Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ymh6kIJQlG3KQEPWbMLd2yufKfk.roa
File: Ymh6kIJQlG3KQEPWbMLd2yufKfk.roa (raw, json)
Hash identifier: /RybmNe3AhxHfVVTJBufqagFPxVuOl7guJHXCJ8jaFU=
Subject key identifier: 62:68:7A:90:82:50:94:6D:CA:40:43:D6:6C:C2:DD:DB:2B:9F:29:F9
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1329
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ymh6kIJQlG3KQEPWbMLd2yufKfk.roa
Signing time: Fri 01 Sep 2023 09:24:34 +0000
ROA not before: Fri 01 Sep 2023 09:24:34 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 122.146.96.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4905 (0x1329)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:34 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=62687A908250946DCA4043D66CC2DDDB2B9F29F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b6:94:2b:d8:1e:29:78:c4:9b:4e:bf:70:d1:
f6:86:d3:b8:f8:d2:78:a8:00:80:13:44:4e:d4:d6:
ec:15:e9:c9:de:70:b0:b8:2d:3f:e7:13:a8:42:f3:
2a:4b:82:63:3e:59:af:44:26:3d:77:f5:e8:88:ff:
8a:ab:42:cc:a7:20:f5:77:7e:c6:91:56:59:14:32:
89:a7:ac:1a:d4:42:45:9d:bc:7e:9e:21:2c:88:82:
39:78:5e:77:9b:6f:f8:31:72:4d:e3:fa:d9:3b:1b:
0a:f0:66:e5:d8:92:66:db:81:36:4f:25:aa:20:5e:
61:bf:ab:e5:09:71:71:4f:ca:06:9f:38:ea:ca:c3:
40:77:53:02:5e:7f:02:92:bc:4c:d3:54:94:53:76:
bb:0a:e6:a9:78:d0:54:aa:dc:6b:5d:5d:1e:13:6a:
18:db:75:8b:28:18:db:4f:09:7b:2a:73:a7:3a:a2:
33:9a:65:f5:19:ad:8d:b2:0b:a3:58:54:e3:1b:12:
ba:6a:06:99:39:b9:3d:e3:29:b5:37:b1:83:f9:86:
d1:42:5a:23:70:4e:f7:1d:ed:43:0f:81:58:6e:82:
59:0a:f1:84:75:75:3c:77:ac:68:a5:71:f5:b7:f6:
83:3f:e7:bf:f6:6b:7d:cb:35:15:bd:82:77:fe:0d:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:68:7A:90:82:50:94:6D:CA:40:43:D6:6C:C2:DD:DB:2B:9F:29:F9
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Ymh6kIJQlG3KQEPWbMLd2yufKfk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.146.96.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:f6:92:65:75:86:f1:6a:f4:f0:44:d3:8e:67:b0:ce:ac:ae:
5a:fd:76:6c:f6:af:2f:2a:f5:2d:90:79:88:55:33:a9:d4:ec:
fe:a3:d0:cb:d1:09:90:19:b6:e7:ed:d6:0d:83:29:95:2c:3e:
1d:3e:2e:a3:14:ad:e2:ff:83:00:a3:a6:33:72:a0:63:20:60:
e3:85:7e:5a:8e:89:fb:bb:61:1f:4e:75:d4:4b:a2:e2:f5:3e:
bd:79:c4:f4:5a:6d:61:46:fc:fa:73:de:09:8d:bd:9a:16:fc:
ba:8b:5c:27:36:3e:a6:0d:d5:9d:7e:48:05:87:df:83:76:0c:
de:35:b5:56:77:ae:5e:1e:54:68:f2:b3:e1:e7:0a:6e:a0:46:
e6:f9:fe:c1:6a:7d:c7:3b:16:fe:ec:c3:f9:a2:54:45:fc:90:
72:0a:84:dc:b2:cf:1f:b6:d4:af:d2:11:02:3c:53:98:42:17:
24:ec:ac:f3:d2:83:43:b9:59:60:a7:bd:b8:f4:34:5b:c9:d5:
f1:e7:de:4d:f8:9c:28:73:f4:62:59:3e:96:80:80:a9:29:3e:
20:99:f6:16:3c:0c:a5:71:37:91:70:4b:93:87:c1:df:f2:ac:
f1:6d:2a:f0:35:62:53:2c:55:7f:02:39:ac:52:d6:73:80:7a:
9d:88:e2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:20 2025 by rpki-client