Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/qe2aqZMD240aX-yJZLEvfsNNOlA.roa
File: qe2aqZMD240aX-yJZLEvfsNNOlA.roa (raw, json)
Hash identifier: sxpfNr22iMhbUcT33N3z8kfsfM0jD/9VnkHWlEghHSs=
Subject key identifier: A9:ED:9A:A9:93:03:DB:8D:1A:5F:EC:89:64:B1:2F:7E:C3:4D:3A:50
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0B6D
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qe2aqZMD240aX-yJZLEvfsNNOlA.roa
Signing time: Sun 07 Feb 2021 06:19:01 +0000
ROA not before: Sun 07 Feb 2021 06:19:01 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 9919
IP address blocks: 61.56.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2925 (0xb6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 7 06:19:01 2021 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=A9ED9AA99303DB8D1A5FEC8964B12F7EC34D3A50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:27:fa:6e:22:fd:18:8f:3c:6d:8a:4a:d7:
50:ac:3d:53:31:c4:4c:4f:ff:0a:77:46:fc:70:6f:
d5:db:16:f4:43:58:80:c6:1e:38:cd:66:5a:3a:c2:
a8:93:97:79:0b:ff:f9:43:a4:97:05:9c:6b:2e:31:
e4:e6:96:40:e2:20:0a:c0:22:23:9e:f6:84:f6:f3:
0c:2d:9f:95:f8:33:e1:ce:45:86:86:39:c7:4c:0e:
4e:28:90:10:74:aa:e5:0a:d8:cd:43:78:c9:55:eb:
6e:40:5d:43:05:b2:57:35:18:ba:dd:50:1c:6c:70:
26:10:e5:a0:07:d8:3e:70:7c:fa:35:b0:3e:39:ba:
b6:13:1e:8c:2e:5e:35:ab:64:6c:24:c5:8c:b5:16:
cf:a6:34:18:b7:8b:c5:47:26:d7:5b:fd:62:5d:51:
5e:ac:37:b4:50:17:f8:63:85:a1:24:f8:ff:e5:7f:
3b:48:23:d6:fd:4e:92:3e:fe:b3:32:03:21:ab:f4:
d0:96:32:41:12:a8:df:83:80:ba:7c:f8:18:82:4e:
eb:cf:df:83:23:eb:3d:ad:6e:50:3a:7b:eb:e4:19:
35:de:4c:9a:0b:96:9b:31:01:a4:94:5a:43:7f:1f:
3f:3f:13:f7:da:11:ba:b1:d5:a2:6c:2e:ad:d0:80:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:9A:A9:93:03:DB:8D:1A:5F:EC:89:64:B1:2F:7E:C3:4D:3A:50
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/qe2aqZMD240aX-yJZLEvfsNNOlA.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.56.224.0/19
Signature Algorithm: sha256WithRSAEncryption
85:50:ac:35:86:3d:85:8b:e3:24:3d:23:d4:c2:a2:d2:e0:87:
2b:98:21:4f:d2:0f:5b:48:68:8b:cf:b8:9b:26:db:49:d5:1c:
d1:97:81:12:12:aa:63:91:bf:7c:83:e7:bb:af:7a:df:fb:24:
75:61:e8:05:6b:81:64:73:e5:35:3c:ed:32:2b:24:c9:f8:65:
fb:b9:4f:1b:96:14:d3:b9:f5:92:7c:97:bd:e7:cf:b9:fc:fd:
60:e1:04:2e:23:fa:35:78:54:06:85:0b:34:17:09:2e:4f:ce:
48:eb:ab:95:91:82:40:36:e7:12:80:d7:a3:56:ec:a6:bf:8d:
73:a5:a7:70:a8:c5:a4:b7:ac:f9:93:45:ba:bf:53:fe:17:50:
53:bc:89:04:27:94:04:f1:b2:af:22:17:96:aa:f9:42:c4:83:
42:4d:23:f5:53:0e:a3:0c:ab:a7:e8:93:0c:1a:6f:0f:ea:51:
05:03:c5:69:22:59:13:ff:a5:f2:9e:ac:09:37:cc:ab:53:47:
18:94:41:50:9e:45:99:e2:2c:b9:c9:58:64:05:fc:e0:68:e0:
da:82:52:8a:64:5b:72:27:d0:f5:27:58:26:1e:f4:e0:10:e0:
da:0c:1e:97:9c:57:a3:61:86:ee:1e:08:df:d0:2a:48:54:75:
47:98:38:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:06 2025 by rpki-client