Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/p3_gxRrEY8E1br9R8BuQJ9EXvXw.roa
File: p3_gxRrEY8E1br9R8BuQJ9EXvXw.roa (raw, json)
Hash identifier: tfcweMRTJknS/Z1rGP9M1iZdvUDnBPFXATtUyveC7M4=
Subject key identifier: A7:7F:E0:C5:1A:C4:63:C1:35:6E:BF:51:F0:1B:90:27:D1:17:BD:7C
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1050
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p3_gxRrEY8E1br9R8BuQJ9EXvXw.roa
Signing time: Wed 01 Feb 2023 10:28:24 +0000
ROA not before: Wed 01 Feb 2023 10:28:24 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 4780
IP address blocks: 60.245.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4176 (0x1050)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 1 10:28:24 2023 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=A77FE0C51AC463C1356EBF51F01B9027D117BD7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:76:72:83:19:98:6d:1b:40:19:08:0c:ad:3e:
e4:b8:44:c0:80:3c:19:7b:0a:8a:b9:60:f3:d5:a9:
8f:c4:96:17:36:32:de:44:3b:43:5c:ed:64:13:fc:
f5:9a:fb:f0:b5:84:b0:ad:83:c8:50:9e:cd:ea:17:
f9:da:18:eb:26:0a:59:3c:f2:d9:90:25:e1:35:3c:
8e:ae:7b:19:2a:be:cd:75:40:a9:61:da:8d:d4:71:
38:c9:62:56:b1:40:00:d5:27:09:5e:8a:60:33:1f:
bf:8f:f3:f4:9f:37:a2:63:d2:ec:2b:eb:b4:15:d7:
ec:fd:bc:22:f7:39:b4:c4:86:cd:af:18:6d:1b:1f:
94:0c:2c:ec:98:92:69:7a:27:c5:07:f9:57:35:58:
3c:13:af:e8:20:22:a6:28:6e:e1:7b:7d:4b:fb:20:
63:a9:d0:c4:69:d7:a2:da:cb:a5:7c:cf:c7:f6:21:
d2:68:7b:79:78:68:71:b2:3a:cc:46:0f:16:b9:9b:
e8:65:a0:1a:ab:30:30:d5:0c:81:f0:2f:30:31:2c:
c2:78:30:8a:b2:f2:2e:11:ff:e2:97:3e:e7:e4:0b:
b7:a0:a7:a6:56:dc:71:18:66:5a:17:d8:af:bd:de:
35:2e:6d:2c:f8:83:0d:e1:67:f4:35:7d:1d:5e:07:
17:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7F:E0:C5:1A:C4:63:C1:35:6E:BF:51:F0:1B:90:27:D1:17:BD:7C
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/p3_gxRrEY8E1br9R8BuQJ9EXvXw.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
60.245.96.0/19
Signature Algorithm: sha256WithRSAEncryption
76:db:bd:a8:a4:7d:3b:01:e6:df:c3:7f:59:d6:b2:73:23:07:
4e:17:ba:16:16:84:f1:cf:89:29:04:2b:e3:55:94:02:09:aa:
4c:2e:a4:d2:27:ce:38:55:4a:39:71:99:f5:70:6b:0f:a3:a6:
13:93:e9:e8:48:ed:d8:18:c4:6f:e3:d0:67:fb:65:93:cc:91:
c0:71:93:7e:93:03:3c:13:c0:88:9c:24:99:5b:bc:38:b2:84:
77:dd:22:db:35:ad:39:8a:4c:5a:0e:c9:ef:7e:ff:8d:4e:14:
99:d3:a5:9c:79:70:b2:7c:0c:2d:be:d2:2f:65:84:52:1a:ac:
86:7b:6a:67:78:41:3e:2b:3e:ae:f7:76:d2:70:06:1a:5f:e8:
65:a9:de:c3:16:44:b8:d6:41:3b:93:ab:3f:d6:36:af:31:a9:
10:92:02:77:0c:52:b6:42:d3:62:be:0c:54:58:56:c1:7f:c9:
c4:61:37:85:1a:7c:c9:9b:e7:4d:b6:54:a4:5d:1b:f9:90:4f:
d9:af:fb:c8:76:4c:9b:b3:a8:f3:a3:b2:8b:a9:03:82:9d:c9:
67:e2:91:c0:78:fd:84:b8:58:a0:7a:05:3b:ff:e1:e2:1c:85:
33:ae:95:03:a3:b1:d7:02:9f:c0:ff:3f:9a:cc:9d:26:dc:35:
11:01:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:39:12 2025 by rpki-client