Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/V85E7v9hzjf5rkjLhT4TNmDdPoY.roa
File: V85E7v9hzjf5rkjLhT4TNmDdPoY.roa (raw, json)
Hash identifier: 4o82NSm6SwT3/aTZASGxejnbfsYPEA75fFBOWY4Mjj8=
Subject key identifier: 57:CE:44:EE:FF:61:CE:37:F9:AE:48:CB:85:3E:13:36:60:DD:3E:86
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/V85E7v9hzjf5rkjLhT4TNmDdPoY.roa
Signing time: Thu 15 Sep 2022 02:42:47 +0000
ROA not before: Thu 15 Sep 2022 02:42:47 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 123.205.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:47 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=57CE44EEFF61CE37F9AE48CB853E133660DD3E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0a:91:85:a4:1b:29:59:95:9c:0f:be:52:e9:
c5:9d:f8:ed:73:be:89:5d:97:10:1c:03:45:90:41:
63:8a:95:cd:5f:21:82:74:a7:77:a6:6b:35:31:b3:
7c:cf:f2:98:d4:22:07:98:86:6c:9b:3e:0a:37:1b:
e7:3b:84:9d:1a:08:91:1a:f1:aa:04:d3:be:e9:8b:
f2:f0:e0:9d:3b:12:e8:e2:aa:29:e8:5e:39:3a:42:
4e:2b:66:a9:de:67:e1:53:40:61:fb:34:58:d8:f3:
23:64:1f:db:e0:76:ab:08:03:3f:5f:4e:d2:f5:52:
e1:31:a0:4c:f6:2b:3e:8a:ff:d1:8f:ac:66:da:b4:
a7:63:23:45:9a:ad:46:89:b6:09:7c:db:f6:54:6d:
8d:3c:aa:21:5b:2c:67:ad:29:d1:4e:c0:37:67:cf:
2b:b0:29:65:4f:b2:c3:fa:64:9a:40:12:3c:d1:84:
5a:d3:df:d2:ac:e2:dd:18:60:62:f2:dc:4e:e9:86:
be:e3:55:45:73:d0:76:1d:2c:b2:06:5c:02:2a:ad:
6a:ae:a4:ad:5a:e9:b9:34:e8:51:63:68:09:4a:0a:
85:69:94:70:64:73:18:05:b4:e7:12:49:5c:90:87:
45:2a:1e:a6:dd:ea:06:6a:e0:df:71:96:a3:e2:dd:
e6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CE:44:EE:FF:61:CE:37:F9:AE:48:CB:85:3E:13:36:60:DD:3E:86
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/V85E7v9hzjf5rkjLhT4TNmDdPoY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.105.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a7:a6:86:a6:1f:63:20:ec:59:8a:1c:4c:1f:16:80:07:f3:
ee:91:58:30:e7:05:a1:6d:7d:c9:e4:31:2c:43:a8:09:ba:f0:
d7:db:be:cc:8d:d1:b9:9c:d3:7b:8b:4e:f7:c8:0b:61:89:e8:
ec:14:15:32:3d:14:ad:ae:78:a4:1b:73:28:8d:84:9b:7d:bd:
f3:79:1c:ec:3d:c3:c2:07:c3:2b:5a:07:5c:6c:1e:ed:e6:5c:
3a:8a:20:bc:e5:0b:28:97:19:6e:e0:45:d1:d7:76:19:28:ac:
e4:fe:2d:15:20:16:98:fa:19:7a:66:b5:18:df:42:b3:47:e9:
84:d6:5f:7a:f8:27:38:97:db:92:d8:7b:52:3a:bd:a3:03:93:
f0:27:a8:15:4b:a4:8c:11:55:55:d5:34:94:0b:83:26:4a:8d:
02:36:c6:06:94:fc:58:0a:74:24:93:ac:46:ee:7a:a7:0c:03:
f1:29:94:a3:7d:13:89:25:c5:9f:1d:39:ac:58:73:10:9b:5e:
3f:b5:0a:03:b0:74:54:89:bd:3c:76:59:ee:10:21:29:da:c5:
55:d8:2b:9f:fe:7a:2c:e7:16:2c:d6:53:a8:e9:81:e5:ea:78:
69:2f:f7:b3:b7:31:9e:0a:10:4e:8e:2b:99:44:6a:0f:2c:82:
09:5d:f9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:56 2025 by rpki-client