Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/4qog_CO1CX9T4Vns-CtV5Y8jcUM.roa
File: 4qog_CO1CX9T4Vns-CtV5Y8jcUM.roa (raw, json)
Hash identifier: na0I696XJRM+8QNll2trBNNjCeh1FR+oOKO6kAousnw=
Subject key identifier: E2:AA:20:FC:23:B5:09:7F:53:E1:59:EC:F8:2B:55:E5:8F:23:71:43
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 1870
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4qog_CO1CX9T4Vns-CtV5Y8jcUM.roa
Signing time: Mon 10 Feb 2025 14:07:57 +0000
ROA not before: Mon 10 Feb 2025 14:07:57 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 112.104.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6256 (0x1870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:57 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=E2AA20FC23B5097F53E159ECF82B55E58F237143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:46:0a:44:76:79:cf:38:ef:81:25:32:8b:
19:f1:77:8d:c3:18:f1:75:60:d7:2a:ea:24:00:30:
e4:38:83:ff:a1:68:5a:01:2d:b7:5f:43:7c:07:85:
7e:7c:22:79:06:dc:44:24:3d:93:84:ed:41:9e:b7:
c2:13:b0:39:61:91:ca:80:f2:e6:3c:ab:e8:bf:a1:
48:d0:39:b8:2c:dd:80:b1:60:57:5d:d0:bf:56:54:
1e:7a:64:ec:b8:b5:a8:0a:b5:44:6d:bc:dc:85:23:
9a:bd:29:2a:a7:07:1f:de:55:88:43:b0:e0:fe:35:
9e:15:3f:4f:65:b4:a3:f6:2d:e2:a9:00:a6:90:5b:
46:84:fc:06:c7:06:63:57:83:0a:e0:15:23:0c:8e:
66:47:0d:41:24:77:25:5d:3c:14:6d:bc:37:6a:52:
d2:d0:55:24:4f:1a:69:14:08:6b:4f:08:ff:19:91:
b3:01:d5:21:1e:06:17:c3:66:fa:8e:f5:9c:5b:e9:
f8:2e:75:04:3a:54:90:4e:ce:f0:6b:05:68:d0:01:
82:3a:3e:d8:09:a7:6a:38:89:2d:c8:95:2f:1b:c7:
e1:2f:7b:8a:0a:76:4f:88:45:6f:a2:1f:43:21:0e:
88:6d:c6:a4:63:20:f3:1f:b8:6d:b6:22:fc:ff:ef:
a8:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AA:20:FC:23:B5:09:7F:53:E1:59:EC:F8:2B:55:E5:8F:23:71:43
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/4qog_CO1CX9T4Vns-CtV5Y8jcUM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
39:3e:f9:36:86:9e:48:a1:60:46:c8:0d:e1:91:fc:3f:95:7d:
b0:d4:ff:76:83:de:0b:39:bc:8b:68:dc:39:d5:40:a4:c7:44:
bf:04:39:d2:56:ec:b0:b2:46:9d:07:ba:a2:53:06:eb:d0:42:
5b:ec:77:59:ea:3d:f4:9b:76:b8:a1:32:44:b1:ad:54:a1:59:
21:0b:44:d5:54:f9:00:89:00:ea:6e:51:ba:7e:49:ea:8c:89:
15:62:a9:33:0c:4c:c6:1f:bc:35:bc:f6:b9:94:e8:d2:71:d6:
43:92:31:7f:fe:08:89:7a:0a:a0:c4:b4:60:bf:a0:68:5d:cb:
87:0c:ea:bf:35:36:d6:a5:2d:80:50:ad:98:77:29:28:4d:f2:
30:23:83:79:09:fd:50:8a:fa:c6:38:07:86:81:9f:ed:5b:4a:
1b:71:3b:92:f9:af:c7:0c:d7:09:d8:52:e9:18:44:79:5e:ec:
0c:43:ce:48:32:aa:94:97:5e:d3:94:59:72:3c:c1:2b:82:75:
23:f3:a4:84:ee:34:16:ca:69:a2:de:5b:7f:2e:2a:e0:1d:2d:
5a:f7:13:a2:da:e1:fc:ca:d7:69:ed:9c:52:16:26:0c:c8:76:
7c:cd:ec:4b:5f:3c:d7:42:33:cb:9e:c4:a1:18:47:5d:0e:dc:
f3:03:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:18:50 2025 by rpki-client