Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/_k3Dga8ccNyGg0MsRzoRVyr_Ojk.roa
File: _k3Dga8ccNyGg0MsRzoRVyr_Ojk.roa (raw, json)
Hash identifier: OvGHk8i+uNC+qUZZe3xBUP6Tr0pNmkzJPeYfpli5j+8=
Subject key identifier: FE:4D:C3:81:AF:1C:70:DC:86:83:43:2C:47:3A:11:57:2A:FF:3A:39
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_k3Dga8ccNyGg0MsRzoRVyr_Ojk.roa
Signing time: Thu 15 Sep 2022 02:42:48 +0000
ROA not before: Thu 15 Sep 2022 02:42:48 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 211.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:42:48 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=FE4DC381AF1C70DC8683432C473A11572AFF3A39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:9c:2e:bd:7a:96:2c:9b:10:f3:74:0f:5f:
26:12:5c:29:e3:7f:a2:21:2f:08:50:f0:8c:fe:45:
9d:68:61:e7:c1:bc:01:df:cf:d8:c0:61:6a:04:a6:
e3:8f:7e:b1:4f:ef:c7:d3:11:ca:d8:c1:24:96:06:
32:27:63:b4:58:c6:54:18:73:c7:e1:5b:87:37:88:
c8:f8:78:0a:8a:5d:80:14:ef:e6:09:26:08:42:05:
cb:e4:c9:ec:02:48:0e:ef:36:90:fa:63:ed:20:34:
cb:44:2a:da:86:e3:53:75:92:39:3b:fd:6b:f6:6b:
eb:a6:64:fe:5c:55:53:6f:de:c2:82:8e:72:1d:4d:
e9:80:51:3e:84:3c:0c:78:e2:bd:fe:5a:2a:21:3a:
00:3e:eb:e3:ea:01:dd:ae:bd:e9:42:25:40:f1:58:
75:1f:b4:33:26:25:22:54:8b:0f:3e:af:c3:50:1e:
e6:5f:86:2e:8a:45:cb:3d:fe:6a:f5:67:d1:2e:9c:
e1:c8:e0:4b:eb:5d:80:cb:cb:01:4a:d2:19:17:f7:
f5:f6:9a:53:a1:6a:07:d7:89:2a:33:b5:93:2e:65:
0f:ab:01:4c:1a:5e:42:e0:09:a2:67:f1:1d:35:90:
92:ed:ba:1f:8a:2e:1f:19:5c:ff:a3:49:85:a9:57:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:4D:C3:81:AF:1C:70:DC:86:83:43:2C:47:3A:11:57:2A:FF:3A:39
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/_k3Dga8ccNyGg0MsRzoRVyr_Ojk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:2e:b1:3f:18:1f:65:86:4f:c0:28:81:78:ac:4c:bd:bb:33:
4f:73:4f:f6:70:75:40:41:5a:00:63:fa:b9:2b:4c:28:a7:c0:
ab:91:9f:5e:ae:81:03:a4:08:de:6f:3b:f8:0e:97:84:ee:3c:
0e:3f:1d:61:3b:42:c6:39:b8:b2:68:e1:f0:7a:9d:61:80:83:
f5:72:f1:9c:1a:d4:9e:ab:29:b7:69:55:f2:0a:df:bf:2e:22:
32:2d:62:a8:4a:91:cb:c6:73:ba:e5:1a:42:34:09:d2:3c:95:
43:c2:73:b3:f2:d2:00:fc:bf:21:09:a4:ea:f0:aa:e8:4b:ee:
63:df:0d:8e:f8:16:80:32:0f:5e:c1:98:2f:a0:2a:5f:48:d9:
ad:01:f1:31:d9:8a:16:b9:22:dd:bb:d2:e0:25:70:bb:23:1e:
bd:71:5a:02:fb:ba:64:a6:64:10:15:88:11:4f:4d:16:70:0b:
a5:f7:4f:97:84:b0:2b:bf:33:f9:54:0c:71:19:d5:6e:24:63:
ae:51:8b:5e:02:3d:4f:16:e3:99:f8:bb:52:58:6b:a4:cb:e6:
be:90:70:4c:c1:b1:ea:fd:47:af:a1:1e:bd:cc:3e:ec:a8:65:
b7:ab:3c:c5:99:97:ae:c4:5e:40:41:59:d0:d5:54:be:5d:ee:
37:a0:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:14:28 2025 by rpki-client