Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/sd4YBT_Ac6UAONeK_XjuO8sSlK0.roa
File: sd4YBT_Ac6UAONeK_XjuO8sSlK0.roa (raw, json)
Hash identifier: RAp5NwvLsBZiSHsXWpkHpXWKmYSmWFDBK+1GHT4/qxo=
Subject key identifier: B1:DE:18:05:3F:C0:73:A5:00:38:D7:8A:FD:78:EE:3B:CB:12:94:AD
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 135F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sd4YBT_Ac6UAONeK_XjuO8sSlK0.roa
Signing time: Fri 01 Sep 2023 09:24:51 +0000
ROA not before: Fri 01 Sep 2023 09:24:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 123.204.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4959 (0x135f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:24:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=B1DE18053FC073A50038D78AFD78EE3BCB1294AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:80:c1:c1:e2:ba:f1:09:f9:be:e6:a4:38:
22:33:0f:26:40:8e:85:04:4c:61:2b:24:9f:00:49:
97:c9:39:39:ba:af:fd:76:21:8f:77:12:b6:b6:63:
14:31:6f:e9:8c:05:50:22:7e:d5:7c:a7:47:7c:eb:
11:7f:a7:06:9f:27:2a:f8:ed:60:8d:44:db:63:0b:
41:fd:91:79:9e:85:20:3e:6f:c9:30:17:70:74:28:
53:14:8c:29:2a:84:87:bd:8a:d6:f5:f2:fa:c7:d6:
4c:4e:25:b3:67:7a:79:14:c1:ef:43:24:17:7e:81:
4e:19:9a:ac:73:80:e4:83:0e:a2:ab:ee:14:3e:cf:
07:5f:81:22:82:56:2a:0c:9e:ee:55:73:c6:39:15:
89:15:1f:e2:ac:f0:9e:b7:93:ac:da:10:c6:d8:ed:
09:ec:83:a9:b4:97:dd:f2:05:a5:c1:1d:ad:f3:e9:
2b:8d:99:02:f5:f0:2f:8e:67:18:32:ea:d3:24:eb:
bd:e2:78:58:4f:8c:30:df:c0:e7:bd:c3:08:b5:a2:
f0:62:e4:7c:de:91:86:39:2d:4b:1a:ba:78:2b:d5:
2e:ed:6e:10:5a:92:15:4a:cc:56:fd:b7:cc:d1:00:
d1:33:dc:9b:a4:10:08:68:8d:84:6b:b3:2b:de:06:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:18:05:3F:C0:73:A5:00:38:D7:8A:FD:78:EE:3B:CB:12:94:AD
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/sd4YBT_Ac6UAONeK_XjuO8sSlK0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
123.204.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:8c:27:f6:cb:83:06:87:99:29:6b:de:6d:7e:c7:b6:94:e9:
4f:0a:6c:1c:6c:a9:88:d2:a3:e4:a9:80:3a:0c:82:59:4c:bd:
24:a9:bb:21:9e:64:93:ca:4d:50:28:5e:25:76:19:c1:8e:a4:
59:39:88:23:62:13:ab:82:05:3d:26:e5:48:a7:3a:bf:77:78:
6b:4c:16:dd:46:e0:f8:3a:ee:79:3c:84:50:c5:08:c8:d7:e3:
a1:09:10:75:9a:b7:86:8c:bc:54:95:fb:53:37:0b:61:d0:99:
cf:3f:1f:ba:a8:26:7e:5d:83:56:05:45:7c:8a:6a:5d:56:c0:
53:1a:af:a9:d5:bd:70:0c:07:ce:98:98:01:a2:99:28:0d:1c:
81:60:bc:2a:86:0d:fb:4e:8c:e7:46:8e:b2:b3:aa:76:a2:da:
8a:4e:22:36:77:a0:6c:7b:47:c7:17:3d:5b:51:65:34:87:71:
68:d8:37:e3:e4:c7:c7:49:96:d6:5d:63:43:58:d3:b1:95:35:
e6:2c:b1:63:ee:05:8f:a5:d1:39:10:a1:dd:6e:b8:02:7b:79:
c6:1d:8e:6e:97:53:d6:02:50:6f:0c:83:a8:ac:ef:c1:56:e2:
dc:54:57:0c:71:9f:66:52:83:cb:f6:81:a2:e1:9c:e8:77:5f:
c8:85:c4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:18:36 2025 by rpki-client