Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/YBUeL7SMLfPbi9xoNktq3q3zDLw.roa
File: YBUeL7SMLfPbi9xoNktq3q3zDLw.roa (raw, json)
Hash identifier: aSa2L2yOjdPmZ2pl/DgC6Z69SLZJeXzRZ63nhTGfz8E=
Subject key identifier: 60:15:1E:2F:B4:8C:2D:F3:DB:8B:DC:68:36:4B:6A:DE:AD:F3:0C:BC
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0CCD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YBUeL7SMLfPbi9xoNktq3q3zDLw.roa
Signing time: Sun 07 Feb 2021 11:45:18 +0000
ROA not before: Sun 07 Feb 2021 11:45:18 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 113.196.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3277 (0xccd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 11:45:18 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=60151E2FB48C2DF3DB8BDC68364B6ADEADF30CBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:2a:19:32:f9:5a:74:57:26:14:49:e7:7a:
de:28:b1:3c:a7:7e:3b:ee:24:fd:97:d4:07:64:b8:
a6:d5:a1:c3:76:69:01:6a:68:3b:f1:f8:31:77:d4:
00:54:ed:6e:7b:c6:66:42:d0:26:8b:14:2d:4f:9d:
70:32:ee:63:fc:06:41:66:61:fd:c5:03:a8:be:24:
1c:7c:df:16:86:52:66:6e:52:cb:c7:44:35:4f:3e:
05:52:b9:19:9b:a4:8e:a3:83:aa:e1:69:45:a8:9e:
f6:9a:c5:a6:9c:3c:f9:ed:ae:50:94:50:f0:98:12:
3d:cb:85:c6:80:52:92:f4:15:dd:e1:03:9f:4e:24:
b9:26:ec:0c:9a:ab:10:a9:3a:5b:98:cd:3b:a2:3c:
2a:5c:9b:9c:bb:07:e2:a7:ba:5d:6a:aa:81:55:2d:
0b:dd:72:7e:ea:a3:d2:15:c5:35:e8:9c:79:05:6a:
2e:74:5d:ac:03:7c:5c:af:8b:9a:01:5b:ec:da:e4:
15:15:cb:66:ab:de:8c:b0:e8:89:b2:3b:af:b4:e4:
04:31:05:e3:13:13:7f:72:17:5c:f1:61:73:58:64:
4d:d9:0b:8e:67:22:8e:65:11:f2:67:4d:51:16:76:
16:02:e0:83:cf:30:84:33:fa:e7:b1:84:d9:1e:c6:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:15:1E:2F:B4:8C:2D:F3:DB:8B:DC:68:36:4B:6A:DE:AD:F3:0C:BC
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/YBUeL7SMLfPbi9xoNktq3q3zDLw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.192.0/18
Signature Algorithm: sha256WithRSAEncryption
7b:e0:ff:f6:87:3d:23:8d:4a:52:c1:b1:8c:e5:76:4d:1b:77:
ae:3b:19:01:8e:16:c4:36:b0:7d:5f:d0:45:00:39:18:04:05:
7b:9b:64:39:b8:92:b9:56:80:25:a0:a3:00:b9:c6:f8:5d:f2:
66:a8:61:c1:fc:98:7e:cb:c3:dc:95:ac:dc:84:e5:9d:77:b6:
7f:b3:37:56:a7:d8:f7:28:ff:76:ed:06:fa:c7:d7:a9:a5:4b:
6f:b8:91:ba:89:f8:f8:f6:1d:94:57:a7:42:60:f8:51:e7:39:
25:5f:b7:b9:c9:ab:d4:c3:29:97:4c:65:45:7a:2e:53:cc:5f:
91:44:eb:94:f0:10:04:5d:9d:ee:46:65:48:27:21:3b:b0:fb:
21:95:9e:8e:94:16:8d:56:49:c0:16:61:43:b9:5f:76:c2:dc:
af:41:e6:e9:14:29:19:9a:8e:85:d1:c3:cb:04:0b:d7:6a:99:
b6:7c:36:22:7f:dc:85:d3:06:f8:db:97:e8:ce:48:22:94:de:
ed:2c:f3:d6:0f:c2:31:c8:13:94:67:45:4d:cd:88:e3:54:8a:
ea:48:13:09:a6:81:b8:83:c3:56:7e:83:63:0a:98:18:56:aa:
b2:0d:35:79:f0:2b:e2:07:c6:e8:3f:76:e6:e8:a7:63:75:27:
4b:d2:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:26 2025 by rpki-client