b:d5:8d:34:f4:95:c7:3d:59:
40:32:76:62:c0:60:1b:2f:bd:de:fa:5d:f1:8f:94:08:88:cc:
a3:87:16:fc:20:39:b4:50:c3:6b:19:64:c2:92:74:84:e0:3e:
8e:0d:3d:c4:17:7e:a0:04:36:12:96:d8:35:26:db:2b:ae:c6:
92:0a:52:e3:80:d3:11:af:6b:f4:65:f2:b0:44:af:03:92:fa:
fb:0a:32:52:01:70:3d:2f:56:69:01:d1:c8:25:3c:85:ad:f5:
44:ee:7a:92:6a:15:f9:a9:c0:a8:38:10:52:fa:89:97:00:73:
59:14:6a:7e:f2:25:52:0b:03:34:8b:01:c8:54:d6:ad:0e:14:
2a:6e:ee:42:3c:96:c6:00:c0:12:59:3b:e0:8e:43:51:58:47:
34:78:12:d0:08:e6:7f:74:03:ee:99:87:d4:ad:cb:f1:4c:0c:
2f:15:79:b5:f8:9d:ca:16:39:0f:c1:f6:50:d3:02:44:dc:06:
cc:3e:4e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:34 2025 by rpki-client