Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/pjN-m6BVZd2BMVwynqpVka0nx88.roa
File: pjN-m6BVZd2BMVwynqpVka0nx88.roa (raw, json)
Hash identifier: 2I5pLNH3xqOWnG14ZbYyT8kw+dMbRUxsFfq+tDSY0cE=
Subject key identifier: A6:33:7E:9B:A0:55:65:DD:81:31:5C:32:9E:AA:55:91:AD:27:C7:CF
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1854
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pjN-m6BVZd2BMVwynqpVka0nx88.roa
Signing time: Mon 10 Feb 2025 14:07:49 +0000
ROA not before: Mon 10 Feb 2025 14:07:49 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 211.74.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6228 (0x1854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:49 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=A6337E9BA05565DD81315C329EAA5591AD27C7CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:b3:66:c0:9b:60:94:30:fa:a1:03:6a:cf:
1a:32:5b:0b:c0:fe:5a:5f:fd:6a:33:22:7a:33:9c:
7a:dc:93:60:51:9c:99:83:02:4b:cd:ee:95:f7:51:
19:8a:7b:bb:94:fe:98:cb:c9:47:fc:60:24:09:bd:
91:e9:1a:27:ea:ff:72:09:3d:89:70:25:bc:fe:a2:
f0:78:56:81:24:02:a7:c3:5c:ce:88:b0:1e:42:76:
86:c9:45:7e:7c:b0:5e:9e:04:a5:f1:08:db:3e:4f:
24:b7:72:bd:26:3c:18:26:da:e4:bc:54:c3:0f:27:
90:6d:a4:26:c4:f3:34:3b:23:17:89:46:01:e1:c4:
95:32:c6:bd:2b:56:a5:64:eb:e0:8d:2c:b8:2f:ab:
bf:28:0a:f1:65:2c:f8:88:9f:1b:1d:a8:43:65:11:
8a:ee:85:b7:7c:89:74:80:63:9c:78:1a:8a:f1:8d:
e6:f4:19:d6:89:52:ab:f2:74:76:02:0b:0d:9f:aa:
f1:1c:ed:b1:ae:1b:02:89:ca:1c:6c:b8:e3:3e:9e:
1a:57:14:e9:5f:45:5b:69:3a:f2:37:6f:a0:b6:95:
e4:b1:b1:f3:3e:ec:00:b5:45:7c:cb:47:c9:62:5e:
7e:32:7d:f7:b1:7a:b5:f7:02:81:19:ab:55:f0:00:
a5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:33:7E:9B:A0:55:65:DD:81:31:5C:32:9E:AA:55:91:AD:27:C7:CF
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/pjN-m6BVZd2BMVwynqpVka0nx88.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
211.74.0.0/17
Signature Algorithm: sha256WithRSAEncryption
69:45:7f:35:50:5f:b8:dd:28:00:3f:47:b0:f1:8b:96:96:39:
f7:43:83:6e:64:dc:20:ae:dc:3c:8f:46:7b:89:ac:95:da:c1:
ad:3a:c2:b9:48:21:c7:72:e9:59:a2:8b:5d:9b:70:1a:d1:98:
99:24:b5:99:b5:02:e5:e4:df:2e:10:81:ef:d6:f1:fd:5b:de:
1b:d6:3b:9b:a6:2f:c6:62:9c:bf:28:24:2a:3e:7a:ff:a6:e2:
2d:5f:15:3c:fb:9c:16:b1:2d:f9:d1:f6:1d:78:97:0a:88:d3:
db:bc:ee:e0:1a:76:1f:6f:58:f7:0b:01:e1:5f:cc:97:86:e9:
4a:63:cc:e4:0f:31:0a:f9:c8:ae:57:c2:f1:3d:20:29:6e:6c:
8e:59:46:21:08:a4:31:23:2c:5e:1f:4f:59:ed:9a:c7:4f:b2:
9f:e8:2f:08:c2:db:5f:75:1a:57:77:f4:ec:72:d3:1f:34:4d:
77:1d:a0:cc:53:d1:be:1b:da:a6:d1:6d:2f:d3:41:cf:c0:b9:
b7:10:d3:c5:15:09:ad:36:a2:9a:1d:74:ca:85:2b:f4:c8:63:
a5:15:f7:f3:98:a0:24:45:b3:c7:61:f1:46:1f:c7:1f:42:4e:
c7:9d:03:58:97:7d:dd:d5:4f:ad:c4:c8:2f:dc:b4:08:9e:d9:
16:63:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:25 2025 by rpki-client