Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hNBpY7xIfh3kXWqE6-EvTjVEfKU.roa
File: hNBpY7xIfh3kXWqE6-EvTjVEfKU.roa (raw, json)
Hash identifier: 12IJEro3SeWuY5elIbQRqij5AB0mZ8kcNQEnqXcn6uc=
Subject key identifier: 84:D0:69:63:BC:48:7E:1D:E4:5D:6A:84:EB:E1:2F:4E:35:44:7C:A5
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17D1
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hNBpY7xIfh3kXWqE6-EvTjVEfKU.roa
Signing time: Mon 10 Feb 2025 14:07:17 +0000
ROA not before: Mon 10 Feb 2025 14:07:17 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 112.104.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6097 (0x17d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:17 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=84D06963BC487E1DE45D6A84EBE12F4E35447CA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:50:9a:db:e4:13:17:8f:4b:56:54:99:7a:
39:6e:29:1c:6b:81:54:d7:34:ba:d1:18:5c:ca:43:
ec:37:67:f4:78:26:dd:78:51:3d:e5:7c:c6:5b:d5:
00:71:84:09:03:54:43:aa:76:f3:52:f0:aa:eb:74:
04:72:b8:aa:09:16:ab:69:3d:3d:2c:ec:3e:6b:39:
b5:75:a7:68:78:f3:e5:aa:f5:4e:10:b7:8d:a6:7d:
fc:55:3d:a9:e7:bd:91:66:7a:ba:8f:9f:d0:8f:36:
cb:74:b1:67:e6:01:4a:39:05:17:e9:9d:35:f4:0b:
a0:ef:e5:1a:0f:22:71:b1:67:4b:db:11:65:9f:4f:
60:3b:c1:ab:6c:c8:a2:7c:07:09:2e:c5:04:37:ac:
d9:94:a2:47:d9:92:92:e4:64:28:25:32:12:51:6c:
a3:86:c2:ca:9d:e1:41:22:bd:66:d6:94:6e:c9:6d:
dc:7d:f2:95:d6:df:6f:e0:d2:17:eb:46:5b:01:49:
2b:d3:06:01:b2:3e:90:c5:aa:66:93:9b:99:57:d1:
3c:f4:89:58:93:5e:8c:5a:22:20:31:82:fe:d7:b4:
55:49:2c:dd:3e:28:87:63:37:fc:a8:45:76:d0:95:
dd:60:13:f9:56:4e:70:a8:ab:bd:af:c1:32:a0:ac:
b2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D0:69:63:BC:48:7E:1D:E4:5D:6A:84:EB:E1:2F:4E:35:44:7C:A5
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hNBpY7xIfh3kXWqE6-EvTjVEfKU.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
c8:c3:da:92:01:aa:de:5a:74:b2:20:d0:cc:24:d7:0c:b1:1b:
f1:7a:e9:4b:ac:de:f4:ef:b9:c2:73:65:1c:f7:54:b4:15:d8:
f6:7b:a1:be:36:81:69:eb:e7:86:2d:35:63:84:7c:0d:2a:9f:
0f:d9:0d:c3:72:e1:af:9d:47:90:75:d6:a9:4b:79:55:4e:83:
d3:dd:df:9f:5e:17:5f:af:94:f0:3e:fe:e9:dd:25:60:d7:9f:
89:15:92:4c:c5:f8:6d:2e:bb:34:ab:96:fb:5e:7d:cd:74:98:
34:28:11:14:fe:de:10:b8:7b:22:14:7e:9f:2d:ff:7e:93:71:
3c:97:e6:05:1e:7f:d1:5b:49:39:e9:64:33:1c:c6:4d:e1:b8:
1d:a5:0e:41:2c:70:d2:fd:f3:2e:67:5b:57:ab:b4:41:21:73:
89:b8:15:39:4c:5e:a2:44:5c:2e:c1:2a:7d:0b:74:97:4b:60:
d0:20:b7:20:cf:4f:6d:0b:d8:4c:5a:0b:29:1c:af:89:e8:78:
4a:f5:4d:64:e8:e8:93:49:a7:fb:60:9a:4a:c2:a0:11:4e:2d:
0e:96:89:64:e6:7d:31:42:3c:db:0e:58:20:bc:f2:39:e3:2f:
4d:8a:50:f5:2b:69:93:d1:3a:41:0c:9a:05:f9:f2:5b:83:43:
f9:ed:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:31 2025 by rpki-client