Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/NCIC/GXS0cm7vhAfDsWmVs7EpMiafBl0.roa
File: GXS0cm7vhAfDsWmVs7EpMiafBl0.roa (raw, json)
Hash identifier: gmmh0Hb2wlTwkoPJMT5zXmmgELGjANqkVXgtHQXVT5c=
Subject key identifier: 19:74:B4:72:6E:EF:84:07:C3:B1:69:95:B3:B1:29:32:26:9F:06:5D
Certificate issuer: /CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Certificate serial: 179F
Authority key identifier: 6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GXS0cm7vhAfDsWmVs7EpMiafBl0.roa
Signing time: Mon 10 Feb 2025 14:07:06 +0000
ROA not before: Mon 10 Feb 2025 14:07:06 +0000
ROA not after: Tue 26 Aug 2025 01:57:03 +0000
asID: 4780
IP address blocks: 112.105.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6047 (0x179f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6EE5B41857AD23D5BEE6716E31AA334BF2545B72
Validity
Not Before: Feb 10 14:07:06 2025 GMT
Not After : Aug 26 01:57:03 2025 GMT
Subject: CN=1974B4726EEF8407C3B16995B3B12932269F065D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:7b:77:2e:c9:f9:82:d1:ab:39:3f:bd:1b:
07:1a:69:a2:f4:4d:e2:4a:7b:7e:76:22:de:d2:62:
64:6c:c6:42:12:74:55:d5:3d:11:55:99:a9:4f:5f:
cf:ef:29:47:98:99:16:cd:d9:33:fd:13:4b:63:9c:
dd:3b:37:17:70:83:84:39:b8:0c:02:fb:bc:46:17:
44:6f:69:af:09:74:ef:7a:5e:54:4e:18:de:e8:2c:
d7:a9:e9:28:e3:d4:29:0b:04:ce:41:4c:b2:6d:a1:
ac:16:cb:d4:81:f9:6e:1e:55:77:10:05:28:dd:f1:
af:e7:f7:9f:ea:a4:24:09:4c:8c:4c:fb:3b:1e:6c:
62:37:47:6a:be:6b:20:29:8d:d2:12:ed:cb:0c:da:
c5:69:b2:c4:68:e5:e1:0a:3f:c5:6a:71:88:05:b3:
1e:5e:fe:fd:b3:13:b9:ea:06:4b:65:5d:b8:cb:b6:
a6:e3:4e:a5:01:d0:d3:d9:20:6e:bc:4a:fa:b5:2f:
8b:66:0d:1d:40:a2:55:f2:20:13:7e:4b:8e:18:56:
55:a6:f3:50:11:ca:55:3e:4e:c9:02:6c:67:3a:44:
fe:05:e1:eb:12:0c:48:0b:64:b6:96:81:25:90:c1:
c9:c7:51:b2:d4:19:17:c5:ef:e7:4f:3a:40:7c:31:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:74:B4:72:6E:EF:84:07:C3:B1:69:95:B3:B1:29:32:26:9F:06:5D
X509v3 Authority Key Identifier:
keyid:6E:E5:B4:18:57:AD:23:D5:BE:E6:71:6E:31:AA:33:4B:F2:54:5B:72
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/buW0GFetI9W-5nFuMaozS_JUW3I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/buW0GFetI9W-5nFuMaozS_JUW3I.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/NCIC/GXS0cm7vhAfDsWmVs7EpMiafBl0.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.105.64.0/18
Signature Algorithm: sha256WithRSAEncryption
51:00:b3:54:33:4d:7a:b4:ee:58:76:76:0b:8c:37:be:bb:18:
f8:be:0c:a6:ff:1d:0a:b3:1c:02:f3:09:71:6d:6d:06:f8:0a:
1b:3d:03:95:d8:97:c1:b3:2f:07:b9:2e:91:d5:b5:10:08:7d:
e3:2a:9b:99:10:78:25:71:77:ee:23:f7:a7:5d:d4:85:07:7c:
83:e6:b3:95:ba:4e:e7:19:57:a4:c1:57:38:f2:31:5f:b1:35:
a9:80:b5:b7:33:b2:5d:bf:35:16:3b:75:eb:9f:7d:ac:f8:31:
e4:c5:23:68:de:66:4a:da:eb:0b:25:46:7a:c8:b7:85:f8:6d:
95:0f:82:a4:c2:5c:e0:64:eb:69:e9:a1:eb:7f:57:73:69:cd:
f7:8a:ae:3f:64:30:61:ea:a5:14:ae:24:a0:c9:da:0f:5f:fe:
20:44:0d:75:43:3c:07:c3:69:8c:d4:ac:4b:17:74:fe:bc:2f:
00:14:ca:f6:88:63:98:f6:f2:b4:05:ba:d0:0e:11:51:ab:b2:
ad:ea:8b:34:cf:8e:a1:ec:ef:c8:0e:1c:57:79:3b:7e:ca:1d:
f0:17:ef:39:60:de:50:cc:4b:7c:bb:e9:c9:09:bd:21:2c:d2:
57:c0:e2:3e:2f:a6:52:66:18:14:60:d0:cb:46:ab:b5:2e:d1:
99:0d:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:39:44 2025 by rpki-client