Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/BaLeAhjFrO7QTZg_TIvl64RWWKg.roa
File: BaLeAhjFrO7QTZg_TIvl64RWWKg.roa (raw, json)
Hash identifier: ATxw2PdC0oF6EG5BvTCIlnjP6G7sQT7CSwOr8GqTr40=
Subject key identifier: 05:A2:DE:02:18:C5:AC:EE:D0:4D:98:3F:4C:8B:E5:EB:84:56:58:A8
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 17C5
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BaLeAhjFrO7QTZg_TIvl64RWWKg.roa
Signing time: Mon 10 Feb 2025 14:07:15 +0000
ROA not before: Mon 10 Feb 2025 14:07:15 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 203.70.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6085 (0x17c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:15 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=05A2DE0218C5ACEED04D983F4C8BE5EB845658A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:cd:8b:93:cc:27:b5:9a:09:fa:33:c7:14:
b2:72:02:6c:00:91:31:c8:86:ab:77:4f:7c:50:ba:
83:a5:2c:51:dd:14:71:84:3b:41:8a:02:a6:c0:d8:
88:69:09:97:aa:ff:66:6e:52:d4:4d:62:6a:63:d9:
1d:0c:3b:bd:44:d7:22:e7:34:ed:b8:d3:19:e8:1a:
5c:3a:c6:04:f3:47:5e:ac:56:85:3e:57:41:cf:97:
ef:12:56:f6:fa:f4:b3:a4:ee:6f:28:d4:6b:cc:c0:
2e:1a:4c:af:e3:48:ee:97:15:80:aa:af:d5:1c:0f:
a2:23:0b:93:08:ca:24:ac:2d:1b:fe:79:c2:fb:45:
84:c3:9b:52:34:51:de:80:9f:05:12:f7:9d:e4:b7:
41:7b:c6:6d:b0:5b:1d:ac:22:c5:ac:55:3d:8e:97:
20:23:21:eb:dd:d9:2c:a6:62:85:4c:db:ef:9f:d7:
5d:68:40:ba:02:33:27:f0:04:cd:b1:40:47:fd:ff:
e7:d3:8f:5a:94:9e:7c:7a:69:fd:de:ca:64:54:d5:
ee:ff:a2:d8:8c:99:87:f1:ad:2e:e9:1c:1b:a2:3e:
4b:52:20:84:31:f6:3f:70:ae:68:e0:4d:59:97:80:
d9:a7:99:fb:70:6b:6b:ae:5a:e8:fb:a0:61:e2:ac:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A2:DE:02:18:C5:AC:EE:D0:4D:98:3F:4C:8B:E5:EB:84:56:58:A8
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/BaLeAhjFrO7QTZg_TIvl64RWWKg.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
203.70.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:e9:5e:d0:78:1a:d4:e7:0e:27:b0:fa:dc:bd:b2:3a:96:12:
11:d4:61:24:70:43:ca:c1:e2:c2:74:29:47:56:79:f6:59:0c:
24:27:6a:8f:74:31:97:97:3b:34:a8:3a:8c:4e:d3:33:3b:e3:
9a:ab:ed:32:0d:bf:de:73:c1:fc:23:58:da:56:22:4a:d7:ef:
5d:a8:a9:6d:46:a5:41:b3:3a:79:95:21:82:5a:5c:fd:de:09:
60:95:5d:ed:7b:7c:6a:a9:24:7b:fb:3a:51:e1:d0:a5:bc:36:
ee:6c:32:6a:d1:8c:ec:c3:ba:16:0b:e0:07:e2:77:2f:80:c0:
6a:58:a0:e7:b4:dd:cb:1d:58:5c:b5:93:94:1b:4a:00:10:d3:
08:e3:09:5a:2e:3c:63:c8:23:16:46:6c:8d:3c:c9:b5:4d:e2:
04:7e:5c:45:28:07:ee:9d:7f:00:d6:f1:61:00:4a:e7:f2:91:
5b:9b:c4:4a:5c:14:78:3f:41:9e:a6:d1:56:02:b3:a2:ea:a3:
33:ad:e9:37:48:b1:92:f2:73:b7:c6:c1:a9:1c:76:bf:63:5b:
93:8c:9a:c0:20:13:cd:de:18:25:a3:65:f7:27:a0:1a:71:9f:
63:6e:f7:a1:67:61:40:d3:4a:41:6c:3e:32:07:c6:c4:b2:e8:
2e:d3:99:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:06:01 2025 by rpki-client