Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Vlzmxf-KlKuVcacnuWC8gpfhk6c.roa
File: Vlzmxf-KlKuVcacnuWC8gpfhk6c.roa (raw, json)
Hash identifier: 6ce1HkPTaDmIAiOW4Qzx/+KMatYjQFQ/vhCwHbyWtnk=
Subject key identifier: 56:5C:E6:C5:FF:8A:94:AB:95:71:A7:27:B9:60:BC:82:97:E1:93:A7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1373
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Vlzmxf-KlKuVcacnuWC8gpfhk6c.roa
Signing time: Fri 01 Sep 2023 09:24:57 +0000
ROA not before: Fri 01 Sep 2023 09:24:57 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 123.205.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4979 (0x1373)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:57 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=565CE6C5FF8A94AB9571A727B960BC8297E193A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:fa:bd:4d:12:f4:bb:d6:36:0c:42:07:fd:
6d:0a:f1:26:4f:f4:1f:1a:a6:e2:ed:0d:79:cf:d6:
0e:ca:91:48:68:2f:36:fc:12:c0:19:3e:f9:92:89:
46:a7:62:7d:3e:e3:8b:8f:1e:08:e9:78:be:33:f5:
3b:a2:82:5b:9e:9f:bb:5b:7e:d9:e5:9b:c3:c2:43:
46:09:e6:d4:86:4b:60:9f:1b:4b:aa:6c:cf:0f:35:
af:8f:5b:81:c2:1c:37:12:c5:e9:b0:5c:c4:13:5a:
99:b0:41:20:f2:7f:15:fb:76:fc:81:b9:79:49:e5:
19:9e:45:9d:28:dc:c2:b1:2b:2f:68:c5:ca:4b:37:
de:58:78:ba:45:56:61:d7:fa:06:a3:d5:4c:58:dd:
ed:09:02:0e:f0:32:ab:9c:8e:fb:29:26:5a:18:60:
c2:bb:a1:f9:b0:f0:23:80:8a:3b:30:66:46:32:c7:
e1:fe:2b:bf:ce:62:ce:6b:dd:f9:92:c2:77:d9:cb:
6c:3e:e4:89:ba:fa:4f:b6:bc:cb:ce:31:b3:46:10:
f3:f6:01:dd:53:25:eb:9d:85:4b:b9:fc:d6:50:39:
16:a3:3c:60:22:73:5a:7f:00:8b:2a:b0:84:f0:6f:
d5:82:c4:f1:e9:5e:1d:a6:f8:7d:66:9e:3c:9b:87:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5C:E6:C5:FF:8A:94:AB:95:71:A7:27:B9:60:BC:82:97:E1:93:A7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Vlzmxf-KlKuVcacnuWC8gpfhk6c.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.0.0/18
Signature Algorithm: sha256WithRSAEncryption
81:34:f5:09:97:6d:d0:7d:f4:41:8c:13:58:b5:17:0a:0b:24:
62:21:65:21:4f:90:b8:a0:ab:fa:14:21:21:ba:94:65:1c:73:
27:37:25:b3:aa:27:c9:1c:b1:54:ea:d4:a3:15:8c:09:04:8b:
d1:f5:16:1e:b3:7d:5f:0e:79:35:07:28:83:f0:e3:de:e6:77:
29:45:97:0c:1e:56:67:87:ff:44:2e:6e:49:49:91:3b:5e:bf:
0a:ed:17:0a:22:9f:f2:e3:f0:28:1b:6a:13:9f:96:16:3e:d4:
bc:21:bb:ae:8e:db:3f:da:76:66:68:d7:53:29:d8:c7:cd:1f:
d7:91:c6:e2:9f:b6:27:10:13:62:38:2b:21:d7:78:20:24:56:
71:0e:ca:2e:20:bd:04:ab:a6:ec:44:27:37:ea:5a:9a:36:4a:
7e:4d:9a:4e:44:af:c2:46:09:38:94:e2:e6:bd:7e:85:b6:78:
a1:e8:e5:13:ac:d7:39:16:1a:39:9c:fe:fe:01:da:fe:d6:30:
89:b5:be:3e:2d:84:07:21:05:5d:9e:69:9a:18:ec:be:ef:96:
41:f4:04:c4:d9:3f:f1:72:b9:1c:e1:aa:83:a4:29:b0:e9:74:
bd:51:15:13:66:dc:73:f9:1a:c3:c3:fd:13:13:b2:8f:ae:c6:
a3:68:6d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:32:19 2025 by rpki-client