Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/m47ZER27AUFg2SHditWZVVD0eX4.roa
File: m47ZER27AUFg2SHditWZVVD0eX4.roa (raw, json)
Hash identifier: xCbQcDOsjA1UgryfI2nI6pUZNMpn7APrC7xRm/wZP8w=
Subject key identifier: 9B:8E:D9:11:1D:BB:01:41:60:D9:21:DD:8A:D5:99:55:50:F4:79:7E
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1342
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m47ZER27AUFg2SHditWZVVD0eX4.roa
Signing time: Fri 01 Sep 2023 09:24:42 +0000
ROA not before: Fri 01 Sep 2023 09:24:42 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 113.196.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4930 (0x1342)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:42 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=9B8ED9111DBB014160D921DD8AD5995550F4797E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:a5:a5:e8:9c:6e:84:6d:bc:6a:4c:28:9e:
5b:fa:c0:74:e8:cb:f2:b7:fc:66:db:05:09:22:70:
ed:8e:e9:7f:b2:f2:58:f0:da:cb:b6:44:9e:f2:7d:
e6:47:c5:0e:f5:e3:2d:52:89:24:ff:03:e9:3f:5a:
e4:46:c9:87:f1:1d:ab:4b:39:6a:6e:63:33:66:e0:
4a:eb:31:56:5e:e1:eb:4c:24:a4:a5:ac:77:b3:57:
d5:b9:91:60:03:06:67:24:15:74:92:b2:cf:a0:d6:
1c:64:7b:a1:e8:ee:d2:90:25:21:ce:d2:6f:e0:7b:
0e:c1:64:f8:2c:f8:80:e1:e0:8e:8a:95:e2:4e:cc:
a4:2a:d7:f8:c8:11:ae:7d:d9:23:ef:bf:2f:f7:a7:
c5:40:cc:c1:5b:48:e6:aa:b3:60:8c:c9:95:2a:be:
ec:c6:81:ca:42:cd:6e:e2:8e:e8:54:47:43:c2:14:
6f:e3:fa:3b:8f:c1:3d:da:6a:9e:1c:61:c9:2a:3c:
cc:3c:b3:70:5d:73:04:56:94:59:29:0a:a0:93:dd:
86:b8:01:d2:78:58:8f:d2:96:05:48:4f:3e:60:ea:
28:4b:eb:5b:cb:50:7e:7a:d8:88:b0:c8:70:58:04:
9a:ed:69:9c:06:78:58:ae:fd:14:d7:01:6a:69:2b:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8E:D9:11:1D:BB:01:41:60:D9:21:DD:8A:D5:99:55:50:F4:79:7E
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/m47ZER27AUFg2SHditWZVVD0eX4.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.196.128.0/20
Signature Algorithm: sha256WithRSAEncryption
50:3d:4c:f4:fd:56:ac:f9:9c:f6:63:87:c3:78:9d:df:0b:48:
24:a0:a5:11:c2:7a:cc:08:67:5f:25:d6:b9:c8:2b:dc:75:66:
8b:d1:19:ec:d7:ed:5d:6b:7e:fa:05:1e:eb:ed:85:0a:da:bd:
d1:6e:91:c6:6a:a8:f5:a6:03:55:3d:ad:59:9e:3d:7d:e4:4c:
64:f2:28:d9:d3:00:02:e2:43:83:3c:e6:69:ed:55:4d:e0:1a:
af:bb:ce:79:97:c2:26:c1:4d:c7:ac:fb:d5:98:8c:0a:53:99:
ea:13:be:c2:92:0d:b6:43:98:20:52:4d:2d:39:6b:1d:e4:62:
33:13:51:89:9d:c4:e4:9b:23:d4:cc:bb:5c:99:5b:66:b6:be:
e5:f0:db:94:f7:dd:2f:11:e1:fe:a1:25:94:f6:e0:9c:fe:40:
90:fb:95:35:bf:5b:34:53:5e:d6:8f:9b:70:65:54:e6:18:b6:
f1:6a:f9:80:ea:c5:66:a6:89:c3:d6:a7:96:d1:5a:32:1e:7f:
ed:58:ee:92:41:59:49:c1:c2:f6:df:33:48:6c:a7:67:13:a2:
ba:a8:19:7d:32:82:e6:da:a2:0e:a4:aa:b6:9b:3c:cd:61:30:
96:79:77:c1:4a:63:31:0e:bb:58:31:14:47:87:42:f6:19:eb:
e8:05:03:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:36:13 2025 by rpki-client