Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xn0lygeS7i48P5n8FJycUSh448E.roa
File: Xn0lygeS7i48P5n8FJycUSh448E.roa (raw, json)
Hash identifier: 7LdmckXLEZw429DMnYsx3nh/WLpdmEwYI4bH658OBSs=
Subject key identifier: 5E:7D:25:CA:07:92:EE:2E:3C:3F:99:FC:14:9C:9C:51:28:78:E3:C1
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1852
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xn0lygeS7i48P5n8FJycUSh448E.roa
Signing time: Mon 10 Feb 2025 14:07:49 +0000
ROA not before: Mon 10 Feb 2025 14:07:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131602
IP address blocks: 123.205.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6226 (0x1852)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=5E7D25CA0792EE2E3C3F99FC149C9C512878E3C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:a9:e6:fe:f5:ea:bb:35:b9:31:9c:68:54:
f1:8a:29:36:1c:42:b3:70:f0:db:d8:59:01:4d:c4:
ea:40:51:46:48:50:0b:fa:60:1f:d9:b5:86:57:a3:
36:82:94:c5:94:87:1a:1b:62:3e:49:63:cf:c4:49:
86:f4:99:49:57:0f:e5:8e:49:5e:75:ab:23:4f:23:
76:96:14:44:80:04:aa:ee:50:a1:65:67:d7:fd:56:
c2:21:56:35:85:78:35:e4:47:73:02:64:f2:ae:71:
a9:69:7b:26:0d:c7:10:1d:72:68:a2:11:26:b7:c4:
39:ac:d5:8a:11:e2:47:04:ba:b5:d1:41:f9:83:48:
ea:8e:ca:a7:71:99:11:65:1e:1e:56:82:10:b9:4b:
8e:78:c8:bb:bd:4b:42:e3:d6:bf:73:a4:bc:68:b7:
85:ba:59:c4:0d:ad:dc:d4:f4:6f:20:ff:ec:60:e5:
21:29:71:a1:d8:3d:db:a6:0f:38:e8:41:ea:39:85:
f5:21:e2:26:d2:f7:d9:51:62:45:70:7b:29:6f:ad:
4c:71:65:01:12:ed:ce:5e:53:7b:e4:99:50:47:f9:
08:c4:df:9a:0d:7b:b5:8b:ae:5c:73:6f:4b:70:22:
fa:71:11:74:da:f1:a3:66:a6:21:cc:e9:5f:c6:5d:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7D:25:CA:07:92:EE:2E:3C:3F:99:FC:14:9C:9C:51:28:78:E3:C1
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Xn0lygeS7i48P5n8FJycUSh448E.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.176.0/20
Signature Algorithm: sha256WithRSAEncryption
79:bd:bf:d0:40:3b:80:50:92:d7:e7:12:5e:ed:11:de:ff:bf:
47:95:4b:05:80:a1:a9:a0:24:f5:56:54:c0:b0:3c:61:78:05:
4b:cb:31:f1:ca:bb:52:a7:06:36:72:38:19:b8:cf:89:0b:fb:
ac:61:d6:70:13:e0:76:e0:11:87:b6:2b:16:3e:3f:f0:68:09:
02:41:06:84:f4:84:b9:e6:04:29:6b:c7:a0:e2:66:71:58:36:
46:0a:36:45:f6:df:5d:c2:ce:af:33:3f:e1:69:5f:8b:c2:a6:
8e:aa:84:e0:f6:f5:f6:a3:0b:6f:64:d7:ee:6b:d8:5c:14:00:
a2:56:93:9a:67:f0:d6:ba:dd:da:0d:5e:c2:2e:30:73:19:86:
cb:44:f1:7e:87:ef:a9:7a:93:fd:b5:44:48:f5:b4:bc:b5:e8:
75:d7:eb:fd:ca:55:dc:9d:65:57:ae:42:47:0c:33:54:b0:a9:
da:41:21:1e:df:6f:38:70:3a:a6:22:95:37:74:02:4d:06:c6:
45:63:7f:82:1d:91:0f:90:c0:63:f1:c5:f0:0a:5b:d1:bd:e3:
16:fd:51:fc:dd:2a:e5:6b:13:3c:c3:43:ed:7c:6c:c0:ee:77:
98:8d:d7:36:d2:00:e7:9f:7e:84:9f:9e:23:3b:9c:31:f1:fb:
78:da:8e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:08:19 2025 by rpki-client