Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/k5YMOHOu_-W_sWO5nSDcCCXJKOo.roa
File: k5YMOHOu_-W_sWO5nSDcCCXJKOo.roa (raw, json)
Hash identifier: M5BSXs2nN/RNEH8lYL+72TToSCf9pUQpwMKDRmNkbko=
Subject key identifier: 93:96:0C:38:73:AE:FF:E5:BF:B1:63:B9:9D:20:DC:08:25:C9:28:EA
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0EB7
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k5YMOHOu_-W_sWO5nSDcCCXJKOo.roa
Signing time: Wed 29 Sep 2021 02:43:53 +0000
ROA not before: Wed 29 Sep 2021 02:43:53 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 4780
IP address blocks: 123.205.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3767 (0xeb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 02:43:53 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=93960C3873AEFFE5BFB163B99D20DC0825C928EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fe:a7:e8:68:ea:9e:25:f9:60:a3:24:ea:cc:
44:d8:d8:d2:fb:13:4a:b0:6e:06:27:2a:ed:46:52:
ad:9d:ca:7e:54:7d:2f:35:70:67:27:34:bb:bc:2d:
47:bc:45:ab:ba:5c:4c:d6:dc:b9:fe:bc:44:c4:43:
8c:31:e1:46:1f:2b:31:2e:56:e7:40:e0:b5:70:1e:
24:a2:3e:42:f2:fb:1d:bb:9f:c8:22:a4:6f:42:3d:
73:37:89:2d:df:e6:46:aa:df:0e:e8:b1:ae:7d:7b:
ad:7d:6d:1c:63:b6:8e:47:34:0b:67:1e:cb:d4:6d:
b4:59:cd:c6:1f:be:a8:65:17:4f:5b:91:6b:4d:c2:
62:52:ae:b0:2d:b9:3d:64:9a:79:37:47:ae:8f:64:
2d:26:0e:24:5a:c8:31:29:af:8d:20:c7:61:f9:a6:
1a:ba:02:31:15:7e:45:32:32:42:34:26:42:c9:99:
ca:f1:36:bb:46:15:04:cb:61:d6:65:cb:11:67:12:
7c:1f:2b:75:b6:4a:90:e3:7d:61:21:a5:6a:06:86:
da:84:f9:b4:85:85:e4:00:03:2c:a5:9c:5c:98:fa:
b7:f4:a0:e4:9d:c4:e0:53:ef:7d:f6:68:24:48:4b:
d1:82:ad:30:c5:a8:bd:5d:07:ab:b0:35:9b:72:03:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:96:0C:38:73:AE:FF:E5:BF:B1:63:B9:9D:20:DC:08:25:C9:28:EA
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/k5YMOHOu_-W_sWO5nSDcCCXJKOo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.205.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:3a:c2:2a:77:70:80:85:4c:4d:18:38:1e:9b:07:38:1c:4a:
9d:93:d2:fe:fd:b7:88:ee:fe:54:25:aa:87:a9:98:a2:25:ce:
76:b7:00:7a:70:6c:14:6b:e1:27:b2:82:ec:1e:10:a0:99:19:
89:ea:4b:77:e0:c5:5e:c2:85:7d:d9:97:07:17:36:e0:0d:12:
7a:66:48:3e:c3:5d:1b:e1:26:ee:49:14:4f:45:3b:74:70:a7:
2e:ff:0b:52:9f:21:bd:b0:0f:d2:41:dd:55:6a:7e:e2:ee:a5:
77:44:cc:d5:5c:f5:05:5f:1c:86:5d:f8:44:f9:94:7e:60:7a:
59:97:61:0d:1b:99:fd:b0:78:e6:07:60:06:80:02:1e:ec:77:
d1:d0:41:a4:3b:9e:6f:ec:d0:2e:9f:aa:64:3b:37:b6:13:53:
70:ac:26:84:01:5a:ff:31:53:fe:da:d0:e6:73:7e:41:e9:16:
4f:bb:45:d7:8d:55:28:41:3e:88:e4:1c:2a:6b:0b:29:8e:b1:
9e:d6:de:c3:c5:a0:d6:25:e9:e9:34:09:3b:6b:13:d2:5d:d3:
90:6b:80:a9:95:b0:0a:6f:d2:81:16:3a:e8:f9:83:6d:7b:91:
82:e0:25:91:96:0f:e0:5b:dc:d2:c7:9f:25:35:c1:fa:27:a7:
e1:90:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:58 2025 by rpki-client