Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/TRfCdCXvJDNWzN7tSmbnnquq6SU.roa
File: TRfCdCXvJDNWzN7tSmbnnquq6SU.roa (raw, json)
Hash identifier: Y0qycHOP0/vxIArIplVq89JhOIsR3dLPeIRrXob4tw0=
Subject key identifier: 4D:17:C2:74:25:EF:24:33:56:CC:DE:ED:4A:66:E7:9E:AB:AA:E9:25
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TRfCdCXvJDNWzN7tSmbnnquq6SU.roa
Signing time: Thu 15 Sep 2022 02:43:10 +0000
ROA not before: Thu 15 Sep 2022 02:43:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 131627
IP address blocks: 103.234.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=4D17C27425EF243356CCDEED4A66E79EABAAE925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cc:42:98:38:20:30:8f:9d:51:d4:f2:99:26:
11:cd:92:2d:5d:08:5b:50:b1:f5:ad:2d:03:8b:fd:
69:88:37:49:29:49:f6:13:8a:a4:4b:48:1d:b4:aa:
48:9a:36:1e:6c:94:97:f3:9f:39:4a:8e:9b:98:f1:
c7:5c:4a:93:52:b8:e3:91:cf:d8:6a:66:f5:bd:0a:
17:9a:9d:0d:7a:5d:0c:41:b1:4f:04:cc:75:e8:08:
53:a8:d8:fb:7a:92:00:e2:68:27:79:41:31:13:fa:
2e:66:ed:76:82:ba:87:54:3a:c2:d0:a4:f0:71:93:
1c:84:db:6e:88:b7:82:2c:55:2b:99:f6:03:88:f0:
8b:86:06:60:50:3f:56:8a:a5:0a:26:bc:69:42:87:
65:94:ed:90:60:43:9f:ce:d1:bf:9f:c4:fa:1c:c6:
eb:65:a4:65:69:4d:6b:3a:72:3f:0d:32:f3:cb:d5:
3c:67:32:c4:fa:a7:cf:cb:c7:79:dc:58:16:42:40:
08:f2:70:e8:ac:13:78:ff:07:a2:b0:ce:bb:80:c5:
35:08:fb:42:4c:a2:32:f8:44:0e:cb:f9:75:74:f5:
50:23:fd:79:ef:39:b3:33:c1:39:13:1d:8c:c6:dc:
66:90:b3:d5:74:c4:4e:b2:f8:63:8e:16:36:62:33:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:C2:74:25:EF:24:33:56:CC:DE:ED:4A:66:E7:9E:AB:AA:E9:25
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/TRfCdCXvJDNWzN7tSmbnnquq6SU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.234.40.0/22
Signature Algorithm: sha256WithRSAEncryption
65:ce:8e:b1:e0:33:4e:8c:c9:9c:6e:7f:d7:c7:8d:06:80:c4:
13:b7:ec:30:11:63:cb:c0:e5:ff:f2:76:7a:69:af:de:d0:71:
7c:9e:12:93:36:b5:25:03:d1:fe:00:ae:36:f3:67:4a:ee:a9:
d6:25:19:4a:4e:41:e5:c8:8c:8d:1e:af:65:b1:82:bf:93:2d:
8d:0b:87:73:ba:a3:4d:22:ee:9f:a2:2d:0f:65:56:32:54:d7:
ea:3a:ca:72:03:b7:0a:28:3d:a9:ac:81:68:c9:2b:12:44:81:
41:10:93:68:3b:d9:a2:7a:4d:41:44:9e:4b:24:51:ed:aa:0e:
54:15:3f:f8:5c:0d:b1:e9:65:62:a5:9e:38:91:27:a1:c9:9b:
6b:d0:c9:8d:03:02:24:e2:2e:5e:e8:16:44:5b:00:d9:55:b0:
91:aa:a6:25:d6:06:bf:b9:e1:de:1a:dc:92:07:81:1f:01:01:
89:76:7a:23:39:87:bc:5b:9c:34:5c:76:fa:18:bd:18:42:e2:
fd:03:f5:5a:fe:69:d4:78:b1:82:37:f0:17:6b:86:73:0b:6b:
c1:be:b0:74:09:d6:cd:59:26:1f:0e:08:89:39:1c:d8:4a:33:
60:26:c3:d4:2d:38:db:f9:da:f3:bd:08:70:4f:37:26:7e:48:
a8:da:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:14 2025 by rpki-client