Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/Z9dCPAz3iT27o9ican9xZPfNEP8.roa
File: Z9dCPAz3iT27o9ican9xZPfNEP8.roa (raw, json)
Hash identifier: knOlY+XwjTSQ24QSOlNsHr+Ryxex59kTBw+gOOpVBkQ=
Subject key identifier: 67:D7:42:3C:0C:F7:89:3D:BB:A3:D8:9C:6A:7F:71:64:F7:CD:10:FF
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 134B
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Z9dCPAz3iT27o9ican9xZPfNEP8.roa
Signing time: Fri 01 Sep 2023 09:24:45 +0000
ROA not before: Fri 01 Sep 2023 09:24:45 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 59.104.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4939 (0x134b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:45 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=67D7423C0CF7893DBBA3D89C6A7F7164F7CD10FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:2d:25:d5:bf:0b:62:24:4b:9a:13:aa:dd:
fc:3a:82:50:2e:38:07:bf:6c:86:3a:94:0a:f1:82:
c1:65:6d:8f:bd:4c:4b:67:80:28:09:72:63:d1:60:
41:e4:3a:7a:3d:ce:42:be:bb:ea:af:45:31:79:4a:
3f:3d:22:b4:d4:7e:02:2d:24:48:dd:c3:51:09:38:
30:f9:0e:e0:dc:57:f3:26:7a:9c:95:49:b9:05:e6:
68:93:4a:35:ce:59:d8:33:93:73:7f:52:3c:f2:13:
56:3b:a8:88:b1:06:41:d5:12:ae:e6:93:3f:32:63:
01:b8:c3:be:83:2c:65:f2:dc:63:fe:5f:3d:04:2a:
f4:7a:92:a2:37:2e:4d:53:8a:2a:fe:ed:de:03:a4:
a2:dd:f3:28:95:b8:92:df:1b:60:f8:58:8a:4b:4a:
51:aa:9d:84:68:18:34:86:72:3e:01:5c:b6:58:76:
82:3a:6f:33:f3:b6:42:90:0b:6d:a9:12:d7:92:9d:
66:3b:90:eb:be:a2:43:a8:4f:bf:e3:bf:0d:ca:86:
fe:27:cd:6d:f0:30:73:8e:65:82:36:2b:b1:cf:60:
f9:e9:bd:73:33:7c:27:41:f5:05:1d:41:5c:79:8b:
a4:0d:34:b9:e0:6e:71:6c:3a:4d:60:87:f3:59:bf:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D7:42:3C:0C:F7:89:3D:BB:A3:D8:9C:6A:7F:71:64:F7:CD:10:FF
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/Z9dCPAz3iT27o9ican9xZPfNEP8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
91:92:d1:e5:d4:fb:19:23:7a:ca:06:8b:6a:c5:80:0b:2c:fc:
dc:67:b4:23:f8:95:4b:b9:61:f4:37:25:37:c8:c1:ce:6e:3d:
74:dc:d3:ca:bc:12:d8:cf:df:67:8e:99:5e:dc:fa:bc:9d:6f:
1b:cd:a7:2e:0a:21:f4:dc:b6:21:b4:c3:b7:2a:98:67:2d:36:
73:23:c7:35:0d:9f:36:20:10:af:ac:37:73:41:5c:c4:d7:bc:
9e:03:4b:7e:a3:10:9a:e2:40:60:98:dc:07:e2:e3:f1:7f:77:
c8:e8:e5:c5:27:0f:7b:64:21:07:ae:98:94:11:fc:7a:0d:48:
68:75:32:0b:38:04:a9:cc:00:c2:d5:da:e9:f1:52:5b:28:f9:
bc:b9:5d:cb:31:8b:b3:a4:72:ab:08:4b:33:a8:3f:2e:71:1b:
0d:84:ab:30:80:94:fe:27:74:b0:6e:58:2b:cc:dc:47:f5:ad:
44:64:9b:c5:63:3d:8a:a9:c2:ed:8b:74:5c:89:e6:6f:e9:e9:
3a:90:4e:a1:06:4e:4b:d2:6e:0c:81:2f:67:bd:a3:48:9f:64:
5b:5e:9f:5e:9f:44:d1:2d:6a:de:d8:ad:93:b0:48:bb:3d:fd:
c9:61:cb:ac:1b:0b:f4:30:94:e9:77:91:bd:f1:e7:17:e8:8b:
0e:75:b7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:37:42 2025 by rpki-client