Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/hP1sxbg97lW_XbLlV9Tc3N0Z03Q.roa
File: hP1sxbg97lW_XbLlV9Tc3N0Z03Q.roa (raw, json)
Hash identifier: I5t2f+5Tko2tycI0lU87LY1jSRGiMlGe0hF9GXXccZ4=
Subject key identifier: 84:FD:6C:C5:B8:3D:EE:55:BF:5D:B2:E5:57:D4:DC:DC:DD:19:D3:74
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0BA2
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hP1sxbg97lW_XbLlV9Tc3N0Z03Q.roa
Signing time: Sun 07 Feb 2021 06:27:12 +0000
ROA not before: Sun 07 Feb 2021 06:27:12 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 4780
IP address blocks: 220.228.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2978 (0xba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:27:12 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=84FD6CC5B83DEE55BF5DB2E557D4DCDCDD19D374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:9a:e7:04:97:91:6f:14:b5:5b:2f:fd:be:
af:32:50:94:b5:5e:fb:ad:59:5d:de:b7:d5:05:d6:
96:f4:1f:f7:2a:44:c4:1f:5c:a8:a4:22:93:8b:7a:
3a:fa:c2:05:9e:53:32:f4:5e:c4:17:1a:bf:3f:ff:
1b:45:5c:34:2c:11:d1:2d:de:b2:f7:89:2b:8e:b8:
c0:64:5f:cb:32:b0:6b:ec:93:cb:11:e6:6a:7d:ba:
71:65:84:22:1f:13:9a:11:2b:cb:a6:2a:04:82:e2:
00:03:84:3f:34:c6:57:44:40:eb:28:71:89:f0:88:
9c:d0:83:7b:e5:62:eb:ae:63:c8:74:ca:19:7f:ab:
07:90:fa:df:0c:32:33:6f:bc:11:c9:90:6c:27:16:
35:87:40:3f:9d:a0:cc:c8:79:53:c5:4a:43:a3:cd:
30:1f:18:a0:5c:80:30:25:12:4c:fb:7a:6b:73:00:
5c:14:b0:81:18:69:fe:4f:06:1e:5a:4b:90:06:e0:
ab:bd:ce:0f:f0:46:a3:69:3d:1b:31:20:df:51:4b:
16:7d:e8:84:b8:1d:84:b4:e9:88:bb:39:cc:29:33:
17:86:d8:10:79:2d:dc:73:ea:2a:c0:d2:6b:c5:ed:
75:f6:45:84:1f:b7:76:95:1c:41:fb:4f:d3:a3:10:
60:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:FD:6C:C5:B8:3D:EE:55:BF:5D:B2:E5:57:D4:DC:DC:DD:19:D3:74
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/hP1sxbg97lW_XbLlV9Tc3N0Z03Q.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.228.0.0/15
Signature Algorithm: sha256WithRSAEncryption
92:69:26:6e:73:15:f1:71:8b:cd:2e:0f:45:3b:5e:c3:1c:f9:
a5:31:81:80:4c:cd:85:d9:81:b6:50:8e:24:34:19:c7:e9:60:
35:69:60:ca:33:b8:1b:55:8f:e4:4e:71:44:9f:e9:a2:8e:90:
d3:00:5b:2e:c6:e2:29:71:e7:04:40:ea:84:a9:da:f4:29:46:
f0:93:cf:b3:8b:14:fa:9d:f6:bc:87:43:46:08:23:fa:6a:b2:
b3:28:b3:84:68:34:d3:e1:ed:e5:3d:e1:83:07:5e:c7:c4:0c:
bf:d6:6a:ad:04:de:2f:57:05:ce:0c:b2:ae:a7:b1:7a:ac:b8:
20:24:01:81:e2:aa:4a:c0:69:5f:37:3f:35:08:0e:a2:7e:24:
a2:52:61:e1:68:74:78:0c:a8:a5:44:d2:27:c7:56:48:8d:ce:
32:90:8b:b1:d1:27:35:b0:00:f2:b7:05:9f:f2:0d:21:1a:af:
93:84:92:5e:fe:d1:3a:bd:16:25:9d:a2:3b:7e:1a:ce:62:c6:
6a:2b:db:c9:3b:19:16:b1:c0:2c:24:d8:5a:9e:5c:d7:4b:43:
94:b9:f5:e3:ed:55:30:0f:01:14:27:51:94:a2:ed:d4:c0:5a:
57:2a:91:5d:70:0b:6a:dd:11:d0:ef:2b:4c:57:22:88:86:98:
cf:ef:6d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:33:26 2025 by rpki-client