Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/iCIG621eDV9AWWMu9h2wDlJE0j8.roa
File: iCIG621eDV9AWWMu9h2wDlJE0j8.roa (raw, json)
Hash identifier: yronJsL62dlIvxcDzVXkqfitLP2w/4qzLJKGX+OB7cU=
Subject key identifier: 88:22:06:EB:6D:5E:0D:5F:40:59:63:2E:F6:1D:B0:0E:52:44:D2:3F
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1083
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iCIG621eDV9AWWMu9h2wDlJE0j8.roa
Signing time: Wed 01 Feb 2023 10:28:39 +0000
ROA not before: Wed 01 Feb 2023 10:28:39 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 175.180.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4227 (0x1083)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:39 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=882206EB6D5E0D5F4059632EF61DB00E5244D23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:39:d1:d5:b5:28:b3:ad:b2:14:f7:f9:cd:
07:88:ae:26:a0:ce:1f:eb:e7:1d:bb:95:a6:b4:1e:
e9:41:b5:e2:5b:fa:35:53:58:fe:34:58:1c:00:9d:
54:8f:0a:1f:db:f3:7c:03:20:d9:28:6b:bd:3f:4d:
14:ed:7d:ee:31:b2:ac:de:fb:8e:f4:72:56:36:19:
81:d2:7f:11:95:9d:fd:51:da:3b:98:2f:fe:44:16:
48:2e:26:2c:45:f9:c1:b9:c0:a9:86:53:16:86:c0:
1a:2c:c8:0c:ad:64:a4:74:8d:a5:28:a9:c7:78:14:
11:ce:80:7b:8d:cf:5e:0f:2b:e2:b0:11:ff:c8:50:
6c:1e:99:ea:93:58:e3:33:28:dd:2b:91:ba:69:55:
fb:d6:01:e9:cf:f1:89:19:38:9d:e9:e3:70:40:34:
78:3b:63:ea:22:d1:e0:39:9c:10:d1:4c:f1:a1:ba:
8b:68:05:7d:7e:82:db:6d:a1:d0:b6:0b:5d:70:1b:
7d:3c:1f:47:63:f8:f6:a0:ba:aa:fd:72:37:3f:2d:
54:df:2b:30:3a:8b:2e:e4:09:25:9a:ac:44:ae:84:
6e:60:58:88:5a:2e:16:73:d2:54:cc:76:c3:ab:e3:
99:81:73:00:35:d1:af:ee:44:1b:9e:14:d5:d7:b6:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:22:06:EB:6D:5E:0D:5F:40:59:63:2E:F6:1D:B0:0E:52:44:D2:3F
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/iCIG621eDV9AWWMu9h2wDlJE0j8.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
175.180.0.0/14
Signature Algorithm: sha256WithRSAEncryption
44:7e:b7:69:db:ce:94:48:a6:16:00:58:66:4d:f8:a1:35:45:
1f:36:8e:11:ff:a5:32:8c:29:2d:3f:0d:a1:11:1d:3d:bc:a6:
28:77:f0:5a:06:61:1b:62:99:57:7d:5a:2b:44:28:db:3b:dc:
c8:6c:85:03:c1:23:55:cb:89:2e:28:e9:27:74:e8:95:54:88:
22:64:3b:ae:36:a2:e7:aa:75:2a:fc:f0:8b:f6:68:b3:cf:cf:
6e:1f:fa:07:3a:9b:d1:a8:ce:92:7f:07:13:6f:57:d5:e8:9c:
28:b8:90:14:c4:02:78:e2:63:c2:9d:a9:25:1d:fc:c6:62:6c:
ba:e1:6f:2c:cb:d0:14:f0:17:1a:b7:d2:fb:62:e3:1c:9b:99:
f3:be:07:cd:c8:ca:eb:ee:86:ac:94:8a:60:04:83:09:a5:66:
52:72:52:94:00:05:78:92:6c:5b:7b:92:a8:ac:8a:24:55:9a:
74:27:3a:b3:73:8a:44:33:7b:f8:9e:6d:6e:b1:4a:54:4d:6e:
5e:75:eb:1d:12:c6:5a:96:c6:d5:7e:ec:58:7c:fc:a6:3b:7d:
e0:4c:91:26:80:06:2f:a6:2b:33:65:0e:72:eb:b0:73:ed:c1:
18:c6:ca:9c:56:44:25:8e:f6:43:d1:80:5e:4e:ea:10:c8:d6:
fc:c0:97:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:40:38 2025 by rpki-client