Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/bOvIXYROZGjKyxBzPMICLF6iI9o.roa
File: bOvIXYROZGjKyxBzPMICLF6iI9o.roa (raw, json)
Hash identifier: zfZtoawFpFS2aUVIqwbYwrXxZ77wRUMA51DTGi4v8j0=
Subject key identifier: 6C:EB:C8:5D:84:4E:64:68:CA:CB:10:73:3C:C2:02:2C:5E:A2:23:DA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1045
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bOvIXYROZGjKyxBzPMICLF6iI9o.roa
Signing time: Wed 01 Feb 2023 10:28:20 +0000
ROA not before: Wed 01 Feb 2023 10:28:20 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 211.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4165 (0x1045)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:20 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=6CEBC85D844E6468CACB10733CC2022C5EA223DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:88:03:03:54:09:ad:b3:8f:f1:eb:02:6a:
83:c4:78:69:2c:19:64:39:c7:2d:56:6c:b4:d4:18:
72:b3:2c:7c:f7:8c:b5:f3:b4:05:85:55:9f:33:3e:
ce:19:52:95:53:7a:21:a9:39:4c:1f:e1:e0:bd:02:
b1:d8:cc:92:5e:ec:cf:6f:d8:0b:d3:bf:72:68:87:
e1:95:52:20:1e:dc:7d:6d:ec:43:35:6e:de:db:c4:
97:de:34:4c:ef:40:a4:4d:87:58:ec:6f:a0:4e:f8:
5a:5c:96:41:0b:1f:9a:3e:5d:ff:af:30:84:c6:f7:
2a:bc:04:4b:9b:c6:e7:15:59:65:b4:3f:67:49:4b:
5f:a6:6f:76:9a:eb:a4:29:d0:cf:a4:c0:cb:d3:2a:
81:80:93:a2:e1:a8:11:1d:ef:59:9f:59:94:d4:7a:
1e:82:1f:69:83:d3:d6:eb:4d:e1:82:da:73:a9:d8:
a7:95:cc:75:8c:62:df:4c:5b:7b:13:8d:51:f0:78:
82:db:48:a3:85:3b:be:d7:da:1f:83:ef:b5:86:49:
41:be:17:63:bb:9b:d4:75:26:1d:a8:70:61:2b:96:
ea:39:9d:11:f8:ea:17:65:f2:d3:98:09:d2:dd:ba:
09:36:51:bf:ff:cd:fc:a7:a4:fb:7d:0e:d9:36:c4:
b0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EB:C8:5D:84:4E:64:68:CA:CB:10:73:3C:C2:02:2C:5E:A2:23:DA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/bOvIXYROZGjKyxBzPMICLF6iI9o.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9b:5a:4c:ed:b5:1c:79:9c:18:d1:9f:57:80:ba:b8:44:e4:dc:
35:47:94:c1:6a:a6:5b:8c:71:f7:da:26:c3:46:07:55:e9:ee:
da:4a:78:c7:b8:a9:20:36:70:06:f3:60:6f:2d:be:59:7e:70:
f6:1c:71:b2:12:c5:b9:a7:b5:b7:0f:cb:29:54:60:bd:5e:5d:
44:4f:5a:a1:d8:56:65:e3:c6:b8:b8:5e:1b:92:a1:86:f1:82:
f9:95:75:ec:78:15:fb:d1:8e:a1:ad:b9:8d:d8:1f:76:81:24:
97:47:34:f3:9b:75:d3:04:25:9e:8a:bc:5f:a3:28:8c:b0:92:
8a:44:fc:a4:d1:50:5e:7e:2b:a0:5e:51:8b:32:02:6a:d5:57:
ca:ef:42:ca:51:05:3a:4b:4a:5d:e0:97:11:65:13:57:39:e7:
3d:a9:d0:1a:68:da:1d:ed:a9:0a:9f:15:cd:8a:dc:7a:15:8a:
05:44:a2:52:fd:59:3e:e6:e3:0b:cc:e2:51:63:eb:db:25:54:
3e:41:30:77:13:e3:3e:6b:72:88:43:3b:1d:00:4e:4a:b2:c7:
a2:5b:a7:cc:64:da:31:aa:b1:04:52:75:bf:77:84:d7:03:35:
d2:4e:53:8e:76:d2:bb:f9:07:f3:97:fe:07:00:09:5c:79:25:
5f:c6:62:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:09 2025 by rpki-client