Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_YDo2lbC-L5g0QTm-20VxiFD7mM.roa
File: _YDo2lbC-L5g0QTm-20VxiFD7mM.roa (raw, json)
Hash identifier: rwBY0+Q7+OaXgKmRB4NQvMQXV+8XMkGRW+rpNT8LKps=
Subject key identifier: FD:80:E8:DA:56:C2:F8:BE:60:D1:04:E6:FB:6D:15:C6:21:43:EE:63
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0E50
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_YDo2lbC-L5g0QTm-20VxiFD7mM.roa
Signing time: Wed 29 Sep 2021 02:43:26 +0000
ROA not before: Wed 29 Sep 2021 02:43:26 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 9922
IP address blocks: 122.147.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3664 (0xe50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:26 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=FD80E8DA56C2F8BE60D104E6FB6D15C62143EE63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:01:ba:3a:79:94:72:bc:96:95:ca:af:d0:69:
b2:c8:16:d2:d9:fc:03:3b:d6:a9:02:a5:8d:1c:c5:
0a:77:2f:03:71:f8:01:16:80:c9:83:7a:f6:c9:00:
bf:21:48:31:48:be:93:84:13:06:8e:8e:ab:bf:e5:
5a:65:f0:72:f0:19:d9:d7:de:a9:40:91:2e:37:f7:
06:ed:b3:df:d2:63:28:39:b4:5f:58:b1:91:80:df:
01:f7:ef:a9:33:0e:c0:76:e0:f8:b5:cd:e8:93:5a:
4c:80:46:7c:5c:fb:f4:01:06:15:3e:d1:a6:b5:ee:
6c:94:b7:c2:9a:9f:dd:00:94:7c:3a:6a:aa:e3:ad:
07:e6:bf:01:f3:0a:2a:d4:5c:01:f5:e7:3a:e1:85:
26:3c:19:e3:00:19:af:c5:8f:c0:65:50:4a:e4:2b:
aa:bf:d0:20:43:19:52:10:a5:c5:3f:a3:e8:e4:5e:
04:c0:d7:26:4b:3e:27:d3:4f:ca:21:00:96:20:6b:
d4:d3:c6:99:96:02:88:17:7e:8c:f8:3c:3e:63:ef:
bb:f2:11:e5:c5:7b:61:bc:71:57:79:04:49:d9:02:
6c:46:6e:48:5e:75:ef:da:28:3b:e2:45:20:13:5d:
69:d5:37:41:82:04:a2:a0:ef:8b:26:3a:67:e8:aa:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:80:E8:DA:56:C2:F8:BE:60:D1:04:E6:FB:6D:15:C6:21:43:EE:63
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_YDo2lbC-L5g0QTm-20VxiFD7mM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.24.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:18:07:aa:f4:1b:fb:e2:ac:48:71:9a:2d:64:14:59:2e:be:
46:13:10:94:13:54:50:e3:f0:59:82:79:f9:7d:7f:7e:f6:4a:
c6:33:6c:89:a5:4f:96:7f:55:7e:00:19:0a:11:b8:b9:78:7d:
69:85:f5:81:05:65:6b:7c:14:09:f7:2c:e8:c5:77:91:35:a2:
ae:1f:64:da:f3:cd:4d:03:d4:bc:6e:94:0b:6c:25:c5:76:86:
7c:42:e3:4d:22:c1:f3:10:39:f5:1b:08:45:00:60:ff:31:e5:
e6:02:94:17:b7:6d:5a:b6:6f:f5:3f:2c:fa:8b:e1:1a:5b:4a:
5f:08:33:14:05:f4:73:a4:e0:4d:e5:7a:6c:4d:64:96:e4:b1:
13:23:27:e0:a4:a5:84:76:37:b6:b2:31:ed:95:c6:b8:fd:62:
da:09:c3:04:23:8f:6a:6b:a1:a8:1c:92:3b:31:14:ac:98:82:
01:6c:23:60:ec:d5:f0:06:34:4d:de:d1:fd:28:d2:22:78:b7:
f0:a3:2f:a1:fa:86:1c:36:58:05:7d:9f:24:3a:d1:72:05:96:
5a:e0:20:cd:69:e4:9f:cf:72:e1:55:3d:48:7d:b4:00:31:65:
a9:8c:d2:cb:b8:5d:7a:dc:f7:c5:8d:56:54:41:68:52:d2:77:
72:db:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:58 2025 by rpki-client