Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/i_UYfkZFBHUY-vRejJft5KOphYo.roa
File: i_UYfkZFBHUY-vRejJft5KOphYo.roa (raw, json)
Hash identifier: AVpRvKnp9mZa4QzuhXzs3fg3VuPKpNWVKY4VBt2wRbE=
Subject key identifier: 8B:F5:18:7E:46:45:04:75:18:FA:F4:5E:8C:97:ED:E4:A3:A9:85:8A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08B9
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/i_UYfkZFBHUY-vRejJft5KOphYo.roa
Signing time: Tue 29 Sep 2020 09:52:22 +0000
ROA not before: Tue 29 Sep 2020 09:52:22 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 60.245.112.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2233 (0x8b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:22 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=8BF5187E4645047518FAF45E8C97EDE4A3A9858A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:60:54:eb:d7:2f:d1:eb:ad:c4:49:17:48:a9:
72:74:af:eb:db:25:f2:f8:4e:ce:34:d7:de:7c:db:
3d:e4:f1:35:e4:01:a3:e1:41:97:8f:1e:2a:75:d1:
48:50:4c:3f:f5:f2:02:44:cc:e8:17:51:aa:08:55:
46:44:44:a0:d1:cf:b7:8c:76:3e:d4:b8:fb:d9:b1:
2b:12:61:22:3e:42:20:8d:12:2f:0b:72:15:c3:44:
12:4d:14:5d:d3:d0:4d:96:dd:0b:18:e5:8e:8b:ea:
5b:1e:a0:ff:41:fa:5b:2a:e0:4d:7b:23:33:10:8f:
b1:4c:d1:b9:07:fb:07:1c:05:75:8b:a9:1c:10:16:
4b:12:8d:14:a8:01:a6:dc:e6:68:bf:80:91:ff:fd:
50:f4:1e:eb:d6:7d:54:44:de:d7:9a:c6:98:c9:96:
b4:b1:b3:14:68:3d:04:cf:e0:20:b4:97:ba:78:d9:
e6:48:97:70:75:2e:ff:77:e0:ff:e6:36:e1:de:b1:
14:05:cc:ea:dc:c2:ff:69:e0:ef:b2:40:ec:2d:c9:
a7:51:a0:bd:54:76:84:df:1b:47:10:2d:3c:c5:5e:
46:2d:b6:0c:d0:51:02:98:20:0e:f7:79:5d:70:1a:
36:57:9c:6b:c4:b3:32:9b:11:6a:6d:e4:10:8b:38:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F5:18:7E:46:45:04:75:18:FA:F4:5E:8C:97:ED:E4:A3:A9:85:8A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/i_UYfkZFBHUY-vRejJft5KOphYo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.112.0/21
Signature Algorithm: sha256WithRSAEncryption
33:ba:11:eb:b8:b4:ff:31:37:e3:4f:4a:e7:6b:0e:e2:3a:79:
65:14:f0:2a:ce:40:8a:b9:b1:b7:fc:73:ed:dc:e2:a4:4f:b8:
7b:02:2a:4e:85:58:99:c5:0e:01:e6:1d:40:c0:96:d1:d4:48:
f4:22:f3:09:57:86:b4:73:eb:c2:03:2c:aa:6f:ea:c4:72:97:
b0:76:1f:d3:1f:79:55:18:77:33:6b:9e:2e:f3:aa:3e:96:c0:
06:8c:da:3e:8d:da:ee:00:bb:79:a5:73:6e:26:02:d1:cd:62:
46:ea:24:8b:6a:93:cc:8b:20:40:84:3f:68:60:23:41:62:a2:
1d:f5:42:36:ca:91:14:ce:1d:8a:50:c1:40:e0:04:6e:af:36:
98:c8:59:eb:d2:3f:37:d5:b5:37:8a:2e:bc:8b:51:95:19:a2:
f5:9c:ed:5c:00:66:23:aa:0c:98:70:95:43:7d:26:02:00:38:
53:28:77:d6:95:21:3e:ed:ad:b0:8b:c9:86:29:b4:0f:df:e9:
f9:0d:34:38:58:be:c8:cb:2d:40:58:57:c9:68:5a:8e:1a:f7:
a5:56:5b:76:5b:e8:22:05:57:74:08:42:e6:e9:4b:c7:94:f4:
04:bb:4d:9a:ee:15:6a:76:b5:0d:5d:8c:2e:c2:ae:9f:f6:d3:
eb:d1:c8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:23:02 2025 by rpki-client