Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/UKWv7D5mfKkBqAIjf9mZY8uqPz0.roa
File: UKWv7D5mfKkBqAIjf9mZY8uqPz0.roa (raw, json)
Hash identifier: PVd1BkDjXwrhw6yY8ps4a9GzQMRHJPWeHa4E6CJk7ec=
Subject key identifier: 50:A5:AF:EC:3E:66:7C:A9:01:A8:02:23:7F:D9:99:63:CB:AA:3F:3D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13B8
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UKWv7D5mfKkBqAIjf9mZY8uqPz0.roa
Signing time: Fri 01 Sep 2023 09:25:20 +0000
ROA not before: Fri 01 Sep 2023 09:25:20 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 220.229.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5048 (0x13b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:20 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=50A5AFEC3E667CA901A802237FD99963CBAA3F3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4e:55:5f:30:d5:29:61:62:43:ac:5f:45:23:
2f:cc:7e:04:2f:a5:26:f4:a6:68:61:58:68:8e:ff:
5a:d0:46:bc:aa:e1:16:2f:d1:8c:80:5e:e9:73:d8:
cf:fc:2a:ed:13:73:2f:0f:eb:85:a4:3a:50:46:f1:
be:22:15:41:88:d4:99:cf:5f:78:3b:fd:de:bd:6e:
fe:5f:1d:53:05:68:b8:93:3c:26:1d:cc:bc:6b:38:
c3:95:44:67:55:9a:39:3b:6a:35:3d:ea:f5:87:a2:
c2:a9:39:da:05:34:73:17:f9:69:1c:36:b4:7a:1b:
37:d1:cf:3c:cb:ab:55:66:10:cd:83:45:10:05:67:
93:ce:29:e8:d1:1c:ac:c0:ad:23:bd:2d:9b:00:a1:
bd:de:f7:5a:d0:b6:f2:24:11:de:55:c9:71:89:fe:
f5:56:0e:ab:dc:ab:e7:d7:88:bb:4e:46:bd:19:ab:
89:d3:16:e6:49:56:e8:c7:e7:c3:42:c4:d4:56:6f:
04:4d:88:24:5c:ed:8b:99:2e:f5:fb:29:19:9e:7d:
99:76:bd:ce:d1:19:a0:fe:a3:73:06:f3:65:dd:db:
f8:67:1f:3c:ee:7f:f7:b1:ad:90:fb:52:be:33:5f:
48:97:c0:fd:cb:ba:34:eb:a3:8a:d5:7e:f0:59:3d:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A5:AF:EC:3E:66:7C:A9:01:A8:02:23:7F:D9:99:63:CB:AA:3F:3D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/UKWv7D5mfKkBqAIjf9mZY8uqPz0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.68.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:30:f9:99:09:5f:4d:fc:14:98:5b:ce:14:df:ad:9b:11:d7:
19:7d:25:9c:2e:de:c1:7e:54:4a:58:2a:f6:64:40:1b:c3:44:
00:69:6d:7d:9d:84:93:a2:c6:b1:60:76:8c:8a:d4:79:10:d8:
76:e5:48:b2:13:ba:3f:22:34:5a:2e:c2:7e:e2:6d:3b:54:8b:
f5:c7:ec:c6:bc:2f:e6:e8:16:f1:0a:6a:b8:29:13:97:03:59:
91:3a:0f:5c:00:ab:b0:c8:c0:54:e2:44:3b:48:a0:51:ad:bf:
1f:76:ec:e1:0f:55:00:ba:69:d7:f6:42:35:d5:d0:d3:76:e6:
c0:e1:45:36:ad:2c:c5:37:11:79:d3:bc:6b:21:1d:b5:46:02:
cc:d9:6d:d9:2f:ee:62:5b:ae:1c:74:4f:0c:bc:10:2a:9a:72:
97:bf:89:99:ac:d7:ba:37:d1:7c:b9:a8:ef:e5:81:9d:11:44:
13:67:65:3f:9e:cf:9b:7e:5b:e2:5c:3b:a3:ce:37:b4:3e:12:
b9:fb:af:76:57:49:3e:42:8a:71:5d:12:66:26:fe:f7:61:c7:
30:60:90:2b:fe:f7:a4:7d:18:7f:a0:84:0c:ee:dd:c6:45:c9:
12:97:2d:92:d0:9c:13:89:0f:fe:c3:65:81:b6:fd:62:66:1e:
3c:a2:57:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:00 2025 by rpki-client