Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/kMWLmyOnfMTkJ1i-Lb9sZeyPygo.roa
File: kMWLmyOnfMTkJ1i-Lb9sZeyPygo.roa (raw, json)
Hash identifier: YmlSboHbin9ajNoXUSZXVSPzEWFronVnRO5D8Pd0I4c=
Subject key identifier: 90:C5:8B:9B:23:A7:7C:C4:E4:27:58:BE:2D:BF:6C:65:EC:8F:CA:0A
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 10B0
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kMWLmyOnfMTkJ1i-Lb9sZeyPygo.roa
Signing time: Wed 01 Feb 2023 10:28:54 +0000
ROA not before: Wed 01 Feb 2023 10:28:54 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 211.74.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4272 (0x10b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:54 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=90C58B9B23A77CC4E42758BE2DBF6C65EC8FCA0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:00:e2:27:31:76:24:1a:49:33:88:1b:ec:
1d:e1:0f:55:b6:44:17:b9:2d:c4:bb:16:bc:9f:92:
fe:47:81:56:6d:b8:a5:1d:72:6d:20:79:a1:5b:b7:
b2:e3:d3:69:e1:4b:a5:5f:fd:e0:15:37:8b:66:d7:
3c:4f:8b:35:b5:17:04:e1:15:1e:10:23:80:8c:dd:
41:68:a6:99:09:fe:cd:8a:a9:f9:b4:9b:7e:dd:48:
7f:35:c0:71:1e:bd:05:07:47:6f:1d:0a:54:d1:26:
ed:c1:4e:ba:34:1b:aa:10:3f:0a:87:84:5b:37:1e:
af:86:82:22:99:94:85:57:69:8d:c5:1a:4a:13:4f:
0a:76:bc:3d:94:67:4f:37:f3:6a:1d:ee:37:ce:12:
18:83:3c:45:9c:7d:f6:4a:03:32:2b:ed:80:b4:12:
48:34:85:ea:e9:81:18:ef:e9:ff:95:35:84:4c:64:
10:1d:4a:23:fb:82:b6:85:6f:93:6e:76:b8:e0:03:
ab:07:08:b9:9a:32:f0:19:75:ea:35:6f:3c:c3:49:
91:a0:d8:00:6b:9a:c4:72:bb:47:b2:aa:c4:ac:5e:
e9:df:ed:6f:d8:09:58:6e:44:bd:1b:0d:f7:e3:fc:
32:15:82:cc:93:bb:1d:13:c9:af:5f:36:d8:b8:29:
17:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C5:8B:9B:23:A7:7C:C4:E4:27:58:BE:2D:BF:6C:65:EC:8F:CA:0A
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/kMWLmyOnfMTkJ1i-Lb9sZeyPygo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.74.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:8d:55:01:39:e9:00:ea:05:e6:9c:95:b2:b0:14:64:03:91:
37:70:ff:76:5f:ea:dc:1a:5b:ff:12:f6:20:c0:70:a5:68:9d:
99:5c:2e:88:28:1a:bb:87:3d:61:75:68:f1:2e:cf:8b:e8:d4:
0e:2b:81:30:c9:2d:37:3e:b8:6b:c1:20:5d:fe:21:17:a8:a0:
90:40:b0:34:00:0b:a2:ba:b2:b5:08:26:09:75:d4:1c:1b:63:
63:3f:a9:39:b6:36:49:35:e1:9a:b6:ea:3f:82:6c:5e:71:81:
84:f6:d0:9d:37:c0:7f:ea:40:fd:67:2d:1a:b3:40:09:ac:3a:
bf:f8:85:52:e7:af:84:2f:3c:3e:78:dc:d2:44:96:a6:24:82:
98:1e:16:b3:93:79:26:04:c3:b5:34:5b:16:4f:4d:28:08:33:
11:d2:02:16:bd:e8:40:62:1c:f9:5b:e6:c6:69:a4:bf:fb:53:
af:d3:e1:bf:cd:b3:a5:c9:d5:45:81:fc:62:0d:60:62:99:1e:
9b:a9:04:4c:2f:e5:3c:72:63:22:3c:3a:b1:69:ca:d2:08:cc:
0c:e7:b7:7c:c1:2a:20:32:22:70:d1:f2:df:36:04:3d:61:6e:
55:17:fa:ee:61:59:74:a0:f5:07:56:22:19:c5:b0:59:8a:ef:
6f:ec:d0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:30:15 2025 by rpki-client