Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k3D2RLEvsf3aB55FnVSGmNKlE9g.roa
File: k3D2RLEvsf3aB55FnVSGmNKlE9g.roa (raw, json)
Hash identifier: Xp4KNQcCRgoR86hh0DshDkX+0LDL342mLsREGxhyNHQ=
Subject key identifier: 93:70:F6:44:B1:2F:B1:FD:DA:07:9E:45:9D:54:86:98:D2:A5:13:D8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17B6
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k3D2RLEvsf3aB55FnVSGmNKlE9g.roa
Signing time: Mon 10 Feb 2025 14:07:11 +0000
ROA not before: Mon 10 Feb 2025 14:07:11 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 210.244.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6070 (0x17b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:11 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=9370F644B12FB1FDDA079E459D548698D2A513D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:f5:2b:ab:f1:67:ec:83:16:40:f9:54:57:
01:b6:98:e6:65:6e:c8:d8:72:1e:81:08:5f:44:0a:
63:40:f1:08:53:ff:96:17:e5:9f:de:75:c2:cf:6b:
59:68:40:f5:f0:6a:01:3f:02:95:c1:2e:4b:13:1e:
93:0c:12:60:ba:f5:00:91:f0:1a:8e:7f:85:88:d5:
dc:03:d1:3d:d2:ed:29:1f:2b:f6:85:ce:0d:83:43:
b9:41:8a:bf:94:21:5c:b5:a1:c6:43:fe:96:fc:d2:
52:f4:2f:0b:e3:dc:7e:89:ae:44:ad:66:58:85:22:
05:f9:61:8d:41:9b:e1:f0:29:12:f1:60:ff:11:dd:
af:13:9b:06:bf:32:39:23:b1:0a:26:04:42:e8:24:
7a:96:c8:16:2e:5a:c9:8b:8e:17:23:ac:28:0c:97:
7a:3e:31:3f:e6:41:6f:21:00:9c:09:1a:4b:04:b7:
d6:46:38:01:a2:a6:e6:f8:b3:76:07:38:15:7f:30:
61:53:c5:29:26:74:b7:6b:99:97:11:4b:8c:46:a7:
f1:d6:4d:58:08:ea:8b:3a:a2:07:68:13:c8:4e:51:
ca:4a:81:d6:cc:c0:01:6c:9c:6c:00:1e:e2:3a:b9:
09:e7:aa:97:30:f4:83:12:19:9a:9c:6b:c0:d3:7d:
1c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:F6:44:B1:2F:B1:FD:DA:07:9E:45:9D:54:86:98:D2:A5:13:D8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k3D2RLEvsf3aB55FnVSGmNKlE9g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
210.244.0.0/17
Signature Algorithm: sha256WithRSAEncryption
59:94:78:c3:45:a0:ef:36:17:fd:0f:e7:bb:04:2d:9c:a2:f4:
5d:7b:38:0b:4a:9e:10:04:ea:8d:6e:11:da:3d:89:9c:ea:97:
52:ed:91:90:7c:65:74:cf:3f:be:55:b6:19:c4:ab:10:b5:f0:
23:77:b5:0f:a6:ce:91:6f:bf:6e:05:41:7b:19:00:73:1e:a4:
a5:f9:08:7c:17:12:a8:4a:93:2e:f6:6e:91:bb:e6:12:ad:6d:
c7:9d:84:18:2f:4c:bc:5c:5a:15:94:65:f6:f1:59:38:49:89:
0f:3a:46:6a:7e:d9:5a:c6:71:d4:7b:be:8a:ca:91:50:a3:26:
69:18:d6:77:0d:81:70:dd:f9:a2:76:d7:1e:49:91:d5:13:b8:
fa:67:19:a4:49:dc:56:7d:11:25:9b:a3:75:1b:6b:93:8a:92:
02:00:d9:41:c7:ee:55:a3:d0:27:bd:26:d2:1e:de:bd:b4:6c:
08:f8:4d:a2:79:15:d6:98:f2:dc:52:99:28:54:3e:5f:5e:3e:
62:74:64:19:32:f1:97:0e:89:ce:87:9a:17:a9:f3:f5:76:6b:
bf:26:ae:78:3a:8e:02:94:4f:99:e6:74:b6:bc:06:ac:8e:fe:
58:41:c2:a3:bc:21:d0:00:8c:3c:81:e7:83:91:11:ca:92:8d:
f5:0e:c5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:32 2025 by rpki-client