Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/v3MTPBVjy5nqFGkSSYXaqbY1m2g.roa
File: v3MTPBVjy5nqFGkSSYXaqbY1m2g.roa (raw, json)
Hash identifier: W8J9Qnejhyscuy8cu8A6xGgddq1Ei2G8d05El2/mSFM=
Subject key identifier: BF:73:13:3C:15:63:CB:99:EA:14:69:12:49:85:DA:A9:B6:35:9B:68
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 15ED
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v3MTPBVjy5nqFGkSSYXaqbY1m2g.roa
Signing time: Mon 26 Aug 2024 05:21:36 +0000
ROA not before: Mon 26 Aug 2024 05:21:36 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 9919
IP address blocks: 220.228.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5613 (0x15ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Aug 26 05:21:36 2024 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=BF73133C1563CB99EA1469124985DAA9B6359B68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:3b:42:9f:a2:98:48:3e:dd:a1:85:0a:83:
5a:bd:90:02:d4:84:b0:48:90:d6:d5:a7:f5:fc:af:
c1:e7:e4:60:f4:86:20:23:92:c7:06:69:38:44:a1:
bf:06:68:20:ed:9c:1b:69:18:2a:81:ea:81:2d:69:
57:74:bf:2d:f1:db:1b:7d:16:58:c6:e0:7c:92:ec:
b8:5f:e9:83:4d:ac:39:0d:ff:9c:bf:1f:8f:e5:a7:
95:c5:21:c6:ee:a5:d2:f0:d8:a1:71:d6:77:e6:02:
0f:81:7a:0a:a2:1a:9b:b9:11:6f:cd:a3:2d:e6:6a:
3d:c4:96:cd:2f:4b:de:d7:25:81:58:52:29:29:e0:
43:e0:56:af:24:73:1a:d3:93:91:d8:19:80:72:e5:
7a:1f:95:b5:87:ba:54:23:75:98:cd:95:41:5a:69:
7f:51:95:af:12:4e:f0:18:42:e5:f2:3c:66:b9:ab:
bc:1a:6e:08:44:d0:b4:cb:07:a2:ea:be:21:72:50:
48:e9:5b:e2:d4:f7:22:f4:7a:aa:4b:47:46:14:50:
db:7d:95:9d:b9:35:b4:10:c6:5f:24:c1:a0:e1:95:
c2:3c:5a:fd:c3:1d:74:67:f7:53:35:c8:17:31:f3:
cc:1b:da:f7:58:8f:7a:8e:a4:20:41:ab:04:06:f4:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:73:13:3C:15:63:CB:99:EA:14:69:12:49:85:DA:A9:B6:35:9B:68
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/v3MTPBVjy5nqFGkSSYXaqbY1m2g.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
220.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:fb:2b:bb:5c:43:aa:4e:39:df:27:73:ea:ec:dd:28:f0:41:
73:c5:d0:17:0f:2e:53:45:c7:ec:6e:02:a2:89:e3:d9:7e:c1:
b4:7c:a1:6d:9b:fa:62:a1:66:89:37:09:3d:51:7b:31:7f:11:
72:25:98:77:da:14:ca:d2:c0:65:13:67:aa:87:c8:28:94:cd:
bf:b2:32:6d:15:e0:da:eb:df:27:f1:6f:d6:34:a5:aa:43:53:
ad:d3:14:84:ad:a7:9e:e0:5b:ae:ec:21:07:25:8e:4a:7b:ec:
24:f9:ea:25:48:0e:97:22:82:5f:f2:2d:2f:c0:13:e1:d2:af:
fb:2a:b4:ff:44:d2:54:7d:1b:7b:38:9a:1c:7f:10:d5:17:d2:
23:bd:6e:fd:e2:10:78:70:f0:38:c6:43:42:e0:bd:cf:31:17:
b7:c1:28:9a:d9:65:03:32:ef:14:0b:50:35:73:57:5a:1b:3f:
1a:89:73:05:45:99:fb:5a:b0:e0:d2:df:80:55:c0:e2:ce:74:
f1:6b:88:78:51:9f:91:a8:eb:7b:ac:1c:a2:71:e2:33:97:91:
4a:bb:bf:e3:d3:f8:74:5e:d6:f0:a2:23:32:79:8b:be:91:55:
bf:e4:bd:d0:ef:df:9a:89:2e:33:a5:18:e5:7a:b5:a8:e5:c6:
fd:db:c8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:20:07 2025 by rpki-client