Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/re-prAMQgDMNgPLgHFVLBeWifwk.roa
File: re-prAMQgDMNgPLgHFVLBeWifwk.roa (raw, json)
Hash identifier: rWFUhAwOKRMx+topG+ZYWWhbnT31D3faZop3tixE8z0=
Subject key identifier: AD:EF:A9:AC:03:10:80:33:0D:80:F2:E0:1C:55:4B:05:E5:A2:7F:09
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 08FC
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/re-prAMQgDMNgPLgHFVLBeWifwk.roa
Signing time: Tue 29 Sep 2020 09:52:40 +0000
ROA not before: Tue 29 Sep 2020 09:52:40 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 131627
IP address blocks: 122.147.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2300 (0x8fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 29 09:52:40 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=ADEFA9AC031080330D80F2E01C554B05E5A27F09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:58:43:d9:5c:28:96:75:ed:d8:2e:9c:36:88:
6f:a5:c6:1f:db:c8:ab:9d:1a:b2:10:81:f1:81:e3:
a5:41:cd:bb:4f:d1:13:b9:93:4b:67:08:06:81:0d:
c9:a5:8a:59:1f:f8:77:ae:dc:12:83:b1:84:99:f2:
36:8b:61:6d:43:89:9c:6e:14:41:ec:28:ee:6f:d9:
df:f4:a9:66:cb:df:55:cb:4c:90:16:cb:e7:c3:5b:
3b:de:3c:53:b5:ff:b9:e0:49:d2:79:48:2f:2b:6a:
65:89:da:80:fb:93:d0:11:c7:f3:ea:f0:dc:bb:e9:
ec:4d:16:63:0f:b7:be:09:b2:d6:7e:35:1c:aa:0f:
b7:ce:29:13:52:db:e9:df:ea:f2:5f:3b:a1:71:60:
49:81:7e:72:04:9e:d8:93:6f:8b:e2:76:08:dc:da:
f8:d4:b1:6c:fc:7f:d1:1c:47:cd:66:8b:46:8c:37:
c0:38:27:44:f3:26:2c:fe:d0:c4:57:ef:7b:19:28:
f3:72:4e:0c:e1:32:27:ca:7e:c6:3f:7f:58:81:95:
2a:ab:91:e8:d9:fe:3b:95:30:94:b6:a1:99:68:da:
73:38:96:d6:8d:7c:79:7e:8d:8e:8c:e8:a1:81:66:
4e:27:ee:db:4e:62:aa:88:48:0d:8d:24:7a:58:c5:
e2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:EF:A9:AC:03:10:80:33:0D:80:F2:E0:1C:55:4B:05:E5:A2:7F:09
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/re-prAMQgDMNgPLgHFVLBeWifwk.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
122.147.16.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:b3:f1:70:57:16:a1:5d:b6:5c:da:93:f3:4c:cb:08:6c:42:
82:36:9c:f1:08:75:66:d4:80:ed:4a:d8:47:71:96:b8:ae:ea:
13:90:de:04:fa:68:b4:d9:07:e8:e0:c0:e8:a7:6d:cb:16:85:
92:55:5d:0b:42:72:4d:fc:46:0f:98:08:4e:7a:b6:8e:a9:4b:
41:b7:af:58:20:0b:0b:07:04:b0:b0:b3:85:8a:96:b7:d7:54:
a1:5d:5b:e7:3e:66:47:32:d3:5d:dc:26:71:03:c1:fe:90:3f:
1d:6d:aa:04:ce:a1:e4:30:7a:bc:e8:e8:74:fe:d0:a8:62:90:
a1:9f:c4:be:da:70:5d:6f:53:11:5c:86:46:4a:03:c4:0a:20:
f5:d9:7f:40:b1:20:66:82:cf:c4:f4:ea:8e:6d:ca:bd:ec:04:
d2:c5:c8:f5:d3:bd:16:d1:7e:d4:e2:32:4c:db:92:37:10:5f:
86:63:31:c2:2c:72:b1:15:43:a8:a9:f5:86:62:37:2b:18:75:
dc:f3:04:6d:16:ea:0b:79:f2:df:10:c2:f3:5b:7a:8e:4d:c0:
7c:65:49:99:f6:ce:40:97:a4:14:84:0f:4d:fa:44:0a:82:bc:
94:49:2f:dd:50:43:2b:95:0c:c0:34:18:5f:1b:bb:eb:9c:be:
dc:88:58:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:13:50 2025 by rpki-client