Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/yF6djjnK91-t_3_ON6p_aQ132bc.roa
File: yF6djjnK91-t_3_ON6p_aQ132bc.roa (raw, json)
Hash identifier: B5DU6VhGOv9kc1GsoziLuSdPj/8d9bn6dXqOLdZW2ZU=
Subject key identifier: C8:5E:9D:8E:39:CA:F7:5F:AD:FF:7F:CE:37:AA:7F:69:0D:77:D9:B7
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 13DD
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yF6djjnK91-t_3_ON6p_aQ132bc.roa
Signing time: Fri 01 Sep 2023 09:25:32 +0000
ROA not before: Fri 01 Sep 2023 09:25:32 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 9919
IP address blocks: 203.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5085 (0x13dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Sep 1 09:25:32 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=C85E9D8E39CAF75FADFF7FCE37AA7F690D77D9B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:91:c4:4f:93:b5:09:4e:8f:1c:57:33:c5:
c9:91:f1:9a:d1:14:c4:cf:88:7a:c9:4f:a2:99:2a:
06:62:96:8a:63:2c:ff:53:b6:ba:0c:fc:44:cc:97:
80:d9:0f:a1:b0:cc:cd:ba:86:d7:09:2a:63:f4:dd:
1f:ea:81:f8:1e:d1:d3:7f:2b:0c:0a:01:c1:31:4f:
d9:08:2d:b0:db:58:36:95:9d:b8:1b:ba:7a:20:97:
70:3b:5c:32:c3:4d:37:58:ec:c6:5f:29:eb:8e:72:
45:8d:3c:53:a9:ae:1b:76:e4:07:cc:0d:60:d2:94:
68:ad:c0:d1:40:e2:da:e6:90:6f:ef:04:30:21:1c:
ff:58:fb:89:32:dc:6d:da:ad:a4:33:3b:dd:2e:56:
b8:6d:cf:4a:4c:9b:46:e7:64:63:98:7f:e6:d4:3d:
2c:e1:c4:5b:00:a9:4f:02:97:70:00:72:08:74:58:
dd:b4:db:c1:47:1f:dd:2c:c8:b6:76:43:1b:bf:b4:
be:4b:c0:81:bd:81:c9:9c:e8:6f:9e:54:d2:2b:2d:
92:59:06:ba:93:9b:4f:21:ac:f4:98:3d:65:05:09:
73:e6:12:bc:3f:9e:60:67:34:3e:50:b6:65:60:fc:
0e:07:cd:c5:9b:14:27:06:cc:07:e4:0f:2d:a7:c5:
0f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:9D:8E:39:CA:F7:5F:AD:FF:7F:CE:37:AA:7F:69:0D:77:D9:B7
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/yF6djjnK91-t_3_ON6p_aQ132bc.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
27:c5:68:f1:02:02:2b:cd:76:22:f3:53:76:39:96:6f:1e:51:
3b:c2:d3:bc:1d:74:b2:fc:a8:a6:4e:9e:d2:90:e9:82:24:a0:
2a:ab:b4:90:aa:dd:a3:72:b4:88:f1:26:91:11:d1:e5:9b:6d:
85:e1:9b:40:66:f6:cf:00:fc:6e:5d:bf:57:24:25:ee:7b:a7:
cd:17:df:1f:a9:fb:2b:83:60:7a:67:6d:4c:ca:82:6e:d0:7e:
45:b8:93:4b:3a:9d:92:d3:de:1b:a3:af:ec:85:d7:33:05:cc:
e5:8b:0f:46:0c:fe:99:56:b8:6a:b8:61:04:cc:1a:8d:6f:c8:
1a:e8:0a:e4:67:4a:5f:56:0e:44:6a:45:5c:ef:cd:1f:7a:ca:
8f:37:a2:c0:f3:42:71:28:f3:dd:95:35:79:5b:b6:62:fb:7d:
80:1f:17:61:93:fa:9f:9f:eb:17:04:c8:d4:72:93:a8:a4:d0:
63:6f:e6:cb:2f:13:1a:be:3f:39:fd:ec:0a:ef:8e:b1:dc:0d:
dc:1d:ce:f6:45:52:aa:00:87:92:cb:1d:82:21:66:d2:d1:e7:
33:81:08:ce:ee:0b:58:97:0f:2e:45:44:2c:3c:58:82:d7:b0:
d3:0c:18:6c:aa:30:15:26:78:fd:83:e3:bc:eb:ea:4c:9f:76:
8f:db:b3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:25:27 2025 by rpki-client