Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/c7kmcLX-wUrbxfzuuKO7KpsUoCo.roa
File: c7kmcLX-wUrbxfzuuKO7KpsUoCo.roa (raw, json)
Hash identifier: +pAFP84gxZjcvyXvi6pL/SVNO06yVsir1JLPnBOQoVQ=
Subject key identifier: 73:B9:26:70:B5:FE:C1:4A:DB:C5:FC:EE:B8:A3:BB:2A:9B:14:A0:2A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 12FA
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c7kmcLX-wUrbxfzuuKO7KpsUoCo.roa
Signing time: Fri 01 Sep 2023 09:24:19 +0000
ROA not before: Fri 01 Sep 2023 09:24:19 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 220.229.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4858 (0x12fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:19 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=73B92670B5FEC14ADBC5FCEEB8A3BB2A9B14A02A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:84:43:ca:0f:22:51:5c:f7:8f:27:84:24:6f:
ed:21:4b:c6:f0:09:11:b3:b7:f6:8c:da:57:99:3f:
6d:2a:0b:6e:6c:f0:cd:3d:12:d3:c4:c4:55:9d:22:
14:39:95:1a:ac:08:71:75:d2:7e:94:f7:0b:d8:ef:
0f:1a:45:f7:88:61:1e:a8:3c:e1:2b:2e:be:50:78:
ed:00:2d:48:18:c6:29:58:da:0c:b3:14:2a:a6:3d:
dd:0f:56:18:27:8d:a8:43:ed:c3:2a:a1:b2:6f:0a:
0e:05:9b:c6:49:86:77:f4:f9:ab:ec:3e:4c:04:a0:
6c:85:af:22:aa:5d:31:85:34:f7:a7:ad:be:87:20:
9e:9a:26:4b:c4:1c:6f:fe:eb:25:cd:3c:23:66:a6:
4e:1c:1f:4c:31:48:45:2a:9a:9f:68:cf:a4:1b:79:
c6:b2:a7:0d:99:1f:a9:15:3e:8c:05:b7:fe:ed:89:
64:7f:31:f9:3e:a4:ba:2c:c2:e7:2a:32:a8:8b:07:
a1:fe:b5:46:c6:5c:3e:9f:cf:d7:cc:d5:a5:30:e3:
dc:f5:3c:4e:a5:56:5e:5d:ec:8a:fb:39:ea:4e:fb:
d0:58:e0:93:86:69:5e:7b:da:65:fb:24:bc:8e:51:
2c:3b:a4:ae:83:7c:c5:f4:15:79:5b:a6:0e:18:31:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B9:26:70:B5:FE:C1:4A:DB:C5:FC:EE:B8:A3:BB:2A:9B:14:A0:2A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/c7kmcLX-wUrbxfzuuKO7KpsUoCo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.229.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7a:92:53:95:4b:57:c9:3f:ef:49:80:50:af:10:3b:54:f6:3f:
a1:68:66:56:a0:bd:9d:bb:93:46:c5:e8:d5:34:91:a4:cb:df:
27:c7:9f:4f:21:e3:da:19:ea:61:52:7f:90:c6:90:0f:f9:e2:
9f:ae:38:7f:82:29:6b:58:92:d6:c3:ed:95:36:b8:94:12:f0:
76:ab:94:89:75:2c:dc:0b:de:96:05:35:56:1c:91:75:2c:2c:
aa:37:0d:22:2c:de:3f:4d:71:c4:0f:eb:80:f0:c0:74:d6:5f:
80:80:4b:3a:13:4b:d1:13:5d:15:50:b6:8b:9b:0d:65:fb:b5:
7c:89:a6:f9:80:24:d5:2d:03:04:8b:3a:ec:a0:2d:05:bd:57:
ba:35:1f:a5:1a:c4:2b:c3:08:db:43:57:36:49:f6:b5:69:1d:
a2:55:ac:79:ff:79:8a:c9:2f:7e:fb:a5:d4:b8:37:76:c9:d5:
c8:95:6f:7f:37:1b:c7:b0:3c:98:34:b0:be:cc:3e:eb:ac:09:
50:8b:f3:67:be:04:86:c6:ee:51:5e:b6:2a:cb:f6:13:d1:ce:
4e:6c:5b:1c:23:92:ae:8f:34:30:33:ee:1d:be:a1:28:49:9d:
32:c3:b9:79:39:0a:e2:d6:34:bf:29:e4:af:2f:4d:cf:89:b8:
e8:f8:00:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:02 2025 by rpki-client