Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/jAJrNiRYfLYwEYieJGDDbILWayw.roa
File: jAJrNiRYfLYwEYieJGDDbILWayw.roa (raw, json)
Hash identifier: pPpfsaz8ARSDjJFn2agCHSqeVE5i53a8eMZe+8VSMPk=
Subject key identifier: 8C:02:6B:36:24:58:7C:B6:30:11:88:9E:24:60:C3:6C:82:D6:6B:2C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1845
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jAJrNiRYfLYwEYieJGDDbILWayw.roa
Signing time: Mon 10 Feb 2025 14:07:45 +0000
ROA not before: Mon 10 Feb 2025 14:07:45 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 131602
IP address blocks: 218.210.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6213 (0x1845)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:45 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=8C026B3624587CB63011889E2460C36C82D66B2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9f:4f:7b:29:8c:26:e5:78:fc:8c:46:2a:6f:
cf:b5:da:e5:77:1a:1c:f6:ea:03:ec:93:15:1f:b8:
97:3b:1e:aa:b6:e3:34:f2:37:ed:bd:3e:6c:e5:11:
e4:d3:04:90:f8:94:f6:c1:37:1b:1c:04:45:e1:4d:
21:dd:5f:91:1b:a8:46:bd:97:45:ca:0c:6d:9a:0c:
56:fb:02:3b:d7:a3:96:49:f8:68:5a:f4:fa:a5:e0:
10:5b:86:9b:db:03:50:0d:de:1a:42:22:02:fc:10:
d1:c7:ad:59:44:c6:8c:10:a0:3e:93:d2:ea:31:93:
f9:8a:b0:31:fa:1d:b9:68:97:e5:0b:b8:17:5c:18:
00:68:6e:67:61:80:92:d9:2a:67:0f:d0:61:10:d2:
ae:5d:cf:b5:5f:ba:55:23:75:8f:16:e9:0f:90:e3:
5a:c6:98:ba:04:8f:34:f0:30:23:02:08:9e:27:3d:
5f:d4:59:c5:86:0c:dc:79:42:a1:cf:07:e7:ee:3a:
42:55:ab:8b:6f:fc:79:e1:74:39:2c:af:e8:fb:5e:
f4:42:6b:af:67:89:39:7c:2d:ee:ca:c6:45:0f:2f:
e4:0b:4b:bd:d5:6e:d2:e5:05:86:04:fc:ab:a7:15:
82:d9:32:b4:82:a8:28:7d:f1:6d:ae:1e:bc:0a:50:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:02:6B:36:24:58:7C:B6:30:11:88:9E:24:60:C3:6C:82:D6:6B:2C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/jAJrNiRYfLYwEYieJGDDbILWayw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
218.210.32.0/20
Signature Algorithm: sha256WithRSAEncryption
43:71:21:26:69:9d:e7:8a:04:46:31:72:ea:3d:cc:8b:9b:8d:
c3:c0:b2:36:bb:56:7b:9b:ff:3a:7e:ea:4e:e4:2b:cd:4e:c7:
cf:45:0d:8a:3d:e5:f8:ea:e6:57:72:24:0b:22:59:d2:60:08:
40:cf:28:96:ca:d5:86:a6:c9:7a:ca:38:92:76:79:e2:16:1e:
12:3c:71:71:2a:03:a5:69:ac:92:9c:46:99:90:93:18:0c:73:
7f:6e:ad:62:88:9f:0e:4a:4b:ba:5c:d3:b8:6d:32:40:9a:19:
a3:16:62:76:4f:73:6c:56:37:08:a1:70:a2:c5:c1:13:c3:d0:
ba:42:da:71:ce:33:9f:25:0c:94:40:80:d3:91:9f:f2:69:37:
04:f6:10:65:6f:57:da:c7:b8:1e:49:0f:40:e6:4b:8f:3c:cb:
30:cf:e5:f4:c1:f3:c7:b9:79:7c:c5:50:6a:f8:1d:5a:8c:d2:
d9:07:d5:51:1a:54:d3:b3:0f:4e:2e:5d:f1:fa:fb:b8:cc:f8:
3f:7f:ce:71:3c:68:1c:de:81:d7:fb:21:9b:48:2c:9a:b7:a0:
fd:13:bd:e0:c6:43:7b:69:64:7f:c9:83:33:7d:ca:6c:e9:6b:
aa:76:70:bb:e1:be:9e:37:5e:4b:d0:74:85:be:25:15:c7:c7:
5d:aa:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:45 2025 by rpki-client