Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/wpKKPib8LUcwQZ90bWE8_TQ9uBs.roa
File: wpKKPib8LUcwQZ90bWE8_TQ9uBs.roa (raw, json)
Hash identifier: Cre6tmIWfOHXspNCiEC7BLboJwPPPBDmfX6EGdAv8BA=
Subject key identifier: C2:92:8A:3E:26:FC:2D:47:30:41:9F:74:6D:61:3C:FD:34:3D:B8:1B
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 0FC4
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wpKKPib8LUcwQZ90bWE8_TQ9uBs.roa
Signing time: Thu 15 Sep 2022 02:43:10 +0000
ROA not before: Thu 15 Sep 2022 02:43:10 +0000
ROA not after: Wed 06 Sep 2023 03:00:35 +0000
asID: 9919
IP address blocks: 59.104.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4036 (0xfc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 15 02:43:10 2022 GMT
Not After : Sep 6 03:00:35 2023 GMT
Subject: CN=C2928A3E26FC2D4730419F746D613CFD343DB81B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:04:0f:85:4b:bb:fc:93:e1:b5:43:c2:1c:
3b:09:64:4d:0f:16:15:10:38:78:6a:37:db:e3:d3:
13:20:b4:9c:2a:5c:db:1e:06:d5:37:96:30:83:f9:
75:9f:33:91:5b:cd:13:66:15:8e:71:18:eb:a8:fe:
97:92:b8:99:b6:22:14:4b:ad:b6:d3:ff:d4:ba:68:
c6:39:59:3f:f9:76:65:e7:ee:c4:fc:58:e7:87:61:
f4:76:77:97:07:8e:71:c8:9a:eb:1e:9d:a3:c0:38:
94:af:db:86:cb:b9:46:a7:63:59:d5:cb:c9:e7:0b:
7c:64:f3:ba:e6:5a:85:cb:5e:b7:be:52:7a:2d:ce:
48:ec:8b:71:a5:f9:b5:fc:36:4f:f2:64:01:cb:d7:
5c:2c:d0:0e:30:63:1a:4d:9a:7b:9d:01:24:40:0d:
ea:5e:d4:ce:ca:10:ca:8b:8c:47:aa:11:c9:36:bc:
bf:1c:27:91:2a:69:ce:5e:09:27:57:e7:fe:a1:80:
55:85:75:6a:2f:5c:c5:cc:16:66:c2:27:b1:74:2e:
c5:1d:80:00:58:53:e8:94:2f:16:a3:39:1d:89:26:
8e:55:0d:72:9d:20:ba:b0:6d:4c:4d:83:ae:dc:51:
84:fb:59:d6:bd:e8:e5:f7:1d:a5:5f:2c:28:5a:24:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:92:8A:3E:26:FC:2D:47:30:41:9F:74:6D:61:3C:FD:34:3D:B8:1B
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/wpKKPib8LUcwQZ90bWE8_TQ9uBs.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
59.104.0.0/15
Signature Algorithm: sha256WithRSAEncryption
51:f0:81:db:2a:34:17:c5:32:cc:ab:43:39:d2:87:1a:b2:d1:
87:1b:65:2c:e9:cf:4c:e1:90:cb:7d:52:a1:ba:04:e5:3d:67:
e5:58:39:52:c9:87:a6:8d:58:9f:86:c6:e4:b6:b7:f4:00:50:
7f:71:57:6d:8c:2a:b5:5b:bf:49:1e:36:8a:dc:72:05:19:60:
7b:73:16:d9:25:6c:32:6e:fe:85:78:4c:c5:7e:da:7e:78:11:
44:f2:ec:18:38:19:9f:0a:0e:66:bf:7a:48:e1:14:58:36:30:
43:08:28:b4:c5:76:31:f2:e1:77:04:1c:03:2b:ff:76:87:d2:
c8:86:c4:e6:19:56:84:f3:3f:af:4f:09:a4:8b:eb:49:2a:22:
0a:89:60:fc:18:b9:01:76:63:e6:9c:4b:da:77:a4:b0:64:21:
67:25:17:b4:55:09:5a:eb:fe:d0:f0:68:7f:25:8a:16:40:ed:
d1:7c:9c:53:ec:2e:a5:8e:fa:d6:a8:31:69:1b:8c:2f:a8:56:
a8:90:78:05:3d:2f:8f:33:f4:a6:ae:5f:dd:61:83:86:1b:2e:
ce:93:e1:31:2c:05:bd:10:89:a9:94:25:e1:e8:41:26:78:7d:
fa:71:45:d2:8c:5c:66:99:e9:83:55:c6:38:a7:a0:9c:8f:6c:
9b:5d:d7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:21:58 2025 by rpki-client