Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/a5Hkm7ocrN_xh2AKKEd__ZZXGJ4.roa
File: a5Hkm7ocrN_xh2AKKEd__ZZXGJ4.roa (raw, json)
Hash identifier: XwsXopVeHoW9gFfjXwvm7r3Z+3cDVq4Wte7T3TolOsU=
Subject key identifier: 6B:91:E4:9B:BA:1C:AC:DF:F1:87:60:0A:28:47:7F:FD:96:57:18:9E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1395
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a5Hkm7ocrN_xh2AKKEd__ZZXGJ4.roa
Signing time: Fri 01 Sep 2023 09:25:10 +0000
ROA not before: Fri 01 Sep 2023 09:25:10 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 4780
IP address blocks: 123.205.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5013 (0x1395)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:10 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=6B91E49BBA1CACDFF187600A28477FFD9657189E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:b0:29:af:a0:fa:96:60:a0:7c:11:7a:e1:
df:95:b8:28:33:73:f8:b7:7e:27:80:90:a9:22:7b:
20:63:4f:e8:97:30:17:59:5f:83:8c:12:e9:96:35:
da:34:24:5e:d6:54:16:7b:57:20:04:c5:b8:7c:8b:
ae:31:5e:a8:3f:12:55:fc:6d:37:38:5a:29:8b:82:
de:22:af:3c:37:3f:a6:44:58:0f:b4:84:3a:fa:ca:
05:d1:64:c6:5a:9e:7b:86:72:e1:3f:63:2e:bb:96:
3f:c3:9b:65:1f:c1:d2:56:60:bc:b2:08:63:87:23:
ac:eb:31:35:fb:42:b2:c8:10:50:cb:58:20:af:5e:
fd:30:e7:55:6d:cb:98:6c:f2:00:fc:0a:0b:7c:53:
62:1a:3f:10:5c:f9:75:5b:ee:4a:8c:63:34:3a:a8:
8e:52:89:19:55:b0:ae:a4:6e:ed:e2:83:0f:36:46:
f5:0b:8f:e6:fb:32:52:03:55:3b:f8:0a:f4:57:cf:
c9:33:61:3f:d0:81:f8:81:08:8a:c4:e7:ec:5a:de:
6b:8e:64:40:39:4a:8c:07:f2:b4:37:15:dd:cd:2a:
08:34:a3:c3:96:46:24:2e:fa:80:a9:c2:83:d7:fe:
50:98:d6:76:7c:41:c0:75:bb:36:2b:9e:cc:1c:c3:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:91:E4:9B:BA:1C:AC:DF:F1:87:60:0A:28:47:7F:FD:96:57:18:9E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/a5Hkm7ocrN_xh2AKKEd__ZZXGJ4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.56.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f6:e2:f5:0d:8a:a1:1a:c7:22:3c:85:53:2f:9c:f9:f9:62:
b2:5e:a4:bc:fa:ad:59:02:51:ee:aa:0b:ba:aa:5f:6a:e9:df:
b7:c3:98:d2:f9:f7:8e:88:4e:af:2b:1a:49:82:95:40:b7:f9:
04:95:59:e9:d3:06:7c:c7:b3:80:89:aa:e1:49:bc:79:da:49:
b4:85:ff:1e:f1:6b:38:a7:9b:3a:c3:38:59:bc:81:4c:ed:b6:
62:65:db:9d:09:e4:5b:0e:68:01:dc:3c:11:30:54:90:34:9a:
16:37:34:ad:fb:f1:ae:da:68:1f:cb:97:2a:de:d3:df:2d:88:
43:2f:97:6f:20:07:ea:a5:e9:5b:18:f1:4f:d0:33:35:ce:3b:
bb:7d:65:4b:b1:dc:f8:5d:af:02:09:1a:ae:be:34:47:c3:13:
4c:c8:ab:ab:b6:d4:56:a3:df:32:03:42:a7:08:30:ee:fa:66:
71:d9:e8:cd:b1:04:4d:72:c1:4a:ff:83:be:81:0e:35:03:ac:
74:f9:80:77:06:e7:aa:f9:e6:1a:3d:ce:3b:05:a6:e7:dd:5c:
6e:0e:53:de:77:5a:98:04:c6:28:46:71:8d:28:ad:b3:26:dd:
2a:56:64:08:d7:b8:32:69:a1:e5:36:17:4d:76:c9:17:3c:e4:
96:a2:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:35:30 2025 by rpki-client